Re: [squid-users] DG and Squid 1 Machine

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Fri, 21 Nov 2008 01:24:14 +1300

░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░ wrote:
> hi all
> sorry for my cross posting but this is urgent :(
> i have problem here
>
> eth0 192.168.222.100 =>> Go to LAN and act as Client's GW and DNS (
> Installed DG and Squid )
> eth1 10.0.0.2 =>> Go to LoadBalancing + DMZ server ( IP PUBLIC
> forwarded ( got DMZ to this machine )
>
> squid.conf :
> http_port 2210 transparent
>
> dansguardian.conf :
> filterport = 2211
> proxyip = 127.0.0.1
> proxyport = 2210
>
> rc.local
> /sbin/iptables --table nat --append POSTROUTING --out-interface eth1
> -j MASQUERADE
> /sbin/iptables --append FORWARD --in-interface eth1 -j ACCEPT
> /sbin/iptables -t nat -A PREROUTING -i eth0 -p tcp -s
> 192.168.0.0/255.255.0.0 --dport 80 -j DNAT --to 192.168.222.100:2211
> /sbin/iptables -t nat -A PREROUTING -p tcp -i eth1 -d 10.0.0.2 --dport
> 2210 -j DNAT --to-destination 192.168.222.100
>
>
> output :
> ERROR
> The requested URL could not be retrieved
> --------------------------------------------------------------------------------
> While trying to retrieve the URL: http://google.com/
> The following error was encountered:
> Access Denied.
> ====
>
>
> what wrong ?

Did you remember these...

squid.conf:
   acl localnet src 192.168.0.0/16
   acl localhost src 127.0.0.1
   http_access allow localnet
   http_access allow localhost

Also check your DG controls for similar accept of all requests from
local network.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE5 or 3.0.STABLE10
   Current Beta Squid 3.1.0.2
Received on Thu Nov 20 2008 - 12:24:20 MST

This archive was generated by hypermail 2.2.0 : Thu Nov 20 2008 - 12:00:03 MST