一个月的心血！iptables+NAT+squid 透明代理上网实现方案

yagu1234

不过squid 的日志长的很快，各位有没有什么好办法让它限制大小，比如超过多少字节就 自动删除某个日期以前的日志

zxdzhj

我也在最近尝试着用Squid+iptables做透明代理，但没有看到网页访问速度变快，反而出了不少的问题。总是DNS解析不好，在access.log中狂出以下的错误：
2004/05/24 21:52:28| WARNING! Your cache is running out of filedescriptors
2004/05/24 21:52:44| WARNING! Your cache is running out of filedescriptors
2004/05/24 21:53:00| WARNING! Your cache is running out of filedescriptors
2004/05/24 21:53:16| WARNING! Your cache is running out of filedescriptors
2004/05/24 21:53:32| WARNING! Your cache is running out of filedescriptors
2004/05/24 21:53:48| WARNING! Your cache is running out of filedescriptors
2004/05/24 21:54:04| WARNING! Your cache is running out of filedescriptors
2004/05/24 21:54:20| WARNING! Your cache is running out of filedescriptors
2004/05/24 21:54:36| WARNING! Your cache is running out of filedescriptors
2004/05/24 21:54:52| WARNING! Your cache is running out of filedescriptors
2004/05/24 21:55:08| WARNING! Your cache is running out of filedescriptors
2004/05/24 21:55:24| WARNING! Your cache is running out of filedescriptors
2004/05/24 21:55:40| WARNING! Your cache is running out of filedescriptors
2004/05/24 21:55:56| WARNING! Your cache is running out of filedescriptors
2004/05/24 21:56:12| WARNING! Your cache is running out of filedescriptors
2004/05/24 22:03:14| ipcacheParse: No Address records
2004/05/24 22:04:10| ipcacheParse: No Address records
2004/05/24 22:07:51| ipcacheParse: No Address records
2004/05/24 22:08:08| ipcacheParse: No Address records
2004/05/24 22:11:46| ipcacheParse: No Address records
2004/05/24 22:15:51| ipcacheParse: No Address records
请教高手，有谁做透明代理＋squid成功的，给指点一下。

heguolin

iptables做了nat和端口转向后，在将squid按照楼主所说配置一下，可以使用squid透明上网了，我把access.log清空观察一下，确实是通过了squid.而且
当不设置httpd_accel_host时，访问网页将返回squid提示找不到url定位的资源的错误报告页，证明确实真的通过了squid了，不是表面功夫。