Help with squid

From: Eicke (eick.jac_at_terra.com.br)
Date: 11/05/03

  • Next message: Luigi Rizzo: "Re: Telecom Italia, ADSL SMART & FreeBSD" 
    To: "FreeBSD_Net" <freebsd-net@freebsd.org>
Date: Wed, 5 Nov 2003 14:08:12 -0200

    Hi folks I configured a FreeBSD Squid24 Server and I receive the following error in my access.log
    TCP_DENIED/403
    I configure only one machine(192.168.5.9) to access the proxy server (ipfw fwd). I guess there is something wrong in my squid.conf, in acl definitions...below folowing a piece of my squid.conf:

    acl all src 0.0.0.0/0.0.0.0
    acl manager proto cache_object
    acl localhost src 127.0.0.1/255.255.255.255
    acl SSL_ports port 443 563
    acl Safe_ports port 80 # http
    acl Safe_ports port 21 # ftp
    acl Safe_ports port 443 563 # https, snews
    acl Safe_ports port 70 # gopher
    acl Safe_ports port 210 # wais
    acl Safe_ports port 1025-65535 # unregistered ports
    acl Safe_ports port 280 # http-mgmt
    acl Safe_ports port 488 # gss-http
    acl Safe_ports port 591 # filemaker
    acl Safe_ports port 777 # multiling http
    acl CONNECT method CONNECT

    http_access allow manager localhost
    http_access deny manager
    http_access deny !Safe_ports
    http_access deny CONNECT !SSL_ports
    http_access allow 192.168.5.9
    http_access deny all
    icp_access allow all

    Could you help me?
    Regards.
    Eicke.

    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"

  • Next message: Luigi Rizzo: "Re: Telecom Italia, ADSL SMART & FreeBSD"

    Relevant Pages

    • Transparent Proxy using Squid and PF
      ... I need a little help on setting up transparent proxy with Squid and PF in FreeBSD 5.4-RELEASE. ... rdr on $int_if inet proto tcp from any to any port www -> 127.0.0.1 port 3128 ... acl QUERY urlpath_regex cgi-bin \? ... no_cache deny QUERY ...
      (freebsd-questions)
    • Transparent Proxy using Squid and PF
      ... I need a little help on setting up transparent proxy with Squid and PF in FreeBSD 5.4-RELEASE. ... rdr on $int_if inet proto tcp from any to any port www -> 127.0.0.1 port 3128 ... acl QUERY urlpath_regex cgi-bin \? ... no_cache deny QUERY ...
      (freebsd-questions)
    • Squid config problem - LAMP server
      ... Restarting Squid HTTP proxy squid ... acl QUERY urlpath_regex cgi-bin \? ... no_cache deny QUERY ... acl SSL_ports port 443 563 # https, ...
      (Ubuntu)
    • Re: Squid cant open HTTP port.
      ... Now Squid is running on port 3128. ... acl QUERY urlpath_regex cgi-bin \? ... no_cache deny QUERY ...
      (comp.os.linux.networking)
    • Re: Help with squid
      ... Try putting you allow statements before the deny statements, but test carefully for unexpected results. ... acl manager proto cache_object ... acl SSL_ports port 443 563 ... http_access allow AllowedAgentSites ...
      (comp.os.linux.networking)