Squid Problem (squid restrict some trusted sites.).
 

Respected sir,


Any one can tell me wahat are safe ports, here we using squid 2.6 stale version proxy in our company we restrict the internet access to our clients but some trusted sites cant open. We need made something special. Here i put my squid configuration. It is port problem or anything.

#ACCESS CONTROL LISTS.

acl safe_ports port 80 #http
acl safe_ports port 21 #ftp
acl safe_ports port 443 #https
acl safe_ports port 70 #gopher
acl safe_ports port 210 #wais
acl safe_ports port 1025-65535 # Unregistered ports
acl safe_ports port 280 # http-mgmt
acl safe_ports port 488 # Gss-http
acl safe_ports port 591 # File Maker
acl safe_ports port 631 #tcp open ipp
acl safe_ports port 777 # Multiling HTTP
acl safe_ports port 2337 #.net3
acl CONNECT method CONNECT
acl rejpc src "/etc/squid/rejpc"
acl FTP proto FTP
acl rejsts url_regex "/etc/squid/rejsts"
acl rejsts url_regex -i sex actress girl sms top orkut cinema hollywood bollywood movie songs mp3 mpeg video audio adult xxx games youtube cricket cricinfo ibibo sms tagged imcash
#TIME BASED ACL FOR OFFICE HOUR ACCESS
acl whr time M T W H F A S 05:00-24:00

#HTTP ACCESS PERMISSION
#REJSTS IS A FILE NAME THAT FILE CONTAINS SOME UNWANTED WEBSITE NAMES.
#REJPC IS A FILE NAME THAT FILE CONTAINS CLIENT IP ADDRESS WHICH WE WANT TO RESTRICT THE INTERNET CONNECTION.
#WHR IS TIEM BASED ACL THE RESTRICTION WORK ONLY IN MORNING 5 O'CLOCK TO NIGHT 12 O'CLOCK.

http_access deny !safe_ports
http_access deny rejsts rejpc
http_access deny whr rejsts
always_direct allow FTP
----------------------------------------------------

ANY ONE CAN HELP ME TO SOLVE THE PROBLEM. THE RESTRICTION WORKING CORRECTLY. OUR ACTUAL PROBLEM IS SOME NEEDED SITES ARE NOT OPEN (THE SQUID RESTRICT SOME USEFULL SITES ALSO).

Thanks and Regards

S. A. Yusuf Sithik.
Tech. Admin.
JP MAX INFOTECH
Chennai - 32.

Can you provide which sites are blocked....
seems like..the acl rejsts that blocks words in a url is the culprit.

squid blocks ASP.NET applications
 

hi, Thanks for your interest to reply for my query. Actually i am not sure about websites but squid block the ASP.NET application websites we can't able to compile the ASP.NET Application websites in IE when the squid proxy server is on. It displays the message like the following

ERROR
The requested URL could not be retrieved

--------------------------------------------------------------------------------

While trying to retrieve the URL: http://localhost:1053/Mortgage%20Inf...stem/Home.aspx

The following error was encountered:

Connection to 127.0.0.1 Failed
The system returned:

(111) Connection refusedThe remote host or network may be down. Please try the request again.

Your cache administrator is root.



--------------------------------------------------------------------------------

Generated Wed, 31 Dec 2008 12:11:53 GMT by www-cache.foo.org (squid/2.6.STABLE6)


Plese provide the solution to me. If i made any silly mistakes please tell me.

Thanks and Regards

S. A. Yusuf Sithik.

Just check the box that says bypaas proxy for local addresses when u set the proxy in IE