Re: [squid-users] rproxy

You should also have a

never_direct allow all

Hmm.. your https_port looks a little bit odd for being a reverse-proxy port.
Missing reverse proxy options.

More hmm.. the URL also looks a little bit odd.. shoule be https://, but it
should not even get that far due to the above I think.. but there may be some
bug/misfeature. Will look into why the request was at all accepted.

But what I can tell that is that it makes sense you get "Access Denied".
http_access looks at the request, not how it is being forwarded.

Regards
Henrik Nordström

On Monday 19 November 2001 06.49, May Lyn Lis wrote:
> Hi Henrik,
> Thanks for the indication, I have try the
> configuration, and facing another problem. The
> following is my configuration.
>
> The problem I faced with this configuration is
> when I access through IE with URL
> https://webtest.proxy.com.sg, the browser return me
> with the following message :
>
> " The requested URL could not be retrieved
>
> While trying to retrieve the URL:
> http://galaxy.proxy.com.sg:443/
>
> The following error was encountered:
>
> Access Denied. "
>
> Need some highlight on any wrong or mis configuration.
>
> Note:
> 1. "galaxy" is the hostname of the reverse proxy
> server.
> 2. "webtest" has been pointed to ip address of reverse
> proxy server.
>
> ======================================================
> http_port webtest.proxy.com.sg:80 vhost
> defaultsite=mail.internalserver.com.sg
> https_port 443 cert=/usr/local/ssl/certs/sslcert.crt
> key=/usr/local/ssl/keys/ssl.key
> cache_peer mail.internalserver.com.sg parent 80 0
> no-query originserver
> cache_peer_access mail.internalserver.com.sg allow all
>
> acl HTTP protocol HTTP
> acl port80 port 80
> http_access allow HTTP port80
> mail.internalserver.com.sg
>
> Thanks & Best Regards,
> Lyn

-- 
MARA Systems AB
Giving you basic free Squid support
Priority support or Squid enhancements available on request