squid not working

ssfrstlstnm · 10-26-2005, 07:51 PM

I'm trying to install squid on debian sarge in order to use dansguardian as a web filter for a pc that I am setting up for my daughter. I followed the manual instructions, but when I set the proxy to squid on port 3128 in firefox and try to access the web it says:

Code:

The proxy server you have configured could not be found. Please check your proxy settings and try again.

I guess there is something wrong in the access control list, but I don't know what it could be.

Code:

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563 # https, snews
acl SSL_ports port 873 # rsync
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 631 # cups
acl Safe_ports port 873 # rsync
acl Safe_ports port 901 # SWAT
acl purge method PURGE
acl CONNECT method CONNECT
http_access deny all
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
acl our_networks src 192.168.1.0/24 192.168.1.10/24
http_access allow our_networks
http_access allow localhost
http_access deny all

fouldsy · 10-27-2005, 04:01 AM

Quote:

acl CONNECT method CONNECT
http_access deny all

Your first http_access rule denies all traffic. This won't help

The http_access deny all should come right at the end, as you have, but it runs through the rules sequentially, meaning it immeadiately stops upon reaching this first rule. Remove the line, reconfigure squid with

Code:

/usr/local/squid/sbin/squid -k reconfigure

and see what happens.

ssfrstlstnm · 10-27-2005, 08:22 PM

Doesn't work

The squid config file is a nightmare. I am now trying to get tinyproxy working, but that gives the same result. It starts up fine, but firefox says it can't connect to the proxy. Even with the firewall off. Here's the config file for tinyproxy. I don't know what else could be wrong. Maybe gnome is screwing around with ports or something.

Code:

User thalia
Group thalia
Port 3128
Timeout 600
DefaultErrorFile "/usr/share/tinyproxy/default.html"
StatFile "/usr/share/tinyproxy/stats.html"
Logfile "/var/log/tinyproxy.log"
LogLevel Info
PidFile "/var/run/tinyproxy.pid"
MaxClients 100
MinSpareServers 5
MaxSpareServers 20
StartServers 10
MaxRequestsPerChild 0
Allow 127.0.0.1
Allow 192.168.1.0/25
ViaProxyName "tinyproxy"

ssfrstlstnm · 10-27-2005, 09:03 PM

Got it fixed! The problem was the proxy settings in firefox. I had it set up like this:

Code:

http proxy: squid         port: 3128

When it should be like this:

Code:

http proxy: 127.0.0.1   port: 3128

fouldsy · 10-28-2005, 07:16 AM

At least its working now. If you want to reference your machine by 'squid', you'd need to go into /etc/hosts and add an entry simply detailing your ip address and then the hostname 'squid'.