Re: [squid-users] Access denied

Hello,

I tried and get this in access.log
172.25.9.90 - - [10/May/2005:11:55:34 +0200] "GET http://www.heise.de/
HTTP/1.1" 407 1802 TCP_DENIED:NONE
172.25.9.90 - vogels [10/May/2005:11:55:41 +0200] "GET http://www.heise.de/
HTTP/1.1" 403 1381 TCP_DENIED:NONE

and this in cache.log
2005/05/10 11:55:34| The request GET http://www.heise.de/ is DENIED,
because it matched 'inet_users'
2005/05/10 11:55:34| The reply for GET http://www.heise.de/ is ALLOWED,
because it matched 'all'
2005/05/10 11:55:41| The request GET http://www.heise.de/ is DENIED,
because it matched 'all'
2005/05/10 11:55:41| The reply for GET http://www.heise.de/ is ALLOWED,
because it matched 'all'

in squid.conf I have
....
http_access allow inet_users
...
http_access deny all
...

the acl inet_users is the ldap-group-helper, and of course I am in that
group.

I don't understand why there is ALLOWED because it matches ALL...

Regards

Stefan

                                                                           
             Henrik Nordstrom
             <hno@squid-cache.
             org> To
                                       Stefan.Vogel@temic.com
             10.05.2005 11:29 cc
                                       squid-users@squid-cache.org
                                                                   Subject
                                       Re: [squid-users] Access denied
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           

On Tue, 10 May 2005 Stefan.Vogel@temic.com wrote:

> Addition to my problem:
>
> in access.log the following entry occours:
>
> 172.25.9.90 - vogels [10/May/2005:09:51:03 +0200] "GET
> http://www.squid-cache.org/Doc/FAQ/FAQ-10.html HTTP/1.1" 403 1433
> TCP_DENIED:NONE
>
> after pressing F5 this line is added
>
> 172.25.9.90 - vogels [10/May/2005:09:53:11 +0200] "GET
> http://www.squid-cache.org/Doc/FAQ/FAQ-10.html HTTP/1.1" 200 32790
> TCP_CLIENT_REFRESH_MISS:DIRECT

Odd.

See Squid FAQ 10.9 I set up my access controls, but they don't work! why?
<url:http://www.squid-cache.org/Doc/FAQ/FAQ-10.html#acl-debug>

for instructions how to get a more detailed view of what is going on here.

Regards
Henrik
Received on Tue May 10 2005 - 04:13:19 MDT