Menu
▾
▴
[leaf-user] Tiny Proxy Setup Problem
|
From: David P. <dp...@li...> - 2004-05-14 08:38:05
|
Hi folks. I know tinyproxy is not really supported by this group and I have posted on the tiny proxy list, but I just thought that maybe someone has some insight into the proper configuration of proxies! I am trying to set up a TinyProxy on my LEAF Bering uClib Shorewall firewall and although everything looks ok, it doesn't work!! When I try to browse through it I get 'The page cannot be displayed" Would someone be prepared to have a look at my config and logs and tell me if there's anything obviously wrong? Thanks. TinyProxy Log INFO May 14 10:23:29 [32315]: Initializing tinyproxy ... INFO May 14 10:23:29 [32315]: Setting "Via" proxy name to: tinyproxy INFO May 14 10:23:29 [32315]: Adding Port [443] to the list allowed by CONNECT INFO May 14 10:23:29 [32315]: Adding Port [563] to the list allowed by CONNECT INFO May 14 10:23:29 [32315]: Setting stathost to "tinyproxy.stats". INFO May 14 10:23:29 [27390]: Now running as group "root". INFO May 14 10:23:29 [27390]: Now running as user "root". INFO May 14 10:23:29 [27390]: Creating child number 1 of 10 ... INFO May 14 10:23:29 [27390]: Creating child number 2 of 10 ... INFO May 14 10:23:29 [27390]: Creating child number 3 of 10 ... INFO May 14 10:23:29 [27390]: Creating child number 4 of 10 ... INFO May 14 10:23:29 [27390]: Creating child number 5 of 10 ... INFO May 14 10:23:29 [27390]: Creating child number 6 of 10 ... INFO May 14 10:23:29 [27390]: Creating child number 7 of 10 ... INFO May 14 10:23:29 [27390]: Creating child number 8 of 10 ... INFO May 14 10:23:29 [27390]: Creating child number 9 of 10 ... INFO May 14 10:23:29 [27390]: Creating child number 10 of 10 ... INFO May 14 10:23:29 [27390]: Finished creating all children. INFO May 14 10:23:29 [27390]: Setting the various signals. INFO May 14 10:23:29 [27390]: Starting main loop. Accepting connections. CONNECT May 14 10:23:45 [7205]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:23:45 [7205]: Request (file descriptor 11): GET http://directory.uwa.edu.au/ HTTP/1.1 CONNECT May 14 10:26:49 [2517]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:26:49 [2517]: Request (file descriptor 11): GET http://directory.uwa.edu.au/ HTTP/1.1 CONNECT May 14 10:29:00 [559]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:29:00 [559]: Request (file descriptor 11): GET http://directory.uwa.edu.au/ HTTP/1.1 CONNECT May 14 10:29:03 [1516]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:29:03 [1516]: Request (file descriptor 11): GET http://directory.uwa.edu.au/ HTTP/1.1 CONNECT May 14 10:29:04 [20275]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:29:04 [20275]: Request (file descriptor 11): GET http://directory.uwa.edu.au/ HTTP/1.1 CONNECT May 14 10:29:04 [7433]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:29:04 [7433]: Request (file descriptor 11): GET http://directory.uwa.edu.au/ HTTP/1.1 NOTICE May 14 10:29:04 [27390]: Waiting servers (4) is less than MinSpareServers (5). Creating new child. CONNECT May 14 10:29:05 [10301]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:29:05 [10301]: Request (file descriptor 11): GET http://directory.uwa.edu.au/ HTTP/1.1 NOTICE May 14 10:29:05 [27390]: Waiting servers (4) is less than MinSpareServers (5). Creating new child. CONNECT May 14 10:29:06 [26827]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:29:06 [26827]: Request (file descriptor 11): GET http://directory.uwa.edu.au/ HTTP/1.1 NOTICE May 14 10:29:06 [27390]: Waiting servers (4) is less than MinSpareServers (5). Creating new child. CONNECT May 14 10:29:07 [27010]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:29:07 [27010]: Request (file descriptor 11): GET http://directory.uwa.edu.au/ HTTP/1.1 NOTICE May 14 10:29:07 [27390]: Waiting servers (4) is less than MinSpareServers (5). Creating new child. CONNECT May 14 10:29:07 [3014]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:29:07 [3014]: Request (file descriptor 11): GET http://directory.uwa.edu.au/ HTTP/1.1 NOTICE May 14 10:29:07 [27390]: Waiting servers (4) is less than MinSpareServers (5). Creating new child. CONNECT May 14 10:29:07 [17217]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:29:07 [17217]: Request (file descriptor 11): GET http://directory.uwa.edu.au/ HTTP/1.1 NOTICE May 14 10:29:07 [27390]: Waiting servers (4) is less than MinSpareServers (5). Creating new child. CONNECT May 14 10:29:09 [14862]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:29:09 [14862]: Request (file descriptor 11): GET http://directory.uwa.edu.au/ HTTP/1.1 NOTICE May 14 10:29:09 [27390]: Waiting servers (4) is less than MinSpareServers (5). Creating new child. CONNECT May 14 10:29:09 [496]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:29:09 [496]: Request (file descriptor 11): GET http://directory.uwa.edu.au/ HTTP/1.1 NOTICE May 14 10:29:09 [27390]: Waiting servers (4) is less than MinSpareServers (5). Creating new child. CONNECT May 14 10:29:10 [24485]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:29:10 [24485]: Request (file descriptor 11): GET http://directory.uwa.edu.au/ HTTP/1.1 NOTICE May 14 10:29:10 [27390]: Waiting servers (4) is less than MinSpareServers (5). Creating new child. CONNECT May 14 10:29:10 [31446]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:29:10 [31446]: Request (file descriptor 11): GET http://directory.uwa.edu.au/ HTTP/1.1 NOTICE May 14 10:29:10 [27390]: Waiting servers (4) is less than MinSpareServers (5). Creating new child. CONNECT May 14 10:29:10 [31170]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:29:10 [31170]: Request (file descriptor 11): GET http://directory.uwa.edu.au/ HTTP/1.1 NOTICE May 14 10:29:10 [27390]: Waiting servers (4) is less than MinSpareServers (5). Creating new child. CONNECT May 14 10:29:10 [18653]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:29:10 [18653]: Request (file descriptor 11): GET http://directory.uwa.edu.au/ HTTP/1.1 NOTICE May 14 10:29:10 [27390]: Waiting servers (4) is less than MinSpareServers (5). Creating new child. CONNECT May 14 10:30:32 [1310]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:30:32 [1310]: Request (file descriptor 11): GET http://directory.uwa.edu.au/ HTTP/1.1 NOTICE May 14 10:30:32 [27390]: Waiting servers (4) is less than MinSpareServers (5). Creating new child. CONNECT May 14 10:30:32 [4421]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:30:32 [4421]: Request (file descriptor 11): GET http://directory.uwa.edu.au/ HTTP/1.1 NOTICE May 14 10:30:32 [27390]: Waiting servers (4) is less than MinSpareServers (5). Creating new child. CONNECT May 14 10:30:41 [4989]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:30:41 [4989]: Request (file descriptor 11): GET http://directory.uwa.edu.au/ HTTP/1.1 NOTICE May 14 10:30:41 [27390]: Waiting servers (4) is less than MinSpareServers (5). Creating new child. CONNECT May 14 10:30:48 [3182]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:30:48 [3182]: Request (file descriptor 11): GET http://directory.uwa.edu.au/ HTTP/1.1 NOTICE May 14 10:30:48 [27390]: Waiting servers (4) is less than MinSpareServers (5). Creating new child. CONNECT May 14 10:30:49 [17524]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:30:49 [17524]: Request (file descriptor 11): GET http://directory.uwa.edu.au/ HTTP/1.1 NOTICE May 14 10:30:49 [27390]: Waiting servers (4) is less than MinSpareServers (5). Creating new child. CONNECT May 14 10:30:50 [29965]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:30:50 [29965]: Request (file descriptor 11): GET http://directory.uwa.edu.au/ HTTP/1.1 NOTICE May 14 10:30:50 [27390]: Waiting servers (4) is less than MinSpareServers (5). Creating new child. CONNECT May 14 10:30:56 [5240]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:30:56 [5240]: Request (file descriptor 11): GET http://www.library.uwa.edu.au/ HTTP/1.1 NOTICE May 14 10:30:56 [27390]: Waiting servers (4) is less than MinSpareServers (5). Creating new child. CONNECT May 14 10:30:58 [20920]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:30:58 [20920]: Request (file descriptor 11): GET http://www.library.uwa.edu.au/ HTTP/1.1 NOTICE May 14 10:30:58 [27390]: Waiting servers (4) is less than MinSpareServers (5). Creating new child. CONNECT May 14 10:30:58 [21910]: Connect (file descriptor 11): lib-it-s07.lib-staff.library.uwa.edu.au [130.95.223.207] CONNECT May 14 10:30:58 [21910]: Request (file descriptor 11): GET http://www.library.uwa.edu.au/ HTTP/1.1 NOTICE May 14 10:30:58 [27390]: Waiting servers (4) is less than MinSpareServers (5). Creating new child. Config ## ## tinyproxy.conf -- tinyproxy daemon configuration file ## # # Name of the user the tinyproxy daemon should switch to after the port # has been bound. # User root Group root # # Port to listen on. # Port 8888 # # If you have multiple interfaces this allows you to bind to only one. If # this is commented out, tinyproxy will bind to all interfaces present. # #Listen 192.168.0.1 # # The Bind directive allows you to bind the outgoing connections to a # particular IP address. # #Bind 192.168.0.1 # # Timeout: The number of seconds of inactivity a connection is allowed to # have before it closed by tinyproxy. # Timeout 600 # # Where to log the information. Either LogFile or Syslog should be set, # but not both. # Logfile "/var/log/tinyproxy.log" # Syslog On # # Set the logging level. Allowed settings are: # Critical (least verbose) # Error # Warning # Notice # Connect (to log connections without Info's noise) # Info (most verbose) # The LogLevel logs from the set level and above. For example, if the LogLevel # was set to Warning, than all log messages from Warning to Critical would be # output, but Notice and below would be suppressed. # LogLevel Info # # PidFile: Write the PID of the main tinyproxy thread to this file so it # can be used for signalling purposes. # PidFile "/var/run/tinyproxy.pid" # # Include the X-Tinyproxy header, which has the client's IP address when # connecting to the sites listed. # #XTinyproxy thepitts.ods.org # # Turns on upstream proxy support. # # The upstream rules allow you to selectively route upstream connections # based on the host/domain of the site being accessed. # # For example: # # connection to test domain goes through testproxy # upstream testproxy:8008 ".test.domain.invalid" # upstream testproxy:8008 ".our_testbed.example.com" # upstream testproxy:8008 "192.168.128.0/255.255.254.0" # # # no upstream proxy for internal websites and unqualified hosts # no upstream ".internal.example.com" # no upstream "www.example.com" # no upstream "10.0.0.0/8" # no upstream "192.168.0.0/255.255.254.0" # no upstream "." # # # connection to these boxes go through their DMZ firewalls # upstream cust1_firewall:8008 "testbed_for_cust1" # upstream cust2_firewall:8008 "testbed_for_cust2" # # # default upstream is internet firewall # upstream firewall.internal.example.com:80 # # The LAST matching rule wins the route decision. As you can see, you # can use a host, or a domain: # name matches host exactly # .name matches any host in domain "name" # . matches any host with no domain (in 'empty' domain) # IP/bits matches network/mask # IP/mask matches network/mask # #Upstream some.remote.proxy:port # # This is the absolute highest number of threads which will be created. In # other words, only MaxClients number of clients can be connected at the # same time. # MaxClients 100 # # These settings set the upper and lower limit for the number of # spare servers which should be available. If the number of spare servers # falls below MinSpareServers then new ones will be created. If the number # of servers exceeds MaxSpareServers then the extras will be killed off. # MinSpareServers 5 MaxSpareServers 20 # # Number of servers to start initially. # StartServers 10 # # MaxRequestsPerChild is the number of connections a thread will handle # before it is killed. In practise this should be set to 0, which disables # thread reaping. If you do notice problems with memory leakage, then set # this to something like 10000 # MaxRequestsPerChild 0 # # The following is the authorization controls. If there are any access # control keywords then the default action is to DENY. Otherwise, the # default action is ALLOW. # # Also the order of the controls are important. The incoming connections # are tested against the controls based on order. # Allow 127.0.0.1 Allow 192.168.1.0/24 Allow 130.95.223.0/24 # # The "Via" header is required by the HTTP RFC, but using the real host name # is a security concern. If the following directive is enabled, the string # supplied will be used as the host name in the Via header; otherwise, the # server's host name will be used. # ViaProxyName "tinyproxy" # # The location of the filter file. # Filter "/etc/tinyproxy/filter" # # Filter based on URLs rather than domains. # #FilterURLs On # # Use POSIX Extended regular expressions rather than basic. # #FilterExtended On # # Use case sensitive regular expressions. # #FilterCaseSensitive On =20 # # Change the default policy of the filtering system. If this directive is # commented out, or is set to "No" then the default policy is to allow # everything which is not specifically denied by the filter file. # # However, by setting this directive to "Yes" the default policy becomes to # deny everything which is _not_ specifically allowed by the filter file. # #FilterDefaultDeny Yes # # If an Anonymous keyword is present, then anonymous proxying is enabled. # The headers listed are allowed through, while all others are denied. If # no Anonymous keyword is present, then all header are allowed through. # You must include quotes around the headers. # #Anonymous "Host" #Anonymous "Authorization" # # This is a list of ports allowed by tinyproxy when the CONNECT method # is used. To disable the CONNECT method altogether, set the value to 0. # If no ConnectPort line is found, all ports are allowed (which is not # very secure.) # # The following two ports are used by SSL. # ConnectPort 443 ConnectPort 563 Firewall Rule/Policy # Tiny Proxy ACCEPT net fw tcp 8888 fw net ACCEPT Is it possible that my problem is caused by extreme slowness. I am on a very fast like at work, proxying through my home PC which has a cable connection which has traditionally been fast(ish). Any advice? Any assistance gratefully accepted! Thanks. David Pitts IT Services Manager Reid Library=20 University of Western Australia Telephone: (08) 6488 3492 Fax: (08) 6488 1012 |
