Hi all
Though I have not yet received any response, I would like to add that I
tried doing.
http_access allow all
and removed all other rules just to check if it works - and it doesn't.
Could any one point out what could be the reason for the error message
pointing at the misconfiguration of access control.
Following are the 2 outputs, after executing my squid prog and the client.
# 2002/03/31 18:16:56| Starting Squid Cache version 2.4.STABLE1 for
i386-redhat-linux-gnu...
2002/03/31 18:16:56| Process ID 17456
2002/03/31 18:16:56| With 1024 file descriptors available
2002/03/31 18:16:56| Performing DNS Tests...
2002/03/31 18:16:56| Successful DNS name lookup tests...
2002/03/31 18:16:56| DNS Socket created on FD 4
2002/03/31 18:16:56| Adding nameserver 24.217.0.3 from /etc/resolv.conf
2002/03/31 18:16:56| Adding nameserver 24.217.0.4 from /etc/resolv.conf
2002/03/31 18:16:56| Unlinkd pipe opened on FD 9
2002/03/31 18:16:56| Swap maxSize 102400 KB, estimated 7876 objects
2002/03/31 18:16:56| Target number of buckets: 393
2002/03/31 18:16:56| Using 8192 Store buckets
2002/03/31 18:16:56| Max Mem size: 8192 KB
2002/03/31 18:16:56| Max Swap size: 102400 KB
2002/03/31 18:16:56| Rebuilding storage in /var/spool/squid (DIRTY)
2002/03/31 18:16:56| Using Least Load store dir selection
2002/03/31 18:16:56| Set Current Directory to /var/spool/squid
2002/03/31 18:16:56| Loaded Icons.
2002/03/31 18:16:56| Accepting HTTP connections at 0.0.0.0, port 3128, FD
10.
2002/03/31 18:16:56| Accepting ICP messages at 0.0.0.0, port 3130, FD 11.
2002/03/31 18:16:56| Accepting HTCP messages on port 4827, FD 12.
2002/03/31 18:16:56| Accepting SNMP messages on port 3401, FD 13.
2002/03/31 18:16:56| WCCP Disabled.
2002/03/31 18:16:56| Ready to serve requests.
2002/03/31 18:16:57| Done scanning /var/spool/squid swaplog (0 entries)
2002/03/31 18:16:57| Finished rebuilding storage from disk.
2002/03/31 18:16:57| 0 Entries scanned
2002/03/31 18:16:57| 0 Invalid entries.
2002/03/31 18:16:57| 0 With invalid flags.
2002/03/31 18:16:57| 0 Objects loaded.
2002/03/31 18:16:57| 0 Objects expired.
2002/03/31 18:16:57| 0 Objects cancelled.
2002/03/31 18:16:57| 0 Duplicate URLs purged.
2002/03/31 18:16:57| 0 Swapfile clashes avoided.
2002/03/31 18:16:57| Took 1.0 seconds ( 0.0 objects/sec).
2002/03/31 18:16:57| Beginning Validation Procedure
2002/03/31 18:16:57| Completed Validation Procedure
2002/03/31 18:16:57| Validated 0 Entries
2002/03/31 18:16:57| store_swap_size = 84k
2002/03/31 18:16:58| storeLateRelease: released 0 objects
# client -l 192.168.0.1 http://www.google.com
HTTP/1.0 403 Forbidden
Server: Squid/2.4.STABLE1
Mime-Version: 1.0
Date: Mon, 01 Apr 2002 00:23:16 GMT
Content-Type: text/html
Content-Length: 696
Expires: Mon, 01 Apr 2002 00:23:16 GMT
X-Squid-Error: ERR_ACCESS_DENIED 0
X-Cache: MISS from coolnis-ar
Proxy-Connection: close
<HTML><HEAD>
<TITLE>ERROR: The requested URL could not be retrieved</TITLE>
</HEAD><BODY>
<H1>ERROR</H1>
<H2>The requested URL could not be retrieved</H2>
<HR>
<P>
While trying to retrieve the URL:
<A HREF="http://www.google.com">http://www.google.com</A>
<P>
The following error was encountered:
<UL>
<LI>
<STRONG>
Access Denied.
</STRONG>
<P>
Access control configuration prevents your request from
being allowed at this time. Please contact your service provider if
you feel this is incorrect.
</UL>
<P>Your cache administrator is <A HREF="mailto:root">root</A>.
<br clear="all">
<hr noshade size=1>
Generated Mon, 01 Apr 2002 00:23:16 GMT by coolnis-ar (Squid/2.4.STABLE1)
</BODY></HTML>
#
--------Thanks in advance
Aman
>From: "Aman Raheja" <amansquid@hotmail.com>
>To: squid-users@squid-cache.org
>Subject: [squid-users] novice here
>Date: Sun, 31 Mar 2002 15:56:58 -0600
>
>Hi
>I have RH Linux 7.2 running squid. I think I am having problem with ACL. To
>me this seems sufficient.
>
>http_access allow 192.168.0.0/255.255.255.0
>
>Rest is default in the squid.conf file.
>I get an error in the browser saying
>
>Access Denied
>Access control configuration prevents your request from being
>allowed...........
>
>Thanks for the time of people helping me out.
>Aman
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp.
Received on Sun Mar 31 2002 - 17:42:06 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:07:13 MST