Re: [squid-users] Unable to forward this request at this time

Norman, you wrote:

NZ> Hi,

NZ> I am trying to access the internet using my Proxy Server
NZ> http://192.168.22.6:3128, but when I hit any page, I got

NZ> The following error was encountered:

NZ> * Unable to forward this request at this time.

NZ> This request could not be forwarded to the origin server or to any parent
NZ> caches. The most likely cause for this error is that:

NZ> * The cache administrator does not allow this cache to make direct
NZ> connections to origin servers, and
NZ> * All configured parent caches are currently unreachable.

NZ> Would someone please give me a few pointers? I used all default settings
NZ> from the squid.conf and only made changes to the following options.

NZ> Regards,
NZ> Norman

NZ> auth_param ntlm program /usr/lib/squid/wb_ntlmauth
NZ> auth_param ntlm children 5
NZ> auth_param ntlm max_challenge_reuses 0
NZ> auth_param ntlm max_challenge_lifetime 2 minutes
NZ> acl password proxy_auth REQUIRED
NZ> acl all src 0.0.0.0/0.0.0.0
NZ> acl manager proto cache_object
NZ> acl localhost src 127.0.0.1/255.255.255.255
NZ> acl to_localhost dst 127.0.0.0/8
NZ> acl SSL_ports port 443 563
NZ> acl Safe_ports port 80 # http
NZ> acl Safe_ports port 21 # ftp
NZ> acl Safe_ports port 443 563 # https, snews
NZ> acl Safe_ports port 70 # gopher
NZ> acl Safe_ports port 210 # wais
NZ> acl Safe_ports port 1025-65535 # unregistered ports
NZ> acl Safe_ports port 280 # http-mgmt
NZ> acl Safe_ports port 488 # gss-http
NZ> acl Safe_ports port 591 # filemaker
NZ> acl Safe_ports port 777 # multiling http
NZ> acl CONNECT method CONNECT
NZ> http_access deny all
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Here is your problem. Put this line at the end of your config, not here.

NZ> http_access allow manager localhost
NZ> http_access deny manager
NZ> http_access deny !Safe_ports
NZ> http_access deny CONNECT !SSL_ports
NZ> #http_access deny to_localhost
NZ> acl our_networks src 192.168.11.0/26 192.168.22.0/25
NZ> http_access allow our_networks
NZ> http_access allow localhost
NZ> http_reply_access allow all

-- 
Best regards,
 Marcin                            mailto:usenet@poligrafia-bis.pl