FB+PF+Squid+WCCP 代理QQ问题

foxleoly

最近在公司部署了web cache.结果cisco switch+wccp.现在透明带来并且web cache都已经搞定,就是QQ无法登陆...老是提示服务器超市...有什么办法可以让QQ登陆成功呢???下面是我的配置:

1. bash# more /etc/pf.conf
   
2. rdr on re0 inet proto tcp from any to any port www -> 127.0.0.1 port 3128
   
3. rdr on re0 inet proto tcp from any to any port 443 -> 127.0.0.1 port 3128
   
4. rdr on re0 inet proto udp from any port 4000 to any port 8000 -> 0/32
   
5. rdr on re0 inet proto udp from any port 4001 to any port 8000 -> 0/32
   
6. rdr on re0 inet proto udp from any port 4002 to any port 8000 -> 0/32
   
7. rdr on re0 inet proto udp from any port 4003 to any port 8000 -> 0/32
   
8. rdr on re0 inet proto udp from any port 4004 to any port 8000 -> 0/32
   
9. rdr on re0 inet proto udp from any port 4005 to any port 8000 -> 0/32
   
10. rdr on re0 inet proto udp from any port 4006 to any port 8000 -> 0/32
    
11. rdr on re0 inet proto udp from any port 4007 to any port 8000 -> 0/32
    
12. rdr on re0 inet proto udp from any port 4008 to any port 8000 -> 0/32
    
13. 
    
14. bash# more /usr/local/etc/squid/squid.conf
    
15. 文件太大,copy了主要部分:
    
16. #
    
17. acl SSL_ports port 443
    
18. acl Safe_ports port 80          # http
    
19. acl Safe_ports port 21          # ftp
    
20. acl Safe_ports port 443         # https
    
21. acl Safe_ports port 70          # gopher
    
22. acl Safe_ports port 210         # wais
    
23. acl Safe_ports port 1025-65535  # unregistered ports
    
24. acl Safe_ports port 280         # http-mgmt
    
25. acl Safe_ports port 488         # gss-http
    
26. acl Safe_ports port 591         # filemaker
    
27. acl Safe_ports port 777         # multiling http
    
28. acl CONNECT method CONNECT
    
29. http_access allow manager localhost
    
30. http_access deny manager
    
31. wccp2_router x.x.x.x
    
32. wccp2_router x.x.x.x:2048
    
33. #wccp2_rebuild_wait on
    
34. wccp2_forwarding_method 2
    
35. wccp2_return_method 2
    
36. wccp2_assignment_method 2
    
37. wccp2_service standard 0
    
38. wccp2_service dynamic 80
    
39. wccp2_service_info 80 protocol=tcp flags=src_ip_hash,ports_source priority=100 ports=80
    
40. wccp2_address x.x.x.x
    

复制代码

QQ登陆时有这样的信息:
TCP_DENIED/400 1519 NONE NONE:// - NONE/- text/html
TCP_DENIED/400 1519 NONE NONE:// - NONE/- text/html

这个是不是和QQ的数据包有关系?麻烦各位大哥帮小弟解决一下!!
谢谢啦!

foxleoly

再顶一下......各位大哥们,有什么想法都可以说说看...现在偶是没头绪了...