放出代码，看的懂的给点提示，跪谢了。

lroot

2011/03/07 17:53:57| WARNING: '.cpdc.com.cn' is a subdomain of '.cpdc.com.cn'
2011/03/07 17:53:57| WARNING: because of this '.cpdc.com.cn' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '.cpdc.com.cn' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: '.ems.com.cn' is a subdomain of '.ems.com.cn'
2011/03/07 17:53:57| WARNING: because of this '.ems.com.cn' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '.ems.com.cn' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: '.globalsourcing.groupe-casino.fr' is a subdomain of '.globalsourcing.groupe-casino.fr'
2011/03/07 17:53:57| WARNING: because of this '.globalsourcing.groupe-casino.fr' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '.globalsourcing.groupe-casino.fr' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: '.keyue.net' is a subdomain of '.keyue.net'
2011/03/07 17:53:57| WARNING: because of this '.keyue.net' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '.keyue.net' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: '.keyue.net' is a subdomain of '.keyue.net'
2011/03/07 17:53:57| WARNING: because of this '.keyue.net' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '.keyue.net' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: '.nbport.com.cn' is a subdomain of '.nbport.com.cn'
2011/03/07 17:53:57| WARNING: because of this '.nbport.com.cn' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '.nbport.com.cn' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: '.tslines.com' is a subdomain of '.tslines.com'
2011/03/07 17:53:57| WARNING: because of this '.tslines.com' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '.tslines.com' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: '.xiamen.customs.gov.cn' is a subdomain of '.customs.gov.cn'
2011/03/07 17:53:57| WARNING: because of this '.xiamen.customs.gov.cn' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '.xiamen.customs.gov.cn' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: '.zjt.gov.cn' is a subdomain of '.zjt.gov.cn'
2011/03/07 17:53:57| WARNING: because of this '.zjt.gov.cn' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '.zjt.gov.cn' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: '221.12.54.78' is a subdomain of '221.12.54.78'
2011/03/07 17:53:57| WARNING: because of this '221.12.54.78' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '221.12.54.78' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: '.58tie.com' is a subdomain of '58tie.com'
2011/03/07 17:53:57| WARNING: because of this '58tie.com' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '.58tie.com' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: '.anl.com.au' is a subdomain of 'anl.com.au'
2011/03/07 17:53:57| WARNING: because of this 'anl.com.au' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '.anl.com.au' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: '.anl.com.au' is a subdomain of 'anl.com.au'
2011/03/07 17:53:57| WARNING: because of this 'anl.com.au' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '.anl.com.au' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: '.chinadaily.com.cn' is a subdomain of 'chinadaily.com.cn'
2011/03/07 17:53:57| WARNING: because of this 'chinadaily.com.cn' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '.chinadaily.com.cn' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: '.google.com' is a subdomain of 'google.com'
2011/03/07 17:53:57| WARNING: because of this 'google.com' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '.google.com' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: '.google.com' is a subdomain of 'google.com'
2011/03/07 17:53:57| WARNING: because of this 'google.com' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '.google.com' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: '.karcher.com' is a subdomain of 'karcher.com'
2011/03/07 17:53:57| WARNING: because of this 'karcher.com' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '.karcher.com' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: '.karcher.com' is a subdomain of 'karcher.com'
2011/03/07 17:53:57| WARNING: because of this 'karcher.com' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '.karcher.com' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: 'lxkndworkflow02.ger.win.int.kn' is a subdomain of '.int.kn'
2011/03/07 17:53:57| WARNING: because of this 'lxkndworkflow02.ger.win.int.kn' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove 'lxkndworkflow02.ger.win.int.kn' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: 'lxkndworkflow02.ger.win.int.kn' is a subdomain of '.int.kn'
2011/03/07 17:53:57| WARNING: because of this 'lxkndworkflow02.ger.win.int.kn' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove 'lxkndworkflow02.ger.win.int.kn' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: '.misc.com.my' is a subdomain of 'misc.com.my'
2011/03/07 17:53:57| WARNING: because of this 'misc.com.my' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '.misc.com.my' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: 'nbky2008.gicp.net' is a subdomain of '.gicp.net'
2011/03/07 17:53:57| WARNING: because of this 'nbky2008.gicp.net' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove 'nbky2008.gicp.net' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: 'nbky2008.gicp.net' is a subdomain of '.gicp.net'
2011/03/07 17:53:57| WARNING: because of this 'nbky2008.gicp.net' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove 'nbky2008.gicp.net' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: '.nbmsa.gov.cn' is a subdomain of 'nbmsa.gov.cn'
2011/03/07 17:53:57| WARNING: because of this 'nbmsa.gov.cn' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '.nbmsa.gov.cn' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: '.nbmsa.gov.cn' is a subdomain of 'nbmsa.gov.cn'
2011/03/07 17:53:57| WARNING: because of this 'nbmsa.gov.cn' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '.nbmsa.gov.cn' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: 'ots.conair.com.hk' is a subdomain of '.conair.com.hk'
2011/03/07 17:53:57| WARNING: because of this 'ots.conair.com.hk' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove 'ots.conair.com.hk' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: 'ots.conair.com.hk' is a subdomain of '.conair.com.hk'
2011/03/07 17:53:57| WARNING: because of this 'ots.conair.com.hk' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove 'ots.conair.com.hk' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: '.shipmentlink.com' is a subdomain of 'shipmentlink.com'
2011/03/07 17:53:57| WARNING: because of this 'shipmentlink.com' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '.shipmentlink.com' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: '.shipmentlink.com' is a subdomain of 'shipmentlink.com'
2011/03/07 17:53:57| WARNING: because of this 'shipmentlink.com' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '.shipmentlink.com' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: '.sinotrans.com' is a subdomain of 'sinotrans.com'
2011/03/07 17:53:57| WARNING: because of this 'sinotrans.com' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '.sinotrans.com' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: '.sinotrans.com' is a subdomain of 'sinotrans.com'
2011/03/07 17:53:57| WARNING: because of this 'sinotrans.com' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove '.sinotrans.com' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: 'web.wanhai.com' is a subdomain of '.wanhai.com'
2011/03/07 17:53:57| WARNING: because of this 'web.wanhai.com' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove 'web.wanhai.com' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: 'web.wanhai.com' is a subdomain of '.wanhai.com'
2011/03/07 17:53:57| WARNING: because of this 'web.wanhai.com' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove 'web.wanhai.com' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: 'www.baidu.com' is a subdomain of '.baidu.com'
2011/03/07 17:53:57| WARNING: because of this 'www.baidu.com' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove 'www.baidu.com' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: 'www.wanhai.com' is a subdomain of '.wanhai.com'
2011/03/07 17:53:57| WARNING: because of this 'www.wanhai.com' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove 'www.wanhai.com' from the ACL named 'Safe_Address_List'
2011/03/07 17:53:57| WARNING: 'www.wanhai.com' is a subdomain of '.wanhai.com'
2011/03/07 17:53:57| WARNING: because of this 'www.wanhai.com' is ignored to keep splay tree searching predictable
2011/03/07 17:53:57| WARNING: You should probably remove 'www.wanhai.com' from the ACL named 'Safe_Address_List'
WARNING: Cannot write log file: /var/log/squid/cache.log
/var/log/squid/cache.log: Permission denied
         messages will be sent to 'stderr'.
2011/03/07 17:53:57| Starting Squid Cache version 2.7.STABLE9 for i386-debian-linux-gnu...
2011/03/07 17:53:57| Process ID 1021
2011/03/07 17:53:57| With 1024 file descriptors available
2011/03/07 17:53:57| Using epoll for the IO loop
2011/03/07 17:53:57| Performing DNS Tests...
2011/03/07 17:53:57| Successful DNS name lookup tests...
2011/03/07 17:53:57| DNS Socket created at 0.0.0.0, port 41372, FD 5
2011/03/07 17:53:57| Adding nameserver 10.86.210.3 from /etc/resolv.conf
2011/03/07 17:53:57| Adding nameserver 10.70.252.28 from /etc/resolv.conf
2011/03/07 17:53:57| Adding nameserver 10.95.255.5 from /etc/resolv.conf
2011/03/07 17:53:57| Adding domain ap.win.int.kn from /etc/resolv.conf
2011/03/07 17:53:57| Adding domain ap.win.int.kn from /etc/resolv.conf
2011/03/07 17:53:57| User-Agent logging is disabled.
2011/03/07 17:53:57| Referer logging is disabled.
2011/03/07 17:53:57| logfileOpen: opening log /var/log/squid/access.log
FATAL: Cannot open '/var/log/squid/access.log' for writing.
        The parent directory must be writeable by the
        user 'proxy', which is the cache_effective_user
        set in squid.conf.
Squid Cache (Version 2.7.STABLE9): Terminated abnormally.
CPU Usage: 0.008 seconds = 0.008 user + 0.000 sys
Maximum Resident Size: 6656 KB
Page faults with physical i/o: 0
Aborted

是我别封号

一、.google.com意思是*.google.com，有了它就不能再有例如www.google.com、abc.google.com。当然，一个列表中不能有两个.google.com。重新整理筛选一下。
二、“/var/log/squid/cache.log: Permission denied”，如果没有特别设定，运行：
chown -R squid:squid /var/log/squid/
三、service squid start之前，先squid -z

lroot

chown -R squid:squid /var/log/squid/
chown: invalid user: `squid:squid'

提示错误

是我别封号

chown -R squid:squid /var/log/squid/
chown: invalid user: `squid:squid'

提示错误
lroot 发表于 2011-03-08 09:47

    chown -R proxy:proxy /var/log/squid/

meeslo

acl dstdomain  'Safe_Address_List'有包含的不行 ,
考虑用url_regex  来写,而不用dstdomain.