Re: [squid-users] disclosing an intranet site.

I thought i did with these acl's ?
(i've allowed only our internet ip adresses for testing )

acl all src 0.0.0.0/0.0.0.0
acl bron src 10.10.10.7/255.255.255.255
acl pipo proxy_auth src 164.111.141.141/255.255.255.248

http_access allow bron
http_access allow pipo
http_access deny all

Hans.

> You need to allow access to the site in http_access..
>
> Regards
> Henrik
>
> On Thu, 13 Nov 2003 hansvv@zonnet.nl wrote:
>
> >
> >
> > my situation : an iis server with intranet on the
internal
> > network (10.10.10.7:80.)
> >
> > I am trying to disclose the intranet pages to the
internet
> > with ncsa authentication.
> >
> > I have patched the source to get authentication working
in
> > reversed proxy mode.
> >
> > I can see in access.log that the authentication works
but
> > on my browser connected to the internet i get ACCESS
DENIED
> > to 10.10.10.7.
> >
> > it seems that i have no acl matching for the intranet
> > server, but i have !
> >
> > Is this construcion possible in the first place ?
> >
> > should i try squid 3?
> >
> > 1068646051.440 12 164.111.141.141 TCP_DENIED/403
1381
> > GET
> > http://10.10.10.7/frameset_1024.php hans NONE/-
text/html
> >
> > 1068646083.354 3 164.111.141.141 TCP_DENIED/401
1665
> > GET http://10.10.10.7/ - NONE/- text/html
> >
> > 1068646093.452 570 164.111.141.141 TCP_DENIED/403
1347
> > GET http://10.10.10.7/ hans NONE/- text/html
> >
> > (the ip adresses are made up)
> >
> > Hans.
> >
> >
>

-- 
_____________________________________________________________________
Snel en voordelig ADSL nu voor iedereen bereikbaar.
Zon Breedband Budget voor EUR 14,95 per maand.
Nu tijdelijk geen aansluitkosten. Bestel snel op zonnet.nl/breedband