This is in an IPCop box. Very simple config. Here is the whole thing.
shutdown_lifetime 5 seconds
icp_port 0
http_port 172.21.0.1:800
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_effective_user squid
cache_effective_group squid
pid_filename /var/run/squid.pid
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
log_mime_hdrs off
forwarded_for off
authenticate_program /usr/lib/squid/ncsa_auth /home/.htpasswd
acl password proxy_auth REQUIRED
acl local-servers dstdomain bbe.k12.mn.us map.nwea.org nwea.org
acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.1/255.255.255.255
acl localnet src 172.21.0.0/255.255.0.0
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 800 # Squids port (for icons)
acl Safe_ports port 1433 # skyward
acl Safe_ports port 16125 # skyward
acl Safe_ports port 26125 # skyward
acl Safe_ports port 16126 # ns1
acl Safe_ports port 36125 # extra
acl Safe_ports port 46125 # fintrain
acl Safe_ports port 56125 # stutrain
acl Safe_ports port 81 # ipcop
# acl CONNECT method CONNECT
# http_access allow localhost
http_access allow !Safe_ports
# http_access allow CONNECT !SSL_ports
# http_access allow localnet
http_access allow password
always_direct allow local-servers
http_access deny all
maximum_object_size 4096 KB
minimum_object_size 0 KB
cache_mem 2000 KB
cache_dir ufs /var/log/cache 50 16 256
request_body_max_size 0 KB
reply_body_max_size 0 KB
----- Original Message -----
From: "Adam Aube" <aaube@firstindependent.net>
To: <squid-users@squid-cache.org>
Sent: Friday, September 12, 2003 10:28 PM
Subject: Re: [squid-users] TCP_Denied
> > I am trying to connect to a secure site, but keep getting the following
> > error. Being a novice with squid I am not sure what to change. Can
anyone
> > help me with this?
>
> You didn't send your complete squid.conf (or at least I hope you didn't) -
> there's quite a bit missing.
>
> Post your entire squid.conf, and then maybe we can help you.
>
> Adam
>
Received on Fri Sep 12 2003 - 21:53:21 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:19:43 MST