LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   http access denied and https not work in squid in debian... (https://www.linuxquestions.org/questions/linux-networking-3/http-access-denied-and-https-not-work-in-squid-in-debian-4175460259/)

alirezaimi 05-01-2013 04:23 AM

http access denied and https not work in squid in debian...
 
Hi
I use squid for simple cache proxy OR transparent, but access denied
problem happned when i want to enter http or https address,
when i use this
http_access allow all
instead of
http_access deny all
everything work fine !!
http://i44.tinypic.com/4i1ny8.png

squid config :
Code:

# multiling http
acl Safe_ports port 631        # cups
acl Safe_ports port 873        # rsync
acl Safe_ports port 901        # SWAT
acl purge method PURGE
acl CONNECT method CONNECT
 
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
 
http_access deny all
#icp_access allow all
#miss_access allow all
 
acl lan src 192.168.69.81 192.168.0.0/24
http_access allow lan
 
icp_access allow localnet
 
#http_port 3128 transparent
http_port 192.168.0.111:8008
 
hierarchy_stoplist cgi-bin ?
 
cache_mem 512 MB
cache_dir ufs /var/spool/squid 2000 16 256
 
access_log /var/log/squid/access.log squid
refresh_pattern ^ftp:          1440    20%    10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0    0%      0
refresh_pattern (Release|Packages(.gz)*)$      0      20%    2880
refresh_pattern .              0      20%    4320
acl shoutcast rep_header X-HTTP09-First-Line ^ICY.[0-9]
upgrade_http0.9 deny shoutcast
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
extension_methods REPORT MERGE MKACTIVITY CHECKOUT
 
cache_mgr webmaster
 
acl FTP proto FTP
always_direct allow FTP
 
dns_nameservers 4.2.2.4
hosts_file /etc/hosts
 
coredump_dir /var/spool/squid

Any ideas ?
thanks.

tuxboom747 05-01-2013 11:39 AM

shouldn't line 26 read "...:8080" or is this correct: "http_port 192.168.0.111:8008"?

(I don't have any knowledge about squid config)

Lexus45 05-01-2013 12:38 PM

Add 80 and 443 ports to Safe_Ports access list. And then do 'squid -k reconfigure'. And you are done.


All times are GMT -5. The time now is 06:42 PM.