配置squid使用NCSA认证问题(不成功)

q359960537

squid 软件版本:squid-3.0.r1.20071001_1

uname -a:
FreeBSD serv01.test.com 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sat Jul  5 21:19:40 CST 2008     root@serv01.test.com:/usr/src/sys/i386/compile/SERV01  i386

squid.conf 全文如下:

http_port 172.16.240.254:3128 transparent cache_mem 21 MB cache_swap_low 90 cache_swap_high 95 cache_dir ufs /home/squid/cache 400 16 256 cache_log /home/squid/logs cache_mgr san8365@163.com maximum_object_size 3 MB minimum_object_size 0 KB ipcache_size 1024 ipcache_low 90 ipcache_high 95 fqdncache_size 1024 visible_hostname serv01.test.com reply_body_max_size 10240 KB #auth authenticate_ip_ttl 600 seconds auth_param basic program /usr/local/libexec/squid/ncsa_auth /usr/local/etc/squid /passwd auth_param basic children 2 auth_param basic realm Welcome to Squid Proxy-caching Server auth_param basic credentialsttl 20 minutes auth_param basic casesensitive off authenticate_ip_ttl 600 seconds acl auth proxy_auth REQUIRED acl single max_user_ip 2 http_access deny single http_access allow auth http_access deny all error_directory /usr/local/etc/squid/errors/Simplify_Chinese

在logs最后有很多这样的提示:
ACHChecklist::authenticated: authentication not applicable on transparently intercepted requests.
加了认证之后好像不用认证都可以上网....和不加认证之前一样..晕
不知道为何解,望大家给看下...

[ 本帖最后由 q359960537 于 2008-7-18 18:02 编辑 ]

q359960537

我在局域网设置成了透明代理,和这个有关系吗???

q359960537

问题是我关了透明代理一样不行....把
ipfw.conf里这句去了
ipfw add fwd 172.16.240.254,3128 tcp from any to any 80 in
一样不行啊...在浏览器里设置LAN代理一样直接访问..晕
IPFW的全部的语句:
ipfw add allow ip from any to any via lo0
ipfw add allow tcp from 172.16.240.254 to any out
ipfw add allow tcp from any 80 to any out
ipfw add fwd 172.16.240.254,3128 tcp from any to any 80 in
ipfw add allow tcp from any 80 to me in
ipfw add deny icmp from any to me

都看过了....你没看见我什么时候注册的吗?现在才发1帖.能找都找了..帮忙分析下.吧

[ 本帖最后由 q359960537 于 2008-7-18 20:58 编辑 ]

q359960537

没人帮看下??大侠这么多的CU..

xwmhmily

!!!!!!!!!!!!!!!!!!!!!!

q359960537

我晕,这么久了也没有人回???
给点提示也好啊...

xiao6

squid的验证要客户端使用代理服务器才生效，就在IE或FF里设置代理才行，和ipfw没关系。用了IPFW后，验证也就没什么意义了。