Linux - NetworkingThis forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
I am using 2 ethernet cards along with squid in my LAN for internet
access, my server is Redhat 9.0, squid as proxy server, with 1 ethernet
car hooked to the internet (real IP address), the other linking the LAN internal as gate
way (192.168.1.1).
Now everything looks fine, squid is running the sever can get to the internet, every client
(whether Linux or Windows), pinging is just fine, but the browser cannot be opened,
why?
Thx,
HTM
Did you configure the squid proxy as transparent to the client?
To do this you need to route the port 80 traffic to squids port so browser requests go through squid.
Like so...
(you need to have a rule like this for each interface that people will connect to, and not the internet interface. So you need to know your device names)
the difference betwen my squid.conf and the default
David,
Yes, I set every client's browser as proxy mode using 192.168.1.1's port 3128,
I use ps -aux | grep squid, and find it is running, here is what I changed in
squid.conf:
sure its a problem. your squid doesnt work. if it worked clients browsers could see a webpage generated by squid or they could surf on the internet.
squid think that your ip range is not correct. because your ip range is a C class network. but your netmask isnt correct for C class network. it must be like that 192.168.1.1/24
change the following line in squid.conf
acl all src 0.0.0.0/0.0.0.0
acl lan src 192.168.1.0/255.255.255.0
http_access allow lan
http_access deny all
At server side, I run squidclient, I got the following info, what do those error info
mean?
Thx a ton,
HTM
[root@headquarter sbin]# squidclient
bash: squidclient: command not found
[root@headquarter sbin]# ./squidclient http://www.yahoo.com
HTTP/1.0 403 Forbidden
Server: squid/2.5.STABLE1
Mime-Version: 1.0
Date: Tue, 06 Apr 2004 02:19:37 GMT
Content-Type: text/html
Content-Length: 1039
Expires: Tue, 06 Apr 2004 02:19:37 GMT
X-Squid-Error: ERR_ACCESS_DENIED 0
X-Cache: MISS from localhost
Proxy-Connection: close
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The requested URL could not be retrieved</TITLE>
<STYLE type="text/css"><!--BODY{background-color:#ffffff;font-family:verdana,sans-serif}PRE{font-family:sans-serif}--></STYLE>
</HEAD><BODY>
<H1>ERROR</H1>
<H2>The requested URL could not be retrieved</H2>
<HR noshade size="1px">
<P>
While trying to retrieve the URL:
<A HREF="http://www.yahoo.com">http://www.yahoo.com</A>
<P>
The following error was encountered:
<UL>
<LI>
<STRONG>
Access Denied.
</STRONG>
<P>
Access control configuration prevents your request from
being allowed at this time. Please contact your service provider if
you feel this is incorrect.
</UL>
<P>Your cache administrator is <A HREF="mailto:root">root</A>.
I've done everything, change hostname from headquarter back to localhost,
in the client side, set IT's advancd tab, allow http access through proxy, why
the access is denied?
Now I also got some info in store.log after unsing command
./squidclient -p 3128 htt://www.yahoo.com (at server side in emulating an client)
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.