Re: [squid-users] SQuid and squid client

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Tue, 31 Mar 2009 21:49:07 +1300

Merdouille wrote:
>
> I added :
>
> cachemgr_passwd toto all
> but i still have an error : cant access to the info
>

Your extremely strict reply access controls are probably blocking it.

>
> my acls :
>
>
> #============== ACL
> # nom type
> acl all src all
> acl rw url_regex -i http://moi/img=*
> acl out dstdomain "/etc/squid/white"
> acl port port 80
> acl localhost src 127.0.0.1
>
>
> #============== MISC
> visible_hostname moi
> http_port 80 transparent
> icp_port 0
> #============== REWRITE URL
> url_rewrite_program /etc/squid/rewriter.php
> url_rewrite_children 15
> url_rewrite_access allow rw
>
> #============= info password
> cachemgr_passwd toto all
> #============== GESTION DES DROITS
> # relation nom
> http_access deny !rw !all !port !localhost
> http_access allow rw all port localhost
> http_reply_access deny !out !localhost
> http_reply_access allow out localhost
>

huh? above simplifies down to:

   http_access allow rw port localhost out
   http_access deny all
   http_reply_access allow all

maybe with a "deny_info TCP_RESET all" to simulate the reply access
blocking 'access denied' messages.

To solve the stats retrieval problem write:

   acl manager proto cache_object
   http_access allow manager localhost

as the first http_access line.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE6 or 3.0.STABLE13
   Current Beta Squid 3.1.0.6
Received on Tue Mar 31 2009 - 08:49:10 MDT

This archive was generated by hypermail 2.2.0 : Tue Mar 31 2009 - 12:00:03 MDT