topic Re: Squid: Problems in accessing some web sites in Operating System - Linux

Squid: Problems in accessing some web sites

shetty — Wed, 21 Jul 2004 02:34:37 GMT

Hi guys,
Iam using Linux(Red hat 9)with squid configured as the proxy server on that system.
I have created Some ACL's to block some sites.
They should be allowed only on particular timing(5pm-7pm).

The following are the ACL names,

dstdomain(domains to be blocked)
**********
.bollywoodmusic.com .bsmail.com .hotmail.com
.indiatimes.com .jobsahead.com .mail.com
.monster.com

During the particular period (5-7pm)iam able to open all the sites except hotmail.com.

Whenever i try to access hotmail.com, it says

ERROR
The requested URL could not be retrieved
While trying to retrieve the URL: http://mail.yahoo.com/

The following error was encountered:

Access Denied.
Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect.

when i remove proxy and try it opening that web site, iam able to open www.yahoo.com.
But when i use proxy , iam getting the above errors.
Please help me in rectifying this problem.

Shetty.

Re: Squid: Problems in accessing some web sites

Alexander Chuzhoy — Wed, 21 Jul 2004 02:51:54 GMT

try to write .hotmail.com on it's own line in dstdomain list.
Hope it'll help.

Re: Squid: Problems in accessing some web sites

Jerome Henry — Wed, 21 Jul 2004 02:52:49 GMT

Hi,

From what you write, I understand that when you use hotmail.com, you are redirected to mail.yahoo.com.
So it seems that you have a deny all rule by default that still applies.
Could yout ell us if you can access any site (say www.linux.org) between 5 and 7 ?
Could you join your complete squid.conf ?
thks

J

Re: Squid: Problems in accessing some web sites

shetty — Wed, 21 Jul 2004 03:36:04 GMT

Hi Alexander and Jerome Henry,
I have written as .hotmail.com in the acl and not hotmail.com.

When i use proxy iam not able to open hotmail.com , but iam able to open other sites(any) except hotmail.

When i remove proxy , iam able to access hotmail.com.

I have attached my squid.conf configuration file for your reference.Please help me to come out of this problem.

Regards.
Shetty.

Re: Squid: Problems in accessing some web sites

Jerome Henry — Wed, 21 Jul 2004 09:35:30 GMT

Hi,

Reading your squid.conf nothing appeared at first sight.
So I etherealled a connection to hotmail, and saw that each window is a new client connexion from your client machine (a new socket). So each windows, and there are 6 or them, is a new connxion.
In your squid.conf I read
acl numconn maxconn 5
So 5 conns are allowed max.
Try to set this value to a higher one, say 10 and try again... let us know.

BTW .hotmail.com should be ok

hth

Jerome Henry

Re: Squid: Problems in accessing some web sites

Muthukumar_5 — Wed, 21 Jul 2004 12:41:30 GMT

Hai,

You are by default denying all acls there. You will get deny messages to *.yahoo.com,... etc in dstdomain and in all ur acl settings urls.

There is a lot of problem in your acl settings.

Re: Squid: Problems in accessing some web sites

Muthukumar_5 — Wed, 21 Jul 2004 12:43:06 GMT

Don't chane acl all src setting ever. keep that acl as default, it will give the full 0.0.0.0/0.0.0.0 ip-address control.

acl myip src 10.0.0.102 10.0.0.103 10.0.0.105 10.0.0.112 10.0.0.219 10.0.0.221 10.0.0.223 10.0.0.26 10.0.0.26 10.0.0.28 10.0.0.5 10.0.0.113 10.0.0.53 10.0.0.55 10.0.0.56 10.0.0.57 10.0.0.61

acl dstdomain is okie. Don't use dot (.) in dstdom_regex. Else use \ with dot as \. to remove wild character effect.

You can not use regex pattern(s) in url_regex. You have to give full url's, else change to urlpath_regex as,

acl urlacl url_regex -i sex porn games music mp3 \.avi jobs monster monsterindia naukri \.mpeg mpg mpeg \.mpg \.wav \.jpeg \.jpg jpg jpeg jobs resume \.exe \.msi \.tar \.gz \.rpm \.rmvb \.rp \.rm \.rv \.m3u \.wav \.mpv \.mps \.m2v \.m1v \.mpe \.mpa \.avi

You have to use \ before . in dstdom_regex and urlpath_regex acl types.

Give the http_access controls as,

http_access deny myip dstdomain
http_access deny myip urlacl
http_access deny myip dstdom_regex
http_access allow all

Specify these http_access after default http_access rules. There is no need to use time and maxconn acl's for ur configuration. Comment ( # ) them out.

You can check acl settings check as,
/sbin/squid -k parse
If you get any error messages, you will having a problem on acl settings.

Re: Squid: Problems in accessing some web sites

Muthukumar_5 — Wed, 21 Jul 2004 12:50:25 GMT

I am having ur squid.conf files.. Let me know your exact requirement.. I will help my best.

While sending squid.conf,don't send all commented informations, just as like,

squid -version and
/sbin/squid -v to get configuration options.

grep -v "^#" squid.conf > /tmp/squid.conf.log

It will reduce the file size and compact to lookin to the problem.

Re: Squid: Problems in accessing some web sites

shetty — Wed, 21 Jul 2004 23:48:21 GMT

Hi guys,
Thank you very much for your suggestions,i will check out and let you guys know the result.

Shetty.

Re: Squid: Problems in accessing some web sites

shetty — Thu, 22 Jul 2004 00:40:31 GMT

Hi guys,
Thank you all for your suggestions. It's working fine now.

Regards.
Shyam

Re: Squid: Problems in accessing some web sites

samir_29 — Sat, 26 Mar 2005 05:08:49 GMT

hello
shetty can you pleas send me now ur squid conf file coz i fasce the same problem but i can not get from it i try so hard but for shame i can not i still have this error i used wccp and start think that i will spend my life try solve this problem so pleas send my this config file after u solve this pleas.
my007ms@hotmail.com
my007ms@gamil.com