RE: [squid-users] Squid 2.7: Request from LAN UNABLE to FORWARD or CONNECTION REFUSED or ACCESS DENIED

From: Ricardo A <racham_at_hotmail.com>
Date: Thu, 3 Sep 2009 19:03:09 +0000

Dear Chris and Henrik,
I'm sorry, but now cannot access webpages from outside...
Yes I can from LAN...
 
I repeat that is a debian Lenny webserver-fileserver-firewall (iptables-Squid 2.7-Samba 3-Apache 2, all in the same machine).
 
The setting:
 
Squid 2.7
 
http_port 192.168.000.1:3128 transparent
http_port 80 accel defaultsite=mysite.com vhost
cache_peer 127.0.0.1 parent 80 0 no-query originserver name=Ricardo
cache_peer_access Ricardo mysite.com allow MyWeb
cache_peer_access Ricardo mysite.com deny all
 
Where the acl "MyWeb" is:> acl myweb dstdomain mysite.com mysite1.com mysite2.com.ar
 
(The sites are all on the same Apache, Virtual directory)
 
Iptables:
 
$IPTABLES -A tcp_packets -p TCP -s 0/0 -dport 80 -j allowed
 
$IPTABLES -t nat -A PREROUTING -i $LAN_IFACE -s $LAN_IP_RANGE -d ! $LAN_IP_RANGE -p tcp -dport 80 -j REDIRECT> -to-ports 3128

Apache 2:
 
port.conf
 
LISTEN 127.0.0.1:80
------------
With these settings, Apache 2 again warn:
 
apache2(98)Address already in use: make_sock: could not> bind to address [::]:80> (98)Address already in use: make_sock: could not bind to address 0.0.0.0:80> no listening sockets available, shutting down> Unable to open logs

Thanks in advance...
Ricardo

----------------------------------------
> Subject: RE: [squid-users] Squid 2.7: Request from LAN UNABLE to FORWARD or CONNECTION REFUSED or ACCESS DENIED
> From: henrik_at_henriknordstrom.net
> To: racham_at_hotmail.com
> CC: crobertson_at_gci.net; squid-users_at_squid-cache.org
> Date: Thu, 3 Sep 2009 05:50:26 +0200
>
> tor 2009-09-03 klockan 00:32 -0300 skrev RicardoCh:
>
>> Starting web server: apache2(98)Address already in use: make_sock: could not
>> bind to address [::]:80
>> (98)Address already in use: make_sock: could not bind to address 0.0.0.0:80
>> no listening sockets available, shutting down
>> Unable to open logs
>
> You need to tell Apache to listen on the loopback address.
>
> http://httpd.apache.org/docs/2.2/mod/mpm_common.html#listen
>
>
> Regards
> Henrik
>
_________________________________________________________________
View your other email accounts from your Hotmail inbox. Add them now.
http://clk.atdmt.com/UKM/go/167688463/direct/01/
Received on Thu Sep 03 2009 - 19:03:16 MDT

This archive was generated by hypermail 2.2.0 : Fri Sep 04 2009 - 12:00:02 MDT