Re: [squid-users] webmails are not accessible - SQUID 2.5.STABLE12

On Thu, 6 Sep 2007, Tek Bahadur Limbu wrote:

> Hi Simsam,
>
> shijjawi@wddjv.com wrote:
>> Hi Peter,
>> No, this is only the https rule, I wrote it done to illustrate that the
>> https ports are open.
>> All http traffic are opened.
>>
>> Could you please give me the commands needed to install SQUID 2.6 according
>> to tek's advise.
>> I got the file from the site, I have some worries as the upgrade might
>> affect the current setup!
>
> Did you install Squid-2.5 with SUSE's package management tool or did you
> install it from source?
>
> Which ever method you had used, you can just keep the Old Squid binary and
> it's configuration files just in case something goes wrong with the Squid-2.6
> installation!
>
> The following installation steps might help:
>
>
> (1.) tar zxvf squid-2.6.STABLE14.tar.gz
>
> (2.) cd squid-2.6.STABLE14/
>
> (3.) ./configure --bindir=/usr/local/sbin \

I'd rather do it as :

./configure --prefix=/usr/local/squid26

so that it puts all the squid 2.6 related files in single directory. for
easier access of config files and binary and logs, I'd create the symlinks
to my fav path. Just a point to share.

>
> --sysconfdir=/usr/local/etc/squid \
> --datadir=/usr/local/etc/squid \
> --libexecdir=/usr/local/libexec/squid \
> --localstatedir=/usr/local/squid \
> --enable-removal-policies=heap,lru \
> --enable-storeio=diskd,aufs,coss,ufs,null \
> --enable-snmp \
> --enable-epoll \
> --with-large-files \
> --prefix=/usr/local \
> --disable-ident-lookups \
> --enable-underscores \
> --with-large-files \
> --disable-http-violations \
> --enable-delay-pools \
> --with-maxfd=8192
>
>
> (4.) make all
>
> (5.) make install
>
> (6.) vi /usr/local/etc/squid/squid.conf
>
> (7.) /usr/local/sbin/squid -z
>
> (8.) /usr/local/sbin/squid -f /usr/local/etc/squid/squid.conf
>
>
> Note: Your compilation parameters may differ. Please adjust accordingly to
> your demands and needs.
>
> If your SUSE Linux box has installed and updated all the required development
> tools, then the installation should be a breeze!
>
> Remember to read the default squid.conf which comes with the new
> installation.
>
> Also check this out:
>
> http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE14-RELEASENOTES.html
>
>
> Happy Squid proxying with Squid-2.6STABLE14 !!!
>
>
> Thanking you...
>
>
>
>>
>>
>>
>> Thank you,
>> Simsam
>>
>>
>>
>>
>>
>> Peter Albrecht <peter.albrecht@novell.com> 09/05/2007 05:58 PM
>>
>> To
>> squid-users@squid-cache.org
>> cc
>>
>> Subject
>> Re: [squid-users] webmails are not accessible - SQUID 2.5.STABLE12
>>
>>
>>
>>
>>
>>
>> Hi Simsam,
>>
>>> I am still beginner in this field but I could tell you that the proxy
>>> itself is acting as a firewall, no specific protocol filtration and
>> here
>>> is the acl for the SSL port:
>>>
>>> acl SSL_ports port 443 563
>>> http_access deny CONNECT !SSL_ports
>>>
>>> acl Safe_ports port 443 563 # https, snews
>>> http_access deny !Safe_ports
>>
>> Is this your only http_access rule? That would mean you only allow https
>> connections and no http connections.
>>
>>> The machine hosting the squid is directly connected to the router, as I
>>> mentioned before it is the firewall also and no ACL are there!
>>> No it is not running in the transparent mode!
>>>
>>> Before deploying the SQUID, this webmail was normally opening.
>>>
>>> When trying to access a specific webmail like
>>> http://mailhost.ccc.com.om/mail it is giving the following:
>>
>> If you only allow https as mentioned above, that will always be denied. Do
>> http connections to other servers work?
>>
>>> Internet Explorer cannot display the webpage
>>> Most likely causes:
>>> You are not connected to the Internet. The website is encountering
>>> problems. There might be a typing error in the address.
>>
>> This does not look like a Squid message denying access ... Please send all
>> your ACL and http_access rules from squid.conf so that we can have a look.
>>
>> Regards,
>>
>> Peter
>>
>
>
>

--