LinuxQuestions.org - Squid Timeout

- Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)

- - Squid Timeout (https://www.linuxquestions.org/questions/linux-networking-3/squid-timeout-375902/)

Running a CentOS 4.1 server. I've set squid on the server no problem. And I'm using SSH Tunneling To connect to it. I set squid's conf to accept only connections from localhost no problem. Then I go in firefox and connect, and it gives me the ACCESS DENIED Error from squid. So I know all the connection stuff is working. I go in and have the http_acces lines like this -

http_access allow localhost
http_access deny all

But now when I try to go to a page it just gets stuck on loading and doesn't load the page or timeout. I'm not getting the access denied message anymore though. So I'm wondering what configuration problem might I be having?

You can have a lookse at my configuration file here (http://pastebin.com/402486). Thanx for the help :).

This will depend upon what you have localhost defined as in the acl for localhost

if your localhost acl is defined as

Code:

acl localhost src 127.0.0.1/255.255.255.255

which is is normally by default then it will ONLY allow connections from the loopback adapter and I would guess that squid is seeing the connection as coming from what ever IP address is assigned to the network card you are SSHing into.

Try adding the following acl and http_access entries you will have to use the ip address of your server in this example i have assumed your server is on the IP 10.0.0.1 but change it to the real address, I believe it should work.

This entry goes along with the other ACLs it does not matter what order they are in.

Code:

acl my_network_card src 10.0.0.1/255.255.255.255

Then add this line to the http_access lines, it must go before the deny line ! I have added the other lines for clarity here.

Code:

http_access allow localhost

http_access allow my_network_card

http_access deny all

This basically says allow connections from localhost. If that fails allow connections that Originate from my network card if that fails deny access.