[squid-users] Squid and Secure.NCIX.com

From: Jeff W <jeff.welling_at_gmail.com>
Date: Thu, 19 Jun 2008 11:58:30 -0700

Um, I'm having a strange problem where it seems the only website I'm
unable to access from behind my squid3 proxy is a number of sites at
secure.ncix.com.

Does anyone else have this problem?
I've added an always_direct option but that does not seem to have
helped. Attached is my squid.conf file. Yes, tcp_outgoing must be
set like that.

Any help would be appreciated, thanks.
Jeff.

http_port 3128 transparent
icp_port 3130
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
cache_mem 1024 MB
maximum_object_size 921600 KB
maximum_object_size_in_memory 10240 KB
cache_dir ufs /var/spool/squid3 176000 16 256
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
acl our_networks src 192.168.7.0/24
http_access allow our_networks
http_access allow localhost
http_access deny all
http_reply_access allow all
icp_access allow all
tcp_outgoing_address 192.168.7.2
forwarded_for off
acl secure-ncix dstdomain secure.ncix.com
always_direct allow secure-ncix
coredump_dir /var/spool/squid3
Received on Thu Jun 19 2008 - 18:58:35 MDT

This archive was generated by hypermail 2.2.0 : Fri Jun 20 2008 - 12:00:04 MDT