Hi everybody,
I have a Fedora core 3, on which I have configured squid server. I have made this squid listen on port 3128. I am able to connect from my own PC on either 127.0.0.1 or 10.72.168.111 (my static ip address). But wondow machines on my LAN are not able to connec to my server.
Imcidently, I have also configured a caching only namer server.

Can anyone help me out.



Thanks in advance

Prabhat Soni

have u entered the proxy settings in ur browser and are u sure u do not have any firewall running on ur linux machine

try portscannig it

regards

Hello Mr. Masand,
Thanks for your response.
I have correctly configured the window machines' IE for proxy. But when I go through my logs (cache.log and access.log), I don't find any request from any other host. This is proved from the IE's window also whcih does not say anything from my server (like "Access Denied ...... Squid Server ..." etc). I feel that the request from foriegn host is not even reaching my squid server). I have rechecked the port number etc, and they are okay.

Yeah, I am 200% sure there is no firewall.

I have a nagging uncomfortable observation:
I configure my mozilla to access internet through proxy at 127.0.0.1. And I find that I can surt, and their are appropriate entries about requests from 127.0.0.1 in the log files.
Next I configure mozilla to access internet through proxy at 10.72.168.111 (my eth1). I find that I can surf only if eth1 is brought up. So far, okay. But when I go through log I find that surprisingly entries are about requests from 127.0.0.1. Then when I bring down lo, I find I cannot surf.

One more thing - do you thing for allowing my window machines I would need some sort of NTA in place ?

Finally, how do I go about wirh port scanning. I need a little guidance here, please.

Thanks a lot for everything.

Prabhat Soni

hello prabhat

i have dome this many times so i cannot understand why is this is problem

if u say that u are not able to browse if eth1 goes down
thathappens if u have some type of service going on whcih monitors ur eth1 connection
this service is there in mandrake , but i haven't seen this in RH9.0

portdscan ur IP after it is up and down

for that there is this portscanner called nmap and the GUI on eis nmapfe

nmap <ipadress>

will do a simple port scanning

also try this proxy configration with some diferent browser in windows say dfirefox, maybe u have left something

also can u ping ur proxy m,achine from ur windows machine

as far as NAT is concerned that is an alternate solution
if u have proxy working then u do not need NAT for that

regards

Hello Mr. Masand,
Thanks.

1). nmap 10.72.168.11 - > service squid-http on port 3128
2). I bring eth1 (10.72.168.111) down, and again give nmap 10.72.168.111 - > Surprisingly it still says "3128/tcp open squid-http". It should not listed in my opinion since eth1 is down !
3). nmap 127.0.0.1 -> Indicate the service squid-http is running on 3128.
4). I bring lo down, and give namp 10.72.168.111 - > Now it says network down and does not list any service. same is the case if I give nmap 127.0.0.1.

It gives an impression that lo and eth1 are same interfaces ! Is it true. ?

I can ping the server from window machines.

Since everything seems to be in order I will try to catch hold of some linux desktop in my network and ask him to access my proxy through mozilla - may be I am missing out something in windows' IE. Will keep you posted.

Thanks for everything.

Prabhat Soni

hello prabhat

eth1 and lo are totally different things

eth1 is ur 2nd ethernet device
eth0 is the first one

lo is loopback

u will have that in every machine no matter u have the ethernet card or not

post the O/P of

ifconfig

also u do not need any linux machine for that
get any other browser like firefox for windows itself

regards

why don't you try telnetting on port 3128 from your Win box ?

have you configured an ACL for http_access?

Hello everybody,

Thanks to all for offering help.

The problem was not in my squid.

IT was some problem in the window machine from which I was trying to access the squid.


Thanks a lot.



Prabhat Soni

did u try out any other browser as i had asked u ??

regards