Re: Fwd: [squid-users] Cache_Peer Question (Newbie)

beno wrote:
> Gonzalo Arana wrote:
>> Hi,
>>
>> The request you posted is a request that should be addressed to a web
>> server, not to a proxy server.
>>
>> Perhaps you want your squid to be an http accelerator? If this is the
>> case, and if you are running squid 2.6 you should have something like:
>>
>> http_port 80 virtual
> I got a bungled line on that. I changed "80" to "2020", which is what
> squid is listening on. I have Pound before Squid, passing requests to
> the latter on port 2020. I have Zope behind Squid, so Squid needs to
> pass requests to port 7080 where Zope can receive them.
>
> This works, but of course I only tested it then changed it:
>
> http_access allow all
>
> That tells me the problem appears to be in my acl rules. Here is my
> latest effort:
>
> acl my_ip src 202.71.106.119
> http_access allow my_ip localhost

This will never pass. Read up on ACLs
(http://wiki.squid-cache.org/SquidFaq/SquidAcl#head-af2c190759b099a7986221cd12a4066eb146a1c4)
to see why.

> cache_peer_access 2012.vi allow my_ip localhost

Same story here.

> cache_peer_access 2012.vi deny all
> http_access deny all
>
> Here's some stuff from my access.log:
>
> 1156529358.559 0 202.71.106.119 TCP_DENIED/403 1438 GET
> http://shop.2012.vi/Jewels_Gems/Jewelry/mailto:squid@2012.vi - NONE/-
> text/html
> 1156529359.183 0 202.71.106.119 TCP_DENIED/403 1398 GET
> http://shop.2012.vi/Jewels_Gems/Jewelry/ - NONE/- text/html
> 1156529386.843 0 202.71.106.119 TCP_DENIED/403 1428 GET
> http://shop.2012.vi/Divination/Tarot/Boxes_for_Your.pt? - NONE/-
> text/html
> 1156529521.854 0 202.71.106.119 TCP_DENIED/403 1432 GET
> http://shop.2012.vi/Customer_Service/Contact_Us/Typos.pt? - NONE/-
> text/html
> 1156529656.926 0 202.71.106.119 TCP_DENIED/403 1470 GET
> http://shop.2012.vi/Customer_Service/Contact_Us/Comments_Concerning_Page.pt?
> - NONE/- text/html
> 1156529678.068 0 202.71.106.119 TCP_DENIED/403 1378 GET
> http://shop.2012.vi/robots.txt - NONE/- text/html
> 1156529678.662 0 202.71.106.119 TCP_DENIED/403 1420 GET
> http://shop.2012.vi/My_2012/Preferences/Sign_In.pt? - NONE/- text/html
> 1156529792.388 0 202.71.106.119 TCP_DENIED/403 1440 GET
> http://shop.2012.vi/Divination/Tarot/Boxes_for_Your_Cards.pt? - NONE/-
> text/html
> 1156529927.684 0 202.71.106.119 TCP_DENIED/403 1440 GET
> http://shop.2012.vi/Divination/Tarot/Boxes_for_Your_Cards.pt? - NONE/-
> text/html
> 1156530062.955 0 202.71.106.119 TCP_DENIED/403 1440 GET
> http://shop.2012.vi/Divination/Tarot/Boxes_for_Your_Cards.pt? - NONE/-
> text/html
>
> Surfing to the page gives me an "Access Denied" error, generated by
> Squid.
> Thanks for any help you can offer,
> beno

Chris
Received on Fri Aug 25 2006 - 13:42:32 MDT