squid problem on RHEL Release 5
 

hi all

i have installed RHEL Release 5. when i configure the squid 2.6 on it as well as my requirement is that
1- configure individual cache on /cache (which has isolated mount point)
mean to say.
# cache_dir /var/spool/squid 100 16 256
cache_dir /cache 10000 16 256

2- squid configure on port 80 (listening port 80 either 3128)


but when i try to start the service of squid
i got a error page
cache_dir permission deny
squid cant listen port 80

note; i can change ownership of /cache directory from root to squid
also crating swap directories by squid -z

but again i can start the service of squid
i got the same error

plz help me for both cases.

hi all

as i mentiond in above post i have two problems.the first one i have solved.the second one about port.when i change port from 3128 to 80 following error is generatd.

"can not bind Socket FD 12 to *:80: (13) Permission denid.
FATAL: can not open HTTP port"

plz help me..

Are you running a web server such as apache on this system?

You can't have 2 services listening on the same port on the same interface.

hi docalton

The service of apache is stoped.

What user were you logged in as when you tried to start Squid? You should be logged in as root but you should have Squid configured to run as a non-privileged user with the cache_effective_user and cache_effective_group settings.

I haven't tried running Squid on port 80 (it's a privileged port by the way, < 1024), is there any reason you can't run it on the default port of 3128?

hi gilead

i login as root.and i do same as u say but it still give error of permission.
Our network is consist of more then 4000 nodes and its very diffecult to change proxy settings on every machine.
is there any other solaution ????


plz help me....

bilal

I'd suggest looking through the info at the Squid FAQ. The only info I found suggests that the problem is that you need to start Squid as the root user (FATAL: Cannot open HTTP Port). They mention that you can't start Squid as root and continue to run it that way (Why Can't I run Squid as root?) and that the suggested solution is to use the cache_effective_user setting (FATAL: Don't run Squid as root, set 'cache_effective_user'!)

Use nodes' proxy settings on server
 

There is another thread on LQ that might help you:
http://www.linuxquestions.org/questi...id#post2725475

Member win32sux is explaining how to use iptables to REDIRECT traffic from clients to the port used by Squid (& Dansguardian).

HTH