ACL question...

Morning all...

        Last night, I changed:

acl all src 0.0.0.0/0.0.0.0
        
        to:

acl all src 131.162.0.0/16

        in order to close off our proxy server from being accessed off of
our network...all appears to be well except that I can no longer access my
cachemgr.cgi on the server, with an error of:

==================
While trying to retrieve the URL: cache_object://localhost/

The following error was encountered:

     Forwarding Denied.

This cache will not forward your request because it is trying to enforce a
sibling relationship. Perhaps the client at 127.0.0.1 is a cache which has
been misconfigured.
====================

        No probs, I figure the above ACL change is the cause, so I go and
look at my squid.conf and it has:

====================
acl all src 131.162.0.0/16
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80 21 443 563 70 210 1025-65535
acl CONNECT method CONNECT

http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
#
# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS
#
http_access allow all
======================

Which, if I'm reading this right, means that the first 'http_access' should
allow me to connect to the cachemgr.cgi through the localhost, no? Or am
I reading this wrong? :(

Thanks...

Marc G. Fournier marc.fournier@acadiau.ca
Senior Systems Administrator Acadia University

  "These are my opinions, which are not necessarily shared by my employer"
Received on Tue Oct 12 1999 - 07:34:08 MDT