Re: [squid-users] New Squid3 Stable 13 Setup

Thanks Amos

its working now, but i see a small issue when i do query on search engine
like google

i can directly hit on any site but when i do search i get

The system returned: (111) Connection refused

The remote host or network may be down. Please try the request again.

Thanks

Amos Jeffries-2 wrote:
>
>>
>> Hi Amos,
>>
>> Thanks for responding to my message.
>>
>> i am trying to achieve as mentioned below
>>
>> Site A has proxy as Proxy 2 and another proxy is located in different
>> country Site B through tunnel as Proxy1
>>
>> Site A has local internet when fails need all web request to be forwarded
>> to
>> proxy 1 through proxy 2 Ie with out changing client proxy address.
>>
>> similar setup was running for 1 month, some how messed up had to
>> reconfigure
>> from scratch.
>>
>
> Ah, okay this is what you want for the peering then:
>
> Proxy2:
> prefer_direct on
> cache_peer Proxy1 parent 8080 3130
> ...
>
> Proxy1:
> <only an ACL permitting Proxy2 to make requests as a client>
>
>
> Note the absence of 'default originserver' on proxy2 and any mention of
> peering on proxy1.
>
> If you have any problems with that it will be caused by other configure
> options I've overlooked.
>
> Amos
>
>>
>> bharathvn wrote:
>>>
>>> Hi,
>>>
>>> i am trying to setup proxy server as show below
>>>
>>> Client ==>Sibling ==> Parent==> Internet
>>>
>>> i got error when we browse any site from parent server as mentioned
>>> below
>>>
>>> The following error was encountered while trying to retrieve the URL: /
>>>
>>> Invalid URL
>>>
>>> Some aspect of the requested URL is incorrect.
>>>
>>> Some possible problems are:
>>>
>>> Missing or incorrect access protocol (should be http:// or similar)
>>>
>>> Missing hostname
>>>
>>> Illegal double-escape in the URL-Path
>>>
>>> Illegal character in hostname; underscores are not allowed.
>>>
>>> Your cache administrator is root.
>>>
>>> --------------------------------------------------------------------------------
>>>
>>> Generated Sun, 17 May 2009 18:13:40 GMT by proxy1 (squid/3.0.STABLE13)
>>>
>>> Parent Proxy config
>>>
>>>
>>> http_port 8080
>>> cache_peer proxy2 sibling 8080 0
>>> hierarchy_stoplist cgi-bin ?
>>> acl QUERY urlpath_regex cgi-bin \?
>>> cache deny QUERY
>>> acl apache rep_header Server ^Apache
>>> cache_mem 100 MB
>>> cache_swap_low 90
>>> cache_swap_high 95
>>> access_log /var/log/squid/access.log squid
>>> acl manager proto cache_object
>>> acl localhost src 127.0.0.1/255.255.255.255
>>> acl to_localhost dst 127.0.0.0/8
>>> acl SSL_ports port 443
>>> acl Safe_ports port 80 # http
>>> acl Safe_ports port 21 # ftp
>>> acl Safe_ports port 443 # https
>>> acl Safe_ports port 70 # gopher
>>> acl Safe_ports port 210 # wais
>>> acl Safe_ports port 1025-65535 # unregistered ports
>>> acl Safe_ports port 280 # http-mgmt
>>> acl Safe_ports port 488 # gss-http
>>> acl Safe_ports port 591 # filemaker
>>> acl Safe_ports port 777 # multiling http
>>> acl CONNECT method CONNECT
>>> acl US src b.b.b.b-b.b.b.254
>>> acl server src c.c.c.1-c.c.c.254
>>> http_access allow manager localhost
>>> http_access deny manager
>>> http_access deny !Safe_ports
>>> http_access deny CONNECT !SSL_ports
>>> http_access allow localhost
>>> http_access allow US
>>> http_access allow server
>>> http_access allow all
>>> http_reply_access allow all
>>> icp_access deny all
>>> cache_effective_user squid
>>> cache_effective_group squid
>>> icp_port 0
>>> coredump_dir /var/spool/squid
>>> refresh_pattern ^ftp: 1440 20% 10080
>>> refresh_pattern ^gopher: 1440 0% 1440
>>> refresh_pattern (cgi-bin|\?) 0 0% 0
>>> refresh_pattern . 0 20% 4320
>>>
>>>
>>> Sibling Proxy config
>>>
>>> http_port 8080
>>> cache_peer proxy1 parent 8080 0 default originserver
>>> hierarchy_stoplist cgi-bin ?
>>> acl QUERY urlpath_regex cgi-bin \?
>>> cache deny QUERY
>>> acl apache rep_header Server ^Apache
>>> cache_mem 100 MB
>>> cache_swap_low 90
>>> cache_swap_high 95
>>> access_log /var/log/squid/access.log squid
>>> acl manager proto cache_object
>>> acl localhost src 127.0.0.1/255.255.255.255
>>> acl to_localhost dst 127.0.0.0/8
>>> acl SSL_ports port 443
>>> acl Safe_ports port 80 # http
>>> acl Safe_ports port 21 # ftp
>>> acl Safe_ports port 443 # https
>>> acl Safe_ports port 70 # gopher
>>> acl Safe_ports port 210 # wais
>>> acl Safe_ports port 1025-65535 # unregistered ports
>>> acl Safe_ports port 280 # http-mgmt
>>> acl Safe_ports port 488 # gss-http
>>> acl Safe_ports port 591 # filemaker
>>> acl Safe_ports port 777 # multiling http
>>> acl CONNECT method CONNECT
>>> acl BLR src a.a.a.1-a.a.a.254
>>> acl US src b.b.b.b-b.b.b.254
>>> acl server src c.c.c.1-c.c.c.254
>>> acl TAC src d.d.d.1-d.d.d.254
>>> acl all src 0.0.0.0/255.0.0.0
>>> http_access allow manager localhost
>>> http_access deny manager
>>> http_access deny !Safe_ports
>>> http_access deny CONNECT !SSL_ports
>>> http_access allow localhost
>>> http_access allow BLR
>>> http_access allow US
>>> http_access allow server
>>> http_access allow TAC
>>> http_access deny all
>>> http_reply_access allow all
>>> icp_access allow all
>>> cache_effective_user squid
>>> cache_effective_group squid
>>> icp_port 0
>>> always_direct deny US
>>> always_direct deny BLR
>>> always_direct deny TAC
>>> prefer_direct on
>>> coredump_dir /var/spool/squid
>>> refresh_pattern ^ftp: 1440 20% 10080
>>> refresh_pattern ^gopher: 1440 0% 1440
>>> refresh_pattern . 0 20% 4320
>>>
>>> Pls help me on this.
>>>
>>> Thanks,
>>> Bharathvn
>>>
>>
>> --
>> View this message in context:
>> http://www.nabble.com/New-Squid3-Stable-13-Setup-tp23601156p23609041.html
>> Sent from the Squid - Users mailing list archive at Nabble.com.
>>
>>
>
>
>
>

-- 
View this message in context: http://www.nabble.com/New-Squid3-Stable-13-Setup-tp23601156p23609487.html
Sent from the Squid - Users mailing list archive at Nabble.com.