Re: [squid-users] TCP_Denied

From: Raymond Norton <[email protected]>
Date: Fri, 12 Sep 2003 22:53:13 -0500

This is in an IPCop box. Very simple config. Here is the whole thing.

shutdown_lifetime 5 seconds

icp_port 0

http_port 172.21.0.1:800

acl QUERY urlpath_regex cgi-bin \?

no_cache deny QUERY

cache_effective_user squid

cache_effective_group squid

pid_filename /var/run/squid.pid

cache_access_log /var/log/squid/access.log

cache_log /var/log/squid/cache.log

cache_store_log /var/log/squid/store.log

log_mime_hdrs off

forwarded_for off

authenticate_program /usr/lib/squid/ncsa_auth /home/.htpasswd

acl password proxy_auth REQUIRED

acl local-servers dstdomain bbe.k12.mn.us map.nwea.org nwea.org

acl all src 0.0.0.0/0.0.0.0

acl localhost src 127.0.0.1/255.255.255.255

acl localnet src 172.21.0.0/255.255.0.0

acl SSL_ports port 443 563

acl Safe_ports port 80 # http

acl Safe_ports port 21 # ftp

acl Safe_ports port 443 563 # https, snews

acl Safe_ports port 70 # gopher

acl Safe_ports port 210 # wais

acl Safe_ports port 1025-65535 # unregistered ports

acl Safe_ports port 280 # http-mgmt

acl Safe_ports port 488 # gss-http

acl Safe_ports port 591 # filemaker

acl Safe_ports port 777 # multiling http

acl Safe_ports port 800 # Squids port (for icons)

acl Safe_ports port 1433 # skyward

acl Safe_ports port 16125 # skyward

acl Safe_ports port 26125 # skyward

acl Safe_ports port 16126 # ns1

acl Safe_ports port 36125 # extra

acl Safe_ports port 46125 # fintrain

acl Safe_ports port 56125 # stutrain

acl Safe_ports port 81 # ipcop

# acl CONNECT method CONNECT

# http_access allow localhost

http_access allow !Safe_ports

# http_access allow CONNECT !SSL_ports

# http_access allow localnet

http_access allow password

always_direct allow local-servers

http_access deny all

maximum_object_size 4096 KB

minimum_object_size 0 KB

cache_mem 2000 KB

cache_dir ufs /var/log/cache 50 16 256

request_body_max_size 0 KB

reply_body_max_size 0 KB

----- Original Message -----
From: "Adam Aube" <aaube@firstindependent.net>
To: <squid-users@squid-cache.org>
Sent: Friday, September 12, 2003 10:28 PM
Subject: Re: [squid-users] TCP_Denied

> > I am trying to connect to a secure site, but keep getting the following
> > error. Being a novice with squid I am not sure what to change. Can
anyone
> > help me with this?
>
> You didn't send your complete squid.conf (or at least I hope you didn't) -
> there's quite a bit missing.
>
> Post your entire squid.conf, and then maybe we can help you.
>
> Adam
>
Received on Fri Sep 12 2003 - 21:53:21 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:19:43 MST