LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   Squid Access Denied Help (https://www.linuxquestions.org/questions/linux-networking-3/squid-access-denied-help-366532/)

eurekaguy4u 09-24-2005 08:38 AM

Squid Access Denied Help
 
hi friends,

i newly installed squid 2.4 on Red Hat Linux Enterprise server. It is working fine for all my web site, till i tried to access a website which is on port no. 712 like "hxxp://websitename:712/" , while doing this , got following error message : -

The following error was encountered:

* Access Denied.

Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect.

Please help me how to resolve it.

euro guy

eurekaguy4u 09-24-2005 08:40 AM

hi

i tried one config file from one of my friend, which i earlier tested too on my other server with some changes. but after using that too i am getting the same "Access Denied" message.

i m sure there is some problem with the current installation but not getting out what is that, somebody help plz

Euroguy

poochdog 09-25-2005 05:26 PM

I beleive you need to edit your squid.conf file to allow access to that port....

usmanmehmood 09-26-2005 12:46 AM

port 712 is in safe ports by default.i don't think u need to change it.
is ur proxy running transparently. if not try to use transparent proxy.
or sned ur squid.conf. may be we can suggest something.

eurekaguy4u 09-26-2005 01:40 AM

i m pasting the acl part of my squid conf.

acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http


when i tried to download a file from bittorrent site , it is giving me the 403 forbidden error in the bit torrent client

hope this will help you more.

Euro GY

usmanmehmood 09-26-2005 05:18 AM

dear if u don't mind
plz send me ur squid.conf in my email usman1_ak@yahoo.com
and plz tell me have u configured iptables or ipchains

deoren 09-26-2005 05:48 AM

Quote:

Originally posted by eurekaguy4u
i m pasting the acl part of my squid conf.

acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http


when i tried to download a file from bittorrent site , it is giving me the 403 forbidden error in the bit torrent client

hope this will help you more.

Euro GY

From what I can tell you do not have 712 in your Safe_ports list. Add another line:

Code:

acl Safe_ports port 712 # Add description here
Which should now give you:
Code:

acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 712 # Add description here

As root use
Code:

/etc/init.d/squid reload
. It may be reconfigure instead of reload; I don't have a squid box in front of me at the moment.

Now whether bittorrent will work through squid is a different story; that I don't know.

eurekaguy4u 09-28-2005 08:03 AM

hi ,

nothing solved my problem yet,

i checked the access.log of squid it is giving me following error message :-

1127719673.640 1 191.254.13.59 TCP_DENIED/403 1033 GET http://freeeforums.blogdns.com:712/favicon.ico - NONE/- -

Why this is coming , plz help me

EuroGUY

deoren 09-28-2005 08:07 AM

I would have to see your squid.conf file to help you further. usmanmehmood has also requested a copy of squid.conf to provide help.

It's not providing a username so it would appear that your auth_param config section is invalid. By looking at your squid.conf I could possibly spot the issue.

usmanmehmood 09-28-2005 08:24 AM

i again suggest u that u should send ur squid.conf and tell us that have u configured transparent proxy or not.
i tested that on my network , when i use transparent proxy that problem is solved but when i explicitly give proxy to internet explorer it gives the same error that u told us. so provide us all that information.

eurekaguy4u 09-28-2005 08:26 AM

which part of squid.conf should i give you ,

usmanmehmood 09-28-2005 08:29 AM

i suggest u should mail me ur whole squid.conf. i told u my email address in a previous post.

eurekaguy4u 09-28-2005 08:38 AM

i m mailing you the squid.conf , plz check and give feedback.

usmanmehmood 09-28-2005 09:12 AM

i got ur squid.conf
im ashtonied how ur squid is running without specifying visible_hostname.
anyways can u tell me ur configuration about transparent proxy i hope it will solve that problem as i told u in previous meesage.

eurekaguy4u 09-28-2005 10:45 PM

What do you mean by transparent proxy here,


All times are GMT -5. The time now is 12:10 PM.