ubuntu 使用代理服务器 squid

ゝ一世哀愁。 2022-05-09 15:54 788阅读 0赞

**一、代理服务器**

**简介：**

代理服务器是目前网络中常见的服务器之一，它可以提供文件  
缓存、复制和地址过滤等服务，充分利用有限的出口带宽，加快  
内部主机的访问速度，也可以解决多用户需要同时访问外网但公  
有IP地址不足的问题。同时可以作为一个防火墙，隔离内网与外  
网，并且能提供监控网络和记录传输信息的功能，加强局域网的  
安全性等。它的主要作用有以下几点。  
1．共享网络  
2．加快访问速度，节约通信带宽  
3．防止内部主机受到攻击  
4．限制用户访问，完善网络管理

**原理： **

① 客户端A向代理服务器提出访问**Internet的请求**。  
② 代理服务器接受到请求后，首先**与访问控制列表中的访问规则相对照**，如果满足规则，则在**缓存中查找**是否存在需要的信息。  
③ 如果**缓存中存在**客户端A需要的信息，则将**信息传送给客户端**。如果**不存在**，代理服务器就**代替客户端**向Internet上的主机请求指定的信息。  
④ Internet上的主机将代理服务器的请求信息发送到代理服务器中，同时**代理服务器**会将信息存入缓存中。  
⑤ 代理服务器**将Internet上主机的回应信息**传送给客户端A。  
⑥ 客户端B向代理服务器提出相同的请求。  
⑦ 代理服务器也首先与访问控制列表中的访问规则相对照。  
⑧ 如果满足规则，则将缓存中的信息传送给客户端B。

[![image][]][image 1]

**二、squid简介  **

Squid是Linux和UNIX平台下最为流行的高性能免费应用  
层代理服务器，它具有权限管理灵活、性能高和效率快等特  
点。Squid是一个由众多在互联网上的开发人员共同努力完  
成的高性能的代理缓冲服务器，它的具体开发是由国家网络  
应用研究室（the National Laboratory for Applied Network  
Research）的Duane Wessels主持，由NSF出资支持的。  
    Squid的另一个优越性在于它使用**访问控制列表（ACL）**  
和**访问权限列表（ARL）**进行**权限管理**和**内容过滤**。访问控  
制清单和访问权限清单通过阻止特定的网络连接来减少潜在  
的Internet非法连接，可以使用这些清单来确保内部网的主  
机无法访问有威胁的或不适宜的站点。

**三、CDN简介：**

[![image][image 2]][image_image 2]

[![image][image 3]][image_image 3]

[![image][image 4]][image_image 4]

[![image][image 5]][image_image 5]

[![image][image 6]][image_image 6]

[![image][image 7]][image_image 7]

[![image][image 8]][image_image 8]

[![image][image 9]][image_image 9]

**文件下载加速服务：**

[![image][image 10]][image_image 10]

**四、Web缓存的类型和特点:**

Web缓存的位置可以有三种，一是可以防止在客户端，二是放在服务器，三是放在客户端与服务器之间的某个网络节点上，这个网络节点就是web代理服务器。

1 客户端缓存

2 代理服务器缓存

3 服务器缓存

三种典型的代理方式

1 传统代理

2 透明代理

3 反向代理

**五、配置简介**

**1.查看是否已安装squid**

Red Hat Enterprise Linux 5安装程序默认没有安装Squid  
服务，读者可以使用下面的命令检查系统是否已经安装了  
Squid服务或查看已经安装了何种版本。  
rpm -q squid

**2.Squid代理服务的基本配置**

**2.1 Squid主配置文件**是**/etc/squid/squid.conf** ，最基本的设置如下。  
http\_port **192.168.16.1**:8080     
cache\_mem 64 MB  
cache\_dir ufs /var/spool/squid 4096 16 256  
cache\_effective\_user squid  
cache\_effective\_group squid  
dns\_nameservers 61.144.56.101  
cache\_access\_log /var/log/squid/access.log  
cache\_log /var/log/squid/cache.log  
cache\_store\_log /var/log/squid/store.log  
visible\_hostname 192.168.16.1  
cache\_mgr lindenstar@163.com  
acl all src 0.0.0.0/0.0.0.0  
http\_access allow all

**2.2 acl选项的格式如下：**  
acl列表名称 列表类型 \[-i\] 列表值  
列表名称：用于区分Squid的各个访问控制列表，任何两个访问控制列表不能用相同的列表名。虽然列表名称可以随便定义，但为了避免以后不知道这条列表是干什么用的，应尽量使用有意义的名称，如badurl、clientip和work time等。  
列表类型：是可被Squid识别的类别。Squid支持的控制类别很多，可以通过IP地址、主机名、MAC地址和用户/密码认证等识别用户，也可以通过域名、域后缀、文件类型、IP地址、端口和URL匹配等控制用户的访问，还可以使用时间区间对用户进行管理  
\-i选项：表示忽略列表值的大小写，否则Squid是区分大小写的。  
列表值：针对不同的类型，列表值的内容是不同的。例如，对于类型为src或dst，列表值的内容是某台主机的IP地址或子网地址；对于类型为time，列表值的内容是时间；对于类型为srcdomain和dstdomain，列表值的内容是DNS域名。

类型选项

[![image][image 11]][image_image 11]

**2.3 http\_access 的使用**

Squid会针对客户HTTP请求检查http\_access规则，  
定义访问控制列表后，就使用http\_access选项根据访  
问控制列表允许或禁止访问了。  
该选项的基本格式为：  
http\_access \[allow | deny\] 访问控制列表名称  
?  \[allow | deny\]：定义允许（allow）或禁止（deny）访问控制列表定义的内容。  
?  访问控制列表名称：需要http\_access控制的ACL名称

**2.4 初始化Squid**

1．创建Squid使用硬盘缓冲区的目录结构  
/usr/sbin/squid –z  
2．设置Squid错误提示信息为中文  
    在Squid的主配置文件/etc/squid/squid.conf中添加下  
列语句，并使用命令“/etc/init.d/squid reload”重新载  
入配置文件  
error\_directory /usr/share/squid/errors/Simplify\_Chinese

2.5启动和停止代理服务器

1．启动代理服务  
/etc/init.d/squid start  
2．停止代理服务  
/etc/init.d/squid stop  
3．重新启动代理服务  
/etc/init.d/squid restart  
4．重新载入配置文件  
/etc/rc.d/init.d/squid reload

**六、具体案例**

**案例一：传统代理：**

[![image][image 12]][image_image 12]

**介绍：**

**代理服务器（squid）：Red Hat Linux 5.4**

**（eth1 ：Host-only 到vmware1 **

**   eth0： Bridged 到本地连接）**

**内网主机：windows xp  （虚拟机Host-only）**

**实机（windows 7）通过无线路由器直接上网！**

**1.用setup配网络参数:**

[![image][image 13]][image_image 13][![image][image 14]][image_image 14][![image][image 15]][image_image 15][![image][image 16]][image_image 16][![image][image 17]][image_image 17]

**2. 安装squid**

\[root@gjp99 ~\]\# mkdir /mnt/cdrom

\[root@gjp99 ~\]\# mount /dev/cdrom /mnt/cdrom  
mount: block device /dev/cdrom is write-protected, mounting read-only

[![image][image 18]][image_image 18]

\[root@gjp99 Server\]\# rpm -ql squid |less

查看注释语句：

/etc/httpd/conf.d/squid.conf   //和Apache的代理捆绑在一起

/etc/pam.d/squid          //支持pam

/etc/rc.d/init.d/squid     //独立守护进程

/etc/squid/squid.conf    // squid的主配置文件

\[root@gjp99 Server\]\# grep -v "^\#" /etc/squid/squid.conf  |grep -v "^$"  
acl **all** src 0.0.0.0/0.0.0.0  
acl manager proto cache\_object  
acl localhost src 127.0.0.1/255.255.255.255  
acl to\_localhost dst 127.0.0.0/8  
acl SSL\_ports port 443  
acl Safe\_ports port 80        \# http  
acl Safe\_ports port 21        \# ftp  
acl Safe\_ports port 443        \# https  
acl Safe\_ports port 70        \# gopher  
acl Safe\_ports port 210        \# wais  
acl Safe\_ports port 1025-65535    \# unregistered ports  
acl Safe\_ports port 280        \# http-mgmt  
acl Safe\_ports port 488        \# gss-http  
acl Safe\_ports port 591        \# filemaker  
acl Safe\_ports port 777        \# multiling http  
acl CONNECT method CONNECT  
http\_access allow manager localhost  
http\_access deny manager  
http\_access deny !Safe\_ports  
http\_access deny CONNECT !SSL\_ports  
http\_access allow localhost  
**http\_access deny all      默认拒绝所有**  
icp\_access allow all  
**http\_port 3128        代理服务器的监听端口，最好在前面写上具体ip地址，**  
hierarchy\_stoplist cgi-bin ?  
access\_log /var/log/squid/access.log squid  
acl QUERY urlpath\_regex cgi-bin \\?  
cache deny QUERY  
refresh\_pattern ^ftp:        1440    20%    10080  
refresh\_pattern ^gopher:    1440    0%    1440  
refresh\_pattern .        0    20%    4320  
acl apache rep\_header Server ^Apache  
broken\_vary\_encoding allow apache  
coredump\_dir /var/spool/squid

**3.测试机配置：**

**3.1 配ip**

走代理，dns也不用配置（无需地址解析）

[![image][image 19]][image_image 19]

**3.2 代理设置**

IE 右击属性----连接-----局域网（LAN）设置

[![image][image 20]][image_image 20]

**3.3 参考文档：**

[![image][image 21]][image_image 21]

[![image][image 22]][image_image 22]

**3.4 主文件配置：**

\[root@gjp99 Server\]\# ll /var/spool/squid/  
total 0

说明：squid还没有被初始化！

\[root@gjp99 Server\]\# vim /etc/squid/squid.conf

[![image][image 23]][image_image 23] 修改成：

[![image][image 24]][image_image 24]

[![image][image 25]][image_image 25]

[![image][image 26]][image_image 26]

**3.5 支持代理的软件**

浏览器支持代理、聊天工具（qq支持代理）、下载工具（如：网络蚂蚁）：

**登陆时设置：**

[![image][image 27]][image_image 27]

[![image][image 28]][image_image 28]

**3.6 客户机访问外网测试：**

[![image][image 29]][image_image 29]

[![image][image 30]][image_image 30] 该为允许所有！

[![image][image 31]][image_image 31] [![image][image 32]][image_image 32]

刷新页面

[![image][image 33]][image_image 33]

**\[root@gjp99 Server\]\# tail -f /var/log/squid/  
access.log  cache.log   squid.out   store.log    
\[root@gjp99 Server\]\# tail -f /var/log/squid/access.log**

t\_search\_word\_style/piddomain.js - DIRECT/220.181.124.108 application/x-javascript  
1346398516.767  17157 192.168.2.22 TCP\_**MISS**/000 0 GET [ http://www.gougou.com/js/input-ac.js][http_www.gougou.com_js_input-ac.js] \- DIRECT/www.gougou.com -  
1346398516.767  17188 192.168.2.22 TCP\_**HIT**/000 0 GET [http://www.gougou.com/][http_www.gougou.com] \- DIRECT/www.gougou.com -

修改squid.conf 文件，**避免其他人使用此代理服务器访问外网！**

squid.conf[![image][image 34]][image_image 34]

[![image][image 35]][image_image 35]

类型参考：

[![image][image 36]][image_image 36]

**4.代理服务器安全应用测试：**

**4.1.拒绝某个人：禁止IP地址为192.168.2.22的客户机上网。**

[![image][image 37]][image_image 37]

允许其他人：

[![image][image 38]][image_image 38]

\[root@gjp99 Server\]\# service squid restart

测试：日志监视：

\[root@gjp99 ~\]\# tail -f /var/log/squid/access.log

1346401928.431      2 **192.168.2.22** TCP\_**DENIED**/403 1415 GET [http://www.baidu.com/][http_www.baidu.com] \- NONE/- text/html  
1346401938.105      1 192.168.2.22 TCP\_DENIED/403 1417 GET [http://www.google.com/][http_www.google.com] \- NONE/- text/html

[![image][image 39]][image_image 39]

换了个ip，就能正常上网！（参考日志信息）

1346402102.080    897 **192.168.2.21 TCP\_MISS**/302 934 **GET** [http://www.google.com/][http_www.google.com] \- DIRECT/74.125.71.106 text/html  
1346402106.243   4162 192.168.2.21 TCP\_MISS/302 648 GET [ http://www.google.com.hk/url?][http_www.google.com.hk_url] \- DIRECT/74.125.71.199 text/html  
1346402109.660   3416 192.168.2.21 TCP\_MISS/200 169690 GET [ http://www.google.com.hk/][http_www.google.com.hk] \- DIRECT/74.125.71.199 text/html  
1346402113.359   3596 192.168.2.21 TCP\_MISS/404 1310 GET [ http://www.google.com.hk/compressiontest/gzip.html][http_www.google.com.hk_compressiontest_gzip.html] \- DIRECT/74.125.71.199 text/html

**4.2 拒绝某个网段的人：**禁止192.168.2.0这个子网里所有的客户机上网。  
[![image][image 40]][image_image 40]

**任选该网段的三个ip段作为测试：**

1346402829.564      4 192.168.2.21 TCP\_**DENIED**/403 1415 GET [http://www.baidu.com/][http_www.baidu.com] \- NONE/- text/html  
1346402881.349      2 192.168.2.1 TCP\_**DENIED/**403 1417 GET [http://www.gougou.com/][http_www.gougou.com] \- NONE/- text/html  
1346402926.390      2 192.168.2.254 TCP\_**DENIED**/403 1415 GET [http://www.baidu.com/][http_www.baidu.com] \- NONE/- text/html

**4.3 拒绝访问某个ip的网站   禁止用户访问IP地址为119.75.218.77的网站**

[![image][image 41]][image_image 41]

主配置文件的590行！

[![image][image 42]][image_image 42]

[![image][image 43]][image_image 43]

[![image][image 44]][image_image 44]

以上证明：拒绝ip，却拒绝不了访问该网站，因为一个服务器可对应于多个ip

**4.4 拒绝访问带某个域名的网站 ：禁止用户访问域名包含有sina.com的网站。**

[![image][image 45]][image_image 45]

**日志信息：**

1346407353.802     12 192.168.2.22 TCP\_DENIED/403 1413 GET [http://www.sina.com/][http_www.sina.com] \- NONE/- text/html  
1346407365.210      3 192.168.2.22 TCP\_DENIED/403 1415 GET [http://news.sina.com/][http_news.sina.com] \- NONE/- text/html

**4.5 禁止用户访问域名包含有sex关键字的URL。**

[![image][image 46]][image_image 46]

[![image][image 47]][image_image 47]

**4.6  禁止用户访问域名为** [**www.163.com**][www.163.com]**的网站**  
acl baddomain1 dstdomain -i www.163.com  
http\_access deny baddomain1

[![image][image 48]][image_image 48]

[![image][image 49]][image_image 49]

**4.7 限制IP地址为192.168.2.100的客户机并发最大连接数为5。**  
acl clientip1 src 192.168.2.100  
acl conn5 maxconn 5  
http\_access deny client1 conn1  
**4.8 禁止192.168.2.0这个子网里所有的客户机在周一到周五的9:00到18:00上网。**  
acl clientnet1 src 192.168.2.0/255.255.255.0  
acl worktime time MTWHF 9:00-18:00  
http\_access deny clientnet1 worktime

下班时间可以正常上网：

\[root@gjp99 ~\]\# date  
Fri Aug 31 18:37:49 CST 2012

[![image][image 50]][image_image 50]

调整为上班时间：

\[root@gjp99 ~\]\# date 083112302012  
Fri Aug 31 12:30:00 CST 2012

日志信息：

1346387408.908      1 192.168.2.22 **TCP\_DENIED**/403 1415 GET [ http://www.baidu.com/][http_www.baidu.com] \- NONE/- text/html

[![image][image 51]][image_image 51]

**4.9 禁止客户机下载\*.mp3、\*.exe、\*.zip和\*.rar类型的文件。  
[![image][image 52]][image_image 52]**

测试：迅雷中：

[![image][image 53]][image_image 53]

禁止的是用下载工具下载如（迅雷）如果网页上直接保存，可以下载！  
**4.10 禁止QQ通过Squid代理上网。**  
acl qq url\_regex -i tencent.com  
http\_access deny qq

正常情况下,qq工具只要设置代理方式中的任意一种也可登陆qq

[![image][image 54]][image_image 54]

qq已无法正常登陆！

[![image][image 55]][image_image 55]

[image]: /images/20220506/821b8498c96f4c189f5c86922a81853e.png
[image 1]: http://img1.51cto.com/attachment/201208/31/5635432_13464152630BoJ.png
[image 2]: http://img1.51cto.com/attachment/201208/31/5635432_1346415270tTxt.png
[image_image 2]: /images/20220506/36b60a62c84e4bc9961e877683213c5d.png
[image 3]: http://img1.51cto.com/attachment/201208/31/5635432_1346415276WJIf.png
[image_image 3]: /images/20220506/a9dbc5cc6cf943058d9287be0756fa07.png
[image 4]: http://img1.51cto.com/attachment/201208/31/5635432_13464152793Rzf.png
[image_image 4]: /images/20220506/722f7c82933f4335b2a5dcc38df3de18.png
[image 5]: http://img1.51cto.com/attachment/201208/31/5635432_1346415288pYJO.png
[image_image 5]: /images/20220506/0988e4813f5f452394374d19ff894766.png
[image 6]: http://img1.51cto.com/attachment/201208/31/5635432_1346415293bqTP.png
[image_image 6]: /images/20220506/0550573e32d84e83a23a40784461d0bf.png
[image 7]: http://img1.51cto.com/attachment/201208/31/5635432_1346415304QJAP.png
[image_image 7]: /images/20220506/9c8df0c77a4c4b36ac9802ba61f2a4ea.png
[image 8]: http://img1.51cto.com/attachment/201208/31/5635432_1346415308G96O.png
[image_image 8]: /images/20220506/abe2d0d900704c528061ea4cc04e66f1.png
[image 9]: http://img1.51cto.com/attachment/201208/31/5635432_1346415311dXWs.png
[image_image 9]: /images/20220506/2287349d99b24244bd482db13c81b01e.png
[image 10]: http://img1.51cto.com/attachment/201208/31/5635432_1346415321if1n.png
[image_image 10]: /images/20220506/bfbbed6db095459da003cb3d92c48547.png
[image 11]: http://img1.51cto.com/attachment/201208/31/5635432_13464153261VL9.png
[image_image 11]: /images/20220506/eb8ebc0013074fcda7a72fd50661e67a.png
[image 12]: http://img1.51cto.com/attachment/201208/31/5635432_1346415335eGIN.png
[image_image 12]: /images/20220506/a388baa28c924315b473ffba7def90c4.png
[image 13]: http://img1.51cto.com/attachment/201208/31/5635432_1346415337lG1B.png
[image_image 13]: http://img1.51cto.com/attachment/201208/31/5635432_1346415336IJBV.png
[image 14]: http://img1.51cto.com/attachment/201208/31/5635432_1346415338jnFt.png
[image_image 14]: http://img1.51cto.com/attachment/201208/31/5635432_134641533791p1.png
[image 15]: http://img1.51cto.com/attachment/201208/31/5635432_1346415737IlDE.png
[image_image 15]: http://img1.51cto.com/attachment/201208/31/5635432_1346415736vwdq.png
[image 16]: http://img1.51cto.com/attachment/201208/31/5635432_13464157387uKg.png
[image_image 16]: http://img1.51cto.com/attachment/201208/31/5635432_13464157387sKO.png
[image 17]: http://img1.51cto.com/attachment/201208/31/5635432_1346415739RH4s.png
[image_image 17]: /images/20220506/79f7274268f14076b0e7214590151dbf.png
[image 18]: http://img1.51cto.com/attachment/201208/31/5635432_13464153457m5E.png
[image_image 18]: /images/20220506/a11b3283d6fa4b6d846c0c1e7a522eb6.png
[image 19]: http://img1.51cto.com/attachment/201208/31/5635432_1346415348dWKp.png
[image_image 19]: /images/20220506/5297b987f44845138ec3cb10df5fe4c9.png
[image 20]: http://img1.51cto.com/attachment/201208/31/5635432_1346415350FIKJ.png
[image_image 20]: /images/20220506/bfa5783eab8849d98dfd36bd4bf4656b.png
[image 21]: http://img1.51cto.com/attachment/201208/31/5635432_134641535644Do.png
[image_image 21]: /images/20220506/1c776245bc9d4a56a17fd8dced6f39ee.png
[image 22]: http://img1.51cto.com/attachment/201208/31/5635432_1346415366hNBx.png
[image_image 22]: /images/20220506/8a0743b833c7427b9e0229b39f05e528.png
[image 23]: http://img1.51cto.com/attachment/201208/31/5635432_1346415367cFJn.png
[image_image 23]: /images/20220506/ed8ff94570314b0ba89e581555f1262f.png
[image 24]: http://img1.51cto.com/attachment/201208/31/5635432_1346415367eort.png
[image_image 24]: /images/20220506/697d51edc25c468b888483b9db39a37b.png
[image 25]: http://img1.51cto.com/attachment/201208/31/5635432_1346415369XgND.png
[image_image 25]: /images/20220506/365a1448644d486da3f4477e542cd85b.png
[image 26]: http://img1.51cto.com/attachment/201208/31/5635432_1346415374lyFK.png
[image_image 26]: /images/20220506/611b9ebf8a2d4ee6b473033d16e74d25.png
[image 27]: http://img1.51cto.com/attachment/201208/31/5635432_1346415985ozvI.png
[image_image 27]: /images/20220506/8725e009048f489a88574e1408a9c5ac.png
[image 28]: http://img1.51cto.com/attachment/201208/31/5635432_1346415389ihuN.png
[image_image 28]: /images/20220506/5e8fb70967a646b29116ad3cdfdf2680.png
[image 29]: http://img1.51cto.com/attachment/201208/31/5635432_1346415392AF1P.png
[image_image 29]: /images/20220506/c3636ba32a1c499c8969db55691a7b0e.png
[image 30]: http://img1.51cto.com/attachment/201208/31/5635432_1346415393QYhT.png
[image_image 30]: /images/20220506/54b28cce389f410d86b9b2e92b7bb01f.png
[image 31]: http://img1.51cto.com/attachment/201208/31/5635432_1346415394dGrL.png
[image_image 31]: http://img1.51cto.com/attachment/201208/31/5635432_13464153937Mwf.png
[image 32]: http://img1.51cto.com/attachment/201208/31/5635432_1346415395v28f.png
[image_image 32]: /images/20220506/d4fdcebc351040c3b95150cc0916ae8e.png
[image 33]: http://img1.51cto.com/attachment/201208/31/5635432_1346415396mWwM.png
[image_image 33]: /images/20220506/efa0ea86920f45aeb2c34bcd73bbd010.png
[http_www.gougou.com_js_input-ac.js]: http://www.gougou.com/js/input-ac.js
[http_www.gougou.com]: http://www.gougou.com/
[image 34]: http://img1.51cto.com/attachment/201208/31/5635432_1346415397H2I3.png
[image_image 34]: /images/20220506/0090a47670ae41dcae29f4ea67c66885.png
[image 35]: http://img1.51cto.com/attachment/201208/31/5635432_1346415400fg8T.png
[image_image 35]: /images/20220506/b404762cb03942e4ae6e36596651a8c8.png
[image 36]: http://img1.51cto.com/attachment/201208/31/5635432_13464154023zZr.png
[image_image 36]: /images/20220506/e7d0f07fe9224748ab91976f7c1d2a94.png
[image 37]: http://img1.51cto.com/attachment/201208/31/5635432_1346415403PB9J.png
[image_image 37]: /images/20220506/e8d9aca76f7040caa85c968f079c677a.png
[image 38]: http://img1.51cto.com/attachment/201208/31/5635432_1346415403ss78.png
[image_image 38]: /images/20220506/746881d2b6764652b610f9ac3612e553.png
[http_www.baidu.com]: http://www.baidu.com/
[http_www.google.com]: http://www.google.com/
[image 39]: http://img1.51cto.com/attachment/201208/31/5635432_1346415404W2RS.png
[image_image 39]: /images/20220506/49448997a0be49fc80d42901d09be9f6.png
[http_www.google.com.hk_url]: http://www.google.com.hk/url?
[http_www.google.com.hk]: http://www.google.com.hk/
[http_www.google.com.hk_compressiontest_gzip.html]: http://www.google.com.hk/compressiontest/gzip.html
[image 40]: http://img1.51cto.com/attachment/201208/31/5635432_1346415405uoTz.png
[image_image 40]: /images/20220506/26059ae3b6f1419198c74930538d3b6a.png
[image 41]: http://img1.51cto.com/attachment/201208/31/5635432_1346415408Cnl8.png
[image_image 41]: /images/20220506/0fbf257bbd414d4b8ab0b762e1cc33d5.png
[image 42]: http://img1.51cto.com/attachment/201208/31/5635432_1346415408tbrT.png
[image_image 42]: /images/20220506/cf924caadba5464d8e75affaec913e7b.png
[image 43]: http://img1.51cto.com/attachment/201208/31/5635432_1346415410GTXc.png
[image_image 43]: /images/20220506/1e2173f8da994861a8259b222a827669.png
[image 44]: http://img1.51cto.com/attachment/201208/31/5635432_1346415411et5W.png
[image_image 44]: /images/20220506/b5dfa76e69bc48b6bb6eb7d23aeb0fd2.png
[image 45]: http://img1.51cto.com/attachment/201208/31/5635432_13464154124tta.png
[image_image 45]: /images/20220506/92455baded6e4cd9b5d9c09da839c230.png
[http_www.sina.com]: http://www.sina.com/
[http_news.sina.com]: http://news.sina.com/
[image 46]: http://img1.51cto.com/attachment/201208/31/5635432_1346415413XOst.png
[image_image 46]: /images/20220506/f5135ba8cd8f4a189098952ced7e9738.png
[image 47]: http://img1.51cto.com/attachment/201208/31/5635432_1346415416DRg0.png
[image_image 47]: /images/20220506/0583805c6ce94924b1f74c5fb8d2e185.png
[www.163.com]: http://www.163.com
[image 48]: http://img1.51cto.com/attachment/201208/31/5635432_1346415417o6W1.png
[image_image 48]: /images/20220506/9714fe3584a04be3a96b1c29dee5f02b.png
[image 49]: http://img1.51cto.com/attachment/201208/31/5635432_1346415419oX8n.png
[image_image 49]: /images/20220506/f50202a081dc46d78be9b212f5e32e6a.png
[image 50]: http://img1.51cto.com/attachment/201208/31/5635432_1346415420YPiF.png
[image_image 50]: /images/20220506/7a6d334326404ea3931baf933d3f85cf.png
[image 51]: http://img1.51cto.com/attachment/201208/31/5635432_1346415420blHp.png
[image_image 51]: /images/20220506/fcccc22764984a408559dae827b99d8d.png
[image 52]: http://img1.51cto.com/attachment/201208/31/5635432_13464154215qHr.png
[image_image 52]: /images/20220506/079a83956bb440a3ab28173f8b03b32d.png
[image 53]: http://img1.51cto.com/attachment/201208/31/5635432_1346415422yhQf.png
[image_image 53]: /images/20220506/65394a5adbf542e6a3a2d3732dd04368.png
[image 54]: http://img1.51cto.com/attachment/201208/31/5635432_1346415424oERA.png
[image_image 54]: /images/20220506/3a41486f434c4d5d8f44ef603f887b9c.png
[image 55]: http://img1.51cto.com/attachment/201208/31/5635432_1346415991X4tS.png
[image_image 55]: /images/20220506/1c75939ceab246b491bd2a5a3f36c37a.png