Problem using Trillian

fbaiao · 10-02-2008, 05:01 PM

Hi people.

My squid is blocking Trillian and I'm not finding the reason.

This message is shown on log:
1222973925.596 0 192.168.0.253 TCP_DENIED/403 1399 CONNECT messenger.hotmail.com:1863 - NONE/- text/html

But this port is allowed to be used in squid.conf:

acl Safe_ports port 1863 # Trillian

.....

# Only allow cachemgr access from localhost
http_access allow manager localhost
http_access deny manager
# Deny requests to unknown ports
http_access deny !Safe_ports
# Deny CONNECT to other than SSL ports
http_access deny CONNECT !SSL_ports

.....

acl our_networks src 192.168.0.0/24
http_access deny !white !free
http_access allow our_networks

http_access allow localhost

# And finally deny all other access to this proxy
http_access deny all

Please, help me to understand why trillian is being blocked.
Thanks in advance.
Regards,
Flavio Baião.

win32sux · 10-02-2008, 05:28 PM

Sounds like you need to add the port to the SSL_ports ACL, so that the CONNECT method can be used.

latinmusic74 · 10-02-2008, 05:40 PM

Maybe this is a firewall problem. Look at this link for reference.

hxxp://trillian.cc/forums/printthread.php?threadid=6475

let me now

win32sux · 10-02-2008, 06:10 PM

Quote:

Originally Posted by latinmusic74

Maybe this is a firewall problem.

No, Squid is clearly denying access, as shown by the TCP_DENIED log entry.

fbaiao · 10-03-2008, 08:43 AM

Quote:

Originally Posted by win32sux

Sounds like you need to add the port to the SSL_ports ACL, so that the CONNECT method can be used.

Hi. Thanks for your help but it's already there:

acl SSL_ports port 443
acl Safe_ports port 443 # https

Any other suggestion ?

win32sux · 10-03-2008, 09:31 AM

Quote:

Originally Posted by fbaiao

Hi. Thanks for your help but it's already there:

acl SSL_ports port 443
acl Safe_ports port 443 # https

No, it's not. What you posted only shows port 443 in the SSL_ports ACL. You need to add port 1863.

fbaiao · 10-03-2008, 09:52 AM

Quote:

Originally Posted by win32sux

No, it's not. What you posted only shows port 443 in the SSL_ports ACL. You need to add port 1863.

You're right !!!
I've added: acl SSL_ports port 1863
It's working now !!!

Thanks a lot.

Regard,
Flavio Baião.

win32sux · 10-03-2008, 09:54 AM

Quote:

Originally Posted by fbaiao

You're right !!!
I've added: acl SSL_ports port 1863
It's working now !!!

Thanks a lot.

Regard,
Flavio Baião.

You're welcome!