Fórum Ubuntu CZ/SK
Ostatní => Ubuntu Server => Téma založeno: vejbuch 25 Června 2011, 13:11:04
-
Cau hosi prosimvás můžete mi někdo poslat ukázkovej squid.conf? At to zkousim jak to zkousim tak mi to furt pise pri pripojeni na jakoukoli stranku:
ERROR
The requested URL could not be retrieved
předem díky :-)
Edit: tak aby se prez ni dalo vse prohilizet :-)
The following error was encountered:
Access Denied.
Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect.
Your cache administrator is webmaster.
-
Tak co poradí nekdo? mam server s veřejnou IP ale když dam proxy ip do prohlizece tak mi to napise Access Denied. pri kazde strance co chci otevrit :/
-
A máš prostup povolený ve firewallu? Pokud máš aktivní firewall, squid funguje přes jiný port, než klasícký 80 a musíš tam mít redirect ..kdyžtak vypni FW a vyzkoušej, jestli to funguje bez něj..
-
# cat /zones/squid/root/opt/squid26s17-gnu/etc/squid.conf
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
acl our_networks src 192.168.60.0/24
http_access allow our_networks
http_access allow localhost
http_access deny all
icp_access allow all
http_port 3128
hierarchy_stoplist cgi-bin ?
access_log /opt/squid26s17-gnu/var/logs/access.log squid
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
coredump_dir /opt/squid26s17-gnu/var/cache
cache_mem 16 MB
visible_hostname squid
cache_effective_user squidg
-
FW je Off... ale kdyz dam tohle do configu tak to hodi
Restarting Squid HTTP proxy: squid2011/06/28 23:12:01| WARNING: '0.0.0.0/0.0.0.0
' is a subnetwork of '0.0.0.0/0.0.0.0'
2011/06/28 23:12:01| WARNING: because of this '0.0.0.0/0.0.0.0' is ignored to ke
ep splay tree searching predictable
2011/06/28 23:12:01| WARNING: You should probably remove '0.0.0.0/0.0.0.0' from
the ACL named 'all'
2011/06/28 23:12:01| WARNING: '127.0.0.1' is a subnetwork of '127.0.0.1'
2011/06/28 23:12:01| WARNING: because of this '127.0.0.1' is ignored to keep spl
ay tree searching predictable
2011/06/28 23:12:01| WARNING: You should probably remove '127.0.0.1' from the AC
L named 'localhost'
2011/06/28 23:12:01| WARNING: '127.0.0.0/255.0.0.0' is a subnetwork of '127.0.0.
0/255.0.0.0'
2011/06/28 23:12:01| WARNING: because of this '127.0.0.0/255.0.0.0' is ignored t
o keep splay tree searching predictable
2011/06/28 23:12:01| WARNING: You should probably remove '127.0.0.0/255.0.0.0' f
rom the ACL named 'to_localhost'
FATAL: getpwnam failed to find userid for effective user 'squidg'
Squid Cache (Version 2.7.STABLE3): Terminated abnormally.
CPU Usage: 0.005 seconds = 0.003 user + 0.002 sys
Maximum Resident Size: 6128 KB
Page faults with physical i/o: 5
/etc/init.d/squid: line 73: 11483 Aborted start-stop-daemon --qu
iet --start --pidfile $PIDFILE --chuid $CHUID --exec $DAEMON -- $SQUID_ARGS < /d
ev/null
failed!
-
tak to tam prosim nedavej a precti si ten manual ... omg, cos cekal ??