Re: [squid-users] Connection failed from Internet Explorer in Win2000

Check if you do port-filtering via iptables... you have to allow port
3128 for your clients!

cheers

Daphne@erb.org wrote:

>Hi,
>
>This is my first time to setup Squid-2.5.STABLE9-7 on Linux (Fedora Core
>3).
>I start Squid and get the message as below.
>...
>Loaded Icons.
>Accepting HTTP connections at 0.0.0.0 port 3128. FD 11
>...
>Ready to serve requests.
>...
>
>I've tested Squid by using squidclient at this proxy server (localhost) and
>can access the website. I find a record in access.log
>e.g.
>1121252787.712 216 127.0.0.1 TCP_MISS/200 2734 GET http://www.info.gov.hk
>- DIRECT/202.128.227.99 text/html
>
>But, when I try to access website via Internet Expolorer in Win 2000, I
>can't access internet and no information is recorded in access.log.
>
>Please advise this.
>
>Thanks,
>Daphne
>
>/** squid.conf (for testing) is as below ***/
>cache_dir ufs /var/spool/squid/ 100 16 256
>cache_effective_user squid
>cache_effective_group squid
>
>
>visible_hostname hqlog01
>coredump_dir /usr/local/squid/var/cache
>
>hierarchy_stoplist cgi-bin ?
>acl QUERY urlpath_regex cgi-bin \?
>no_cache deny QUERY
>
>auth_param basic children 5
>auth_param basic realm Squid proxy-caching web server
>auth_param basic credentialsttl 2 hours
>
>refresh_pattern ^ftp: 1440 20% 10080
>refresh_pattern ^gopher: 1440 0% 1440
>refresh_pattern . 0 20% 4320
>
>acl all src 0.0.0.0/0.0.0.0
>acl manager proto cache_object
>acl SSL_ports port 443 563
>acl Safe_ports port 80 # http
>acl Safe_ports port 21 # ftp
>acl Safe_ports port 443 563 # https, snews
>acl Safe_ports port 70 # gopher
>acl Safe_ports port 210 # wais
>acl Safe_ports port 280 # http-mgmt
>acl Safe_ports port 488 # gss-http
>acl Safe_ports port 591 # filemaker
>acl Safe_ports port 777 # multiling http
>acl Safe_ports port 403
>acl Safe_ports port 5588
>acl Safe_ports port 304
>acl Safe_ports port 1025-65535 # unregistered ports
>#acl Safe_ports port 3128 # squid
>acl CONNECT method CONNECT
>
>acl localhost src 127.0.0.1/255.255.255.255
>http_access allow localhost
>
>acl daphne src 191.161.1.28/255.255.255.255
>http_access allow daphne
>icp_access allow daphne
>
>http_access deny !Safe_ports
>http_access deny CONNECT !SSL_ports
>
>icp_access allow all
>http_access deny all
>
>*********
>
>
>
Received on Thu Jul 14 2005 - 22:03:15 MDT