Re: [squid-users] GET cache_object://localhost/info on a reverse proxy setup

From: Henrik Nordstrom <henrik_at_henriknordstrom.net>
Date: Mon, 07 Jul 2008 15:28:04 +0200

Oh, you are using a url rewriter..

I would do it differently.

url_rewrite_access deny manager

this way you can still use squidclient on your published URLs and have
Squid react like expected on them, including URL rewrites...

On mån, 2008-07-07 at 14:25 +0200, David Obando wrote:
> Hi,
>
> I found out, I had to configure an acl in squidGuard.conf:
>
>
> dbhome /var/lib/squidguard/db
> logdir /var/log/squid
>
> #
> # DESTINATION CLASSES:
> #
>
> src local {
> ip 127.0.0.1
> }
>
> dest good {
> }
>
> dest local {
> }
>
> acl {
> local {
> pass all
> }
>
> default {
> redirect
> http://localhost:8080/VirtualHostBase/http/www.xyz.de:80/VirtualHostRoot/%p
> }
> }
>
>
>
>
> Thanks!
> David
>
> Henrik Nordstrom schrieb am 07.07.2008 14:03:
> > On mån, 2008-07-07 at 10:19 +0200, David Obando wrote:
> >
> >> Hi,
> >>
> >> thanks for the hint, I added
> >>
> >> http_port 127.0.0.1:3128
> >>
> >> to my config. Now I can access port 3128 with telnet or squidclient, but
> >> receive an "access denied":
> >>
> >> /var/log/squid/access.log:
> >> 127.0.0.1 - - [07/Jul/2008:10:16:43 +0200] "GET
> >> cache_object://localhost/info HTTP/1.0" 403 1430 "-" "-" TCP_DENIED:NONE
> >>
> >
> > You probably aren't allowing localhost access to the manager functions..
> >
> > there is rules to allow this in the standard squid.conf installed when
> > you install Squid, but..
> >
> > Regards
> > Henrik
> >
>
>

Received on Mon Jul 07 2008 - 13:28:09 MDT

This archive was generated by hypermail 2.2.0 : Mon Jul 07 2008 - 12:00:04 MDT