Disable port 3128

cyucuis · 01-02-2004, 03:04 PM

My users are not able to send email to AOL accounts based AOL's new spam policy. The server information I'm receiving from AOL is based on an open port 3128 on my web server. I have edited my services file in /etc and added port 3128 based on IANA's listing of port 3128. Before I made the change to the services file I could connect to my web server address with port 3128. After rebooting my web server I'm not able to connect which is good. I get a "connection to host lost" message. I should be getting a "could not open connection to host on port 3128 connect failed"

Is there something else I should do? AOL tech's can't give me any more info.

stickman · 01-03-2004, 04:30 PM

3128 is typically the proxy port for squid. Are you running squid? If yes, set the access list so that only clients on your internal network can connect or shut it down if it's not needed.

cyucuis · 01-05-2004, 08:58 AM

Ok - can you give me an example? I don't believe I'm using squid. How can I find out if I am?

stickman · 01-05-2004, 09:22 AM

It would be a running process. Try the following:
ps -ef | grep squid

cyucuis · 01-05-2004, 09:43 AM

Ok, I see it running on my Unix SCO box but not my web server Linux box. If I try to telnet to my web server address with port 3128 I get a connection to host lost. I don't want to connect to port 3128. Well, I mean AOL is telling me I have port 3128 open.

cyucuis · 01-07-2004, 11:13 AM

I have found out that I'm not using squid. I'm guessing I need to close the port using an ipchain. Can you give me an example of how to close port 3128 using an ipchain.

cyucuis · 01-08-2004, 02:51 PM

!!!!!!Finally!!!!!! after further digging I have closed port 3128.

I have a Cobalt Qube 3 (Sun). I disabled web caching and that eliminated port 80 to being redirected to port 3128.

The standard Linux ipchains utility intercepts HTTP requests and redirects the requests to the squid program. Non-HTTP traffic is routed through the server appliance normally, without redirection.

Disabling the web caching service disabled the ipchains utility to redirect web traffic and disabled squid to cache the web traffic.

By default, port 3128 is open facing both the LAN and the Internet. Now my firewall is working correctly.