LinuxQuestions.org
Did you know LQ has a Linux Hardware Compatibility List?
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 05-01-2013, 04:23 AM   #1
alirezaimi
Member
 
Registered: Sep 2011
Posts: 38

Rep: Reputation: Disabled
http access denied and https not work in squid in debian...


Hi
I use squid for simple cache proxy OR transparent, but access denied
problem happned when i want to enter http or https address,
when i use this
http_access allow all
instead of
http_access deny all
everything work fine !!
http://i44.tinypic.com/4i1ny8.png

squid config :
Code:
# multiling http
acl Safe_ports port 631         # cups
acl Safe_ports port 873         # rsync
acl Safe_ports port 901         # SWAT
acl purge method PURGE
acl CONNECT method CONNECT
 
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
 
http_access deny all
#icp_access allow all
#miss_access allow all
 
acl lan src 192.168.69.81 192.168.0.0/24
http_access allow lan
 
icp_access allow localnet
 
#http_port 3128 transparent
http_port 192.168.0.111:8008
 
hierarchy_stoplist cgi-bin ?
 
cache_mem 512 MB
cache_dir ufs /var/spool/squid 2000 16 256
 
access_log /var/log/squid/access.log squid
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
refresh_pattern (Release|Packages(.gz)*)$       0       20%     2880
refresh_pattern .               0       20%     4320
acl shoutcast rep_header X-HTTP09-First-Line ^ICY.[0-9]
upgrade_http0.9 deny shoutcast
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
extension_methods REPORT MERGE MKACTIVITY CHECKOUT
 
cache_mgr webmaster
 
acl FTP proto FTP
always_direct allow FTP
 
dns_nameservers 4.2.2.4
hosts_file /etc/hosts
 
coredump_dir /var/spool/squid
Any ideas ?
thanks.
 
Old 05-01-2013, 11:39 AM   #2
tuxboom747
LQ Newbie
 
Registered: May 2011
Posts: 19

Rep: Reputation: 10
shouldn't line 26 read "...:8080" or is this correct: "http_port 192.168.0.111:8008"?

(I don't have any knowledge about squid config)
 
Old 05-01-2013, 12:38 PM   #3
Lexus45
Member
 
Registered: Jan 2010
Location: Kurgan, Russia
Distribution: Slackware, Ubuntu
Posts: 339
Blog Entries: 3

Rep: Reputation: 47
Add 80 and 443 ports to Safe_Ports access list. And then do 'squid -k reconfigure'. And you are done.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
can't access https but http works fine through route-map ->squid proxy erion Linux - Newbie 7 12-19-2012 11:57 AM
[SOLVED] Apache: http and https (ssl) no access eRJe Linux - Server 7 09-30-2010 04:39 PM
Squid configuration question. Client => HTTPS => proxy => HTTP => webserver newhere Fedora 5 02-21-2009 01:33 PM
Squid reverse proxy problem (HTTPS to HTTP) RussP Linux - Networking 1 10-02-2008 01:20 PM
squid https denied DennisC31 Linux - Server 1 09-12-2008 08:27 AM


All times are GMT -5. The time now is 05:06 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration