Hello,
I'm having a strange problem. Our network is setup by a technician
and previously we used 172.16.0.0/16 series of ips. We have setup a
squid server and all the internet acces goes through this squid proxy
server. We have decided to change the ip range to 10.180.0.0/19 series
of ips. Although i'm not a very professional, i have managed to change
them. but our proxy server does not work properly after that. The
Authentication methed that we used in our squid is LDAP which is
running in other server in our network, and the squid machine too is
running in a slave mode (LDAP slave). The errors we are getting are
1124865892.533 0 10.180.1.21 TCP_DENIED/407 1691 CONNECT
www.redhat.com:443 - NONE/- text/html
1124866019.340 120461 10.180.1.21 TCP_MISS/000 0 CONNECT
www.redhat.com:443 tawia NONE/- -
1124878009.262 125322 10.180.9.248 TCP_MISS/200 26222 GET
http://170.20.116.24/bb/getNewsImage? jbswain DIRECT/170.20.116.24
image/jpeg
1124878037.490 0 10.180.9.248 TCP_MISS/000 0 GET
http://boldandbeautiful.com/bb/main/images/menu_15-over.gif jbswain
NONE/- -
1124878037.897 0 10.180.9.248 TCP_IMS_HIT/304 217 GET
http://boldandbeautiful.com/bb/main/images/home_over.gif jbswain
NONE/- image/gif
1124878037.984 86 10.180.9.248 TCP_IMS_HIT/304 217 GET
http://boldandbeautiful.com/bb/main/images/home_on.gif jbswain NONE/-
image/gif
Please help me.
My squid.conf is given below :
http_port 8080
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 1024 MB
maximum_object_size 256 MB
cache_dir ufs /var/spool/squid 10240 16 256
auth_param basic program /usr/lib/squid/squid_ldap_auth -h 127.0.0.1
-p 389 -s one -b ou=internetusers,ou=people,dc=mizoram,dc=gov,dc=in
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
authenticate_ip_ttl 600 seconds
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
acl password proxy_auth REQUIRED
acl max_user max_user_ip -s 1
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access deny password max_user
http_access allow password
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow all
http_reply_access allow all
icp_access allow all
coredump_dir /var/spool/squid
Received on Wed Aug 24 2005 - 04:21:09 MDT
This archive was generated by hypermail pre-2.1.9 : Thu Sep 01 2005 - 12:00:02 MDT