RE: [squid-users] Question about proxy auth & blind proxy.

> -----Original Message-----
> From: Billy Huddleston [mailto:billy@nxs.net]
> Sent: Thursday, July 14, 2005 7:25 AM
> To: squid-users@squid-cache.org
> Subject: [squid-users] Question about proxy auth & blind proxy.
>
>
> I've got a squid box configured for proxy-redirect.
>
> I want to have some user have blind-proxy, (based on my cisco access list
> redirecting them to the cache server) and then I have several users outside
> my network I want to give access to my cache/filter, but I want to do them
> via radius authentication via proxy_auth. If I start squid with my iptables
> redirect in place, it hangs at the proxy_auth childreen, If I drop the
> iptables, resart squid and then start iptables, it all works. I'm not
> wanting to use proxy_auth with my blind-proxy people.. I just want to be
> able to do BOTH at the same time.. Anyone seen this or know a fix?
>
> Thanks, Billy
>

Squid (to the best of my knowledge) is not iptables aware... I'd bet that something in your iptables setup is blocking some network access that the squid startup performs. Do you log denied access in iptables? If not, run a network sniffer when Squid starts. Perhaps it's the initial DNS lookups...

Chris
Received on Fri Jul 15 2005 - 12:43:23 MDT