[squid-users] Error tcp_negative on web server in DMZ

From: sasa <sasa@dont-contact.us>
Date: Tue, 22 Nov 2005 13:12:18 +0100

Hi, I use squid on Fedora Core 1:

squid-2.5.STABLE3-2
squidguard-1.2.0-2

.. my squid.conf is:

http_port 10.0.0.121:3128
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
acl windowsupdate dstdomain .windowsupdate.microsoft.com
no_cache deny windowsupdate
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl Safe_ports port 80 # http
acl CONNECT method CONNECT
acl local_net src 10.0.0.0/255.255.255.0
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny to_localhost
acl our_networks src 10.0.0.0/24
http_access allow our_networks
http_access allow local_net
http_access allow localhost
http_access deny all
http_reply_access allow all

..but on internal client of my LAN when I try in the web browser (IE):
http://www.mysite.com
..the dns resolutions is ok and the ip address of my webserver is:
10.0.1.2
..and I visualize only Fedora Core Test Page.

In the log I have:

tcp_negative_hit/403 GET http://www.mysite.com

..where is my error ?
thanks.

------
Salvatore.
Received on Tue Nov 22 2005 - 05:12:40 MST

This archive was generated by hypermail pre-2.1.9 : Thu Dec 01 2005 - 12:00:10 MST