RE: [squid-users] Squid Newbie needs help

From: Rafael Bayona <linuxquestions@dont-contact.us>
Date: Thu, 22 Nov 2001 17:04:50 -0500

Thanks Henrik and Pedro, I just redefined the squid.conf like this:

acl lared src 195.69.0.0/255.255.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80 21 443 563 70 210 1025-65535
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT

http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow lared
http_access deny all

And the error message changed from "access denied" to "Cannot find server or
DNS Error
Internet Explorer". If it helps, in /var/log/messages appears this message
right when you're opening your browser on the computer in the LAN:

Squid Parent: child process 26887 started
Squid Parent: child process 26887 exited due to signal 6

What could it be now?

Thanks,

Rafael

-----Mensaje original-----
De: hno@hem.passagen.se [mailto:hno@hem.passagen.se]En nombre de Henrik
Nordstrom
Enviado el: Jueves, 22 de Noviembre de 2001 02:40 p.m.
Para: Rafael Bayona
CC: squid-users@squid-cache.org
Asunto: Re: [squid-users] Squid Newbie needs help

Please DON'T redefine "all". It is meant to mean "everyone everywhere".

For your own networks, define another acl.

Other than this I could not see any obvious sources to troubles.

Regards
Henrik Nordstrom
Squid Hacker

Rafael Bayona wrote:
>
> Hi, I'm trying to setup a proxy server, I'm using redHat 7.1 , I believe
> Squid version is 2.3-Stable4-10.
>
> The machine it is the gateway, DNS, mailserver and router for the company.
> It has two network cards, eth0 is conected to the internet, eth1 to the
LAN.
> I can see the machine from the LAN, and in the clients internet
> configuration (Windows NT network) to use my server as proxy (195.69.0.245
> port 3128). But, when I tried to connect, this is the error message I get:
>
> ERROR
> The requested URL could not be retrieved
> --------------------------------------------------------------------------

--
> ----
> While trying to retrieve the URL: http://my.yahoo.com/
> The following error was encountered:
> Access Denied.
> Access control configuration prevents your request from being allowed at
> this time. Please contact your service provider if you feel this is
> incorrect.
> Your cache administrator is root.
> --------------------------------------------------------------------------
--
> ----
> Generated Thu, 22 Nov 2001 07:09:30 GMT by ns1.setecsa.com
> (Squid/2.3.STABLE4)
>
> I made this changes in the squid.conf file:
>
> ident_lookup on
> acl all src 195.69.0.0/24
> acl identifiquense src 195.69.0.0/255.255.255.0
> acl nivel1 ident eperilla
> acl nivel2 ident auribe
> acl nivel3 ident rbayona acarrill uhernand
> acl manager proto cache_object
> acl localhost src 127.0.0.1/255.255.255.255
> acl SSL_ports port 443 563
> acl Safe_ports port 80 21 443 563 70 210 1025-65535
> acl Safe_ports port 280         # http-mgmt
> acl Safe_ports port 488         # gss-http
> acl Safe_ports port 591         # filemaker
> acl Safe_ports port 777         # multiling http
> acl CONNECT method CONNECT
> ident_lookup_access allow identifiquense
> ident_lookup_access deny all
> http_access allow manager localhost
> http_access deny manager
> http_access deny !Safe_ports
> http_access deny CONNECT !SSL_ports
> http_access allow localhost nivel1 nivel2 nivel3
> http_access allow all
>
> I restart squid service every time I change the squid.conf file.
>
> But the error message remains. I know I might be making a fool mistake,
but
> I would love if somebody can help me?
>
> I want squid to prompt for username and password.... How do I do that?
>
> Thanks a lot,
>
> Rafael
Received on Thu Nov 22 2001 - 14:59:27 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:04:27 MST