Configuring squid

silveringking · 03-05-2011, 01:50 PM

Hi, I installed squid on my centos and I tried to follow some guides but it still gives the same error

Quote:

ERROR
The requested URL could not be retrieved

While trying to retrieve the URL: http://www.google.com/

The following error was encountered:

* Access Denied.

Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect.

Your cache administrator is root.
Generated Sat, 05 Mar 2011 17:28:22 GMT by ks33022.kimsufi.com (squid/2.6.STABLE21)

I tried to change my ip from the external one to ipv4 here are my changes:

Quote:

#Recommended minimum configuration:
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl ZON-BFC0 src 192.168.1.2
acl to_localhost dst 127.0.0.0/8

...

# And finally deny all other access to this proxy
http_access allow ZON-BFC0
http_access deny all

ZON-BFC0 is the name presented in my wireless connection, plus the actual ip I'm using there is the ipv4 I found with a quick "ipconfig" search on DOS.

Can you help me out?

bathory · 03-06-2011, 11:04 AM

Hi,

Try to add the netmask and see if it works:

Code:

acl ZON-BFC0 src 192.168.1.2/32

Regards

silveringking · 03-07-2011, 05:10 PM

Quote:

Originally Posted by bathory

Hi,

Try to add the netmask and see if it works:

Code:

acl ZON-BFC0 src 192.168.1.2/32

Regards

Didn't solve it, I should try yet another software probably. Can you guys appoint me easy to configure software? (Note: I do use centos and I have cpanel.)

bathory · 03-07-2011, 06:26 PM

D'oh, can you try to allow the whole 192.168.1.0 subnet and see what you get

Code:

acl ZON-BFC0 src 192.168.1.2/24

I guess you're reloading the squid service after editing squid.conf

silveringking · 03-08-2011, 08:54 AM

I forgot, I restarted squid and this appears

Quote:

[root@ks33022 ~]# service squid restart
Stopping squid: 2011/03/08 14:51:10| aclParseIpData: Bad host/IP: '127.0.0.1/'
. [ OK ]
Starting squid: . [ OK ]
[root@ks33022 ~]#

bathory · 03-08-2011, 10:04 AM

I cannot see an error in the snippet you've posted.
Check the logs to see if you find in which line of squid.conf is the error. Or perhaps run

Code:

squid -k parse

to get more details
As a last resort you can comment out either one or both the 2 acls (localhost and to_localhost) and see why squid is complaining

silveringking · 03-08-2011, 03:51 PM

Quote:

aclParseIpData: Bad host/IP: '127.0.0.1/'

It gave me this error again (probably you didn't saw it above.

bathory · 03-08-2011, 04:52 PM

I saw it, that's why I told you to check the logs and/or comment out the 2 acls involving 127.0.0.1.
I guess it's just a warning because in newer squid versions the notation 127.0.0.1/255.255.255.255 is deprecated. You can use 127.0.0.1/32 instead. Besides service restarts normally as it gives an [OK]