Re: [squid-users] Unable to use MS Messanger with squid in transparent mode

From: Henrik Nordstrom <hno@dont-contact.us>
Date: 14 May 2003 17:40:34 +0200

Your requests is denied by your squid access configuration (http_access
rules).

See Squid FAQ 10.9 I set up my access controls, but they don't work!
why? <url:http://www.squid-cache.org/Doc/FAQ/FAQ-10.html#acl-debug>

Regards
Henrik

ons 2003-05-14 klockan 13.52 skrev Francesco Garofalo:
> Hello
>
> I'm not able to use MS Messanger with squid in transparent mode.
>
>
> Ip tables rule to redirect:
> ...
> -A PREROUTING -p tcp -m tcp ! -d eth0 -i eth0 --dport http -j
> REDIRECT --to-ports 8080
>
> ...
> _________________________________________________
>
> Squid.Conf
> _______________________________________________________________
> hierarchy_stoplist cgi-bin ?
> acl QUERY urlpath_regex cgi-bin \?
> no_cache deny QUERY
> emulate_httpd_log on
> acl all src 0.0.0.0/0.0.0.0
> acl manager proto cache_object
> acl localhost src 127.0.0.1/255.255.255.255
> acl SSL_ports port 443 563 1863 5190
> acl Safe_ports port 21 70 80 210 280 288 443 488 563 591 777 1863 5190
> 1025-65535
> acl CONNECT method CONNECT
> acl IP_Autorizzati src 192.168.4.1-192.168.4.254
> acl SITI_NO dstdomain www.test.test
> acl Wizard_NO dstdom_regex something
> acl Contenuto_NO url_regex \.mp3$
> acl SUPER_UTENTI src 192.168.168.1-192.168.168.2
> http_access allow manager localhost
> http_access allow SUPER_UTENTI
> http_access deny SITI_NO
> http_access deny Contenuto_NO
> http_access deny Wizard_NO
> http_access allow IP_Autorizzati
> http_access deny manager
> http_access deny !Safe_ports
> http_access deny CONNECT !SSL_ports
> http_access allow localhost
> http_access deny all
> icp_access allow all
> http_port eth0:8080
> httpd_accel_host virtual
> httpd_accel_with_proxy off
> httpd_accel_uses_host_header on
> visible_hostname mybox
> unlinkd_program /usr/lib/squid/unlinkd
> icon_directory /usr/lib/squid/icons
> error_directory /etc/squid/errors
> cache_mem 32 MB
> cache_access_log /var/log/squid/access.log
> cache_store_log /var/log/squid/store.log
> cache_dir ufs /var/spool/squid 500 16 256
> pid_filename /var/run/squid.pid
> ____________________________________________________________________________
>
> Every think is working fine except ms messanger
>
> access.log line:
>
> 192.168.4.200 - - [14/May/2003:05:31:23 +0200] "POST
> http://gateway.messenger.hotmail.com/gateway/gateway.dll? HTTP/1.1" 403 690
> TCP_DENIED:NONE
>
>
> Any idea ?
>
> Thx in advance

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org
Please consult the Squid FAQ and other available documentation before
asking Squid questions, and use the squid-users mailing-list when no
answer can be found. Private support questions is only answered
for a fee or as part of a commercial Squid support contract.
If you need commercial Squid support or cost effective Squid and
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, info@marasystems.com
Received on Wed May 14 2003 - 09:40:49 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:16:40 MST