[squid-users] Re: Access denials following Machine name change

From: Harry Putnam <[email protected]>
Date: Fri, 03 Mar 2006 04:45:42 -0600

Henrik Nordstrom <henrik@henriknordstrom.net> writes:

> This is your http_access lines denying access for some reason. But I
> could not see anything obvious in the config you posted..
>
> Anything in cache.log?
>
> What did access.log say?

Just now, starting firefox I get this screen:
ERROR
The requested URL could not be retrieved

While trying to retrieve the URL: http://www.google.com/

The following error was encountered:

    * Access Denied.

      Access control configuration prevents your request from being
      allowed at this time. Please contact your service provider if
      you feel this is incorrect.

access.log shows:

  1141381871.443 119 192.168.0.4 TCP_REFRESH_HIT/200
  1724 GET http://www.google.com/favicon.ico - DIRECT/72.14.203.104
  text/html

If I click the URL in above output I then get google but the top
images is missing.

And these lines are added to access.log:

  1141382106.544 0 192.168.1.2 TCP_DENIED/403 1395 GET
             http://www.google.com/ - NONE/- text/html

  1141382108.484 48 192.168.0.4 TCP_MISS/200 1588 GET
             http://www.google.com/ - DIRECT/72.14.203.99 text/html

  1141382108.584 0 192.168.1.2 TCP_DENIED/403 1441 GET
             http://www.google.com/intl/en/images/logo.gif - NONE/-
             text/html

You notice a new host IP is in there (ending 1.2). That is a second
nic that talks to a dmz machine. It shouldn't be there right?

cache.log has nothing to say so far.

Here I've connected to a bank ok and then attempted to log in which
is denied:

o While trying to retrieve the URL: www.corusbankhb.com:443
o The following error was encountered:
o * Access Denied.

access.log:

  1141382349.763 0 192.168.1.2 TCP_DENIED/403 1397 CONNECT
             www.corusbankhb.com:443 - NONE/- text/html

  1141382355.123 5358 192.168.0.4 TCP_MISS/200 3399 CONNECT
             www.corusbankhb.com:443 - DIRECT/208.35.186.137 -
 
  1141382355.244 6313 192.168.0.4 TCP_MISS/200 19720 CONNECT
             www.corusbankhb.com:443 - DIRECT/208.35.186.137 -
Received on Fri Mar 03 2006 - 03:46:19 MST

This archive was generated by hypermail pre-2.1.9 : Sat Apr 01 2006 - 12:00:03 MST