Архив форумов ЦИТФорума

[L.I.S.]

Настраиваю Сквид, сам пишу файл. При попытке через браузер обратиться к какому либо ресурсу через прокси, получаю Access denied... а именно: №№№№№№№&am p;#8470;№ ERROR The requested URL could not be retrieved

While trying to retrieve the URL: http://192.168.5.1:8080/

The following error was encountered:

* Access Denied.

Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect.

Your cache administrator is root. Generated Mon, 10 Nov 2003 13:22:26 GMT by niio2 (squid/2.5.STABLE2) №№№№№№№&am p;#8470;№№№ Файл конфигурации:

http_port 3128 icp_port visible_hostname niio2 cache_mem 16 MB cache_swap_high 95 cache_swap_low 90 maximum_object_size 4096 KB minimum_object_size KB maximum_object_size_in_memory 8 KB ipcache_size 1024 ipcache_high 95 ipcache_low 90 cache_dir ufs /var/spool/squid 100 16 256 cache_access_log /var/log/squid/access.log cache_log /var/log/squid/cache.log cache_store_log /var/log/squid/store.log mime_table /etc/squid/mime.conf ftp_user anonymous@niio2 auth_param basic children 5 auth_param basic realm Squid proxy-caching web server auth_param basic credentialsttl 2 hours wais_relay_port refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern . 20% 4320 quick_abort_min 16 KB quick_abort_max 16 KB quick_abort_pct 95 negative_ttl 5 minutes positive_dns_ttl 6 hours negative_dns_ttl 5 minutes range_offset_limit KB connect_timeout 2 minutes peer_connect_timeout 30 seconds request_timeout 5 minutes persistent_request_timeout 1 minute client_lifetime 1 day half_closed_clients on pconn_timeout 120 seconds shutdown_lifetime 30 seconds cache_effective_user squid cache_effective_group squid # acl QUERY urlpath_regex cgi-bin \? no_cache deny QUERY acl all src 0.0.0.0/0.0.0.0 acl localhost src 127.0.0.1/255.255.255.255 #acl password proxy_auth REQUIRED acl users ident REQUIRED acl niio2 src 192.168.10.1-192.168.10.255/255.255.255.0 acl niip src 192.168.5.1-192.168.5.255/255.255.255.0 acl SSL_ports port 443 563 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 563 # https, snews acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT acl net src 192.168.10.0/255.255.255.0 192.168.5.0/255.255.255.0 http_access allow localhost niio2 niip users net http_access deny all http_access deny !Safe_ports http_access deny CONNECT !SSL_ports

В чем я не прав?

[byte]

почитай как объединяют аклы в http_access
http://squid.opennet.ru/FAQ/my/FAQrus-10.html

[Dmitry.Karpov http://prof]

http_access allow localhost
http_access allow niio2
http_access allow niip
http_access allow users
http_access allow net

А то правило действует на запросы, удовлетворяющие всем условиям (операция "пересечение").

[L.I.S.]

Спасибо за помощь,терпение и внимание к моей проблеме! Буду пробовать снова!

[Dmitry.Karpov http://prof]

-

[L.I.S.]

Сделал как Вы и посоветовали, плюс прочел ФАК по acl и все заработало. Спасибо!