Re: [squid-users] sites on different ports

From: Payal Rathod <[email protected]>
Date: Thu, 4 Mar 2004 04:37:12 +0000

On Wed, Mar 03, 2004 at 10:02:59PM +0100, Henrik Nordstrom wrote:
> On Wed, 3 Mar 2004, Payal Rathod wrote:
>
> > My friend's place where it works, she has a similar configuration like
> > mine and her squid.conf does not have port 8443 listed anywhere. The
> > only difference is that I am doing it on Mandrake 9.1 and she has
> > Mandrake 9.2 in her company and we both are using the default squid
> > which comes with the respective distros.
>
> The operating system is not relevant. The details of your http_access
> rules is all that matters.

Ok...getting some hints. On the machine it is working I have,

#http_access deny !Safe_ports
#http_access deny CONNECT !SSL_ports

i.e. the lines are commented out.

But on the machine where it is not working I have,
http_access deny !Safe_ports
# Deny CONNECT to other than SSL ports
http_access deny CONNECT !SSL_ports

Both the machines have,
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http

I think that was the issue. Right?

Also, the error message which I get is *incomplete*. It says,

The following error was encountered:

Access Denied.
Access control configuration prevents your request fro

Rather strange ... leaving it incomplete. Thanks for the help.

With warm regards,
-Payal
Received on Wed Mar 03 2004 - 21:37:25 MST

This archive was generated by hypermail pre-2.1.9 : Thu Apr 01 2004 - 12:00:01 MST