Re: [squid-users] Re: How to make Squid 3.3.8 a transparent proxy?

From: Tobias Krais <tux-spam_at_design-to-use.de>
Date: Tue, 22 Apr 2014 09:26:32 +0200

Hi Eliezer,

as you may have read, Amos helped me to find the issus. Thanks a lot for
your help, too!

Greetings

Tobias

Am 21.04.2014 23:51, schrieb Eliezer Croitoru:
> Lets start from 0 once again.
> I will need some details.
> What OS are you using?
> What is the squid server place in the house? is it also the Gateway?
> The iptables rules might be wrong but the first thing to do is fix the
> basic settings and then see the logs.
> The basic thing is to define the local network with an acl rule such as:
> ##START
> acl localnet src 192.168.2.0/24
> http_access allow localnet Safe_Ports
> ##END
> or something similar.
> The localnet should be your lan segment address space.
>
> After adding the rules properly(note that squid reads the rules from
> tops to buttom and first HITs is the basic acl rule which squid obeys).
> If it's not working try regular basic setup with only one port listening
> and the proxy settings are defined manually in the browser.
> It might be a problem that is not related directly to you but it can be
> otherwise.
>
> Lets try the above fist.
>
> Eliezer
>
> On 04/19/2014 10:40 PM, Tobias Krais wrote:
>> Hi Eliezer
>>
>>> it's not a denial by squid but probably from other sites.
>>
>> which site do you think?
>>
>>> try two things:
>>> First use only squid no DG.
>>
>> Still same error. Here is the comletet error message in my browser:
>> -----%<-----
>> ERROR
>>
>> The requested URL could not be retrieved
>>
>> Der folgende Fehler wurde beim Versuch die URL http://www.tagesschau.de/
>> zu holen festgestellt:
>>
>> Zugriff verweigert.
>>
>> Die Anfrage wurde aufgrund mangelnder Zugriffsrechte verweigert. Bitte
>> kontaktieren Sie Ihren Dienstanbieter falls sie denken, dass dies ein
>> Fehler ist.
>>
>> Ihr Cache Administrator ist webmaster.
>>
>>
>> Erzeugt am Sat, 19 Apr 2014 19:32:06 GMT von Ubuntu-XPS (squid/3.3.8)
>> -----%<-----
>>
>> Last line says: generated by squid. The message text above says: "Access
>> denied ... because of insufficient access privileges."
>>
>>> Then see if it works.
>>> After this add DG as a parent proxy.
>>
>> Does not work either.
>>
>> Thanks for your ideas!
>>
>> Greetings,
>>
>> Tobias
>
Received on Tue Apr 22 2014 - 07:26:36 MDT

This archive was generated by hypermail 2.2.0 : Tue Apr 22 2014 - 12:00:06 MDT