hi all, Here is my squid.conf : #################################################################### # SQUID CONFIGURATION # #################################################################### http_port 8080 cache_peer 160.13.1.21 parent 8081 0 no-query default hierarchy_stoplist cgi-bin ? acl QUERY urlpath_regex cgi-bin \? no_cache deny QUERY cache_mem 32 MB cache_swap_low 90 cache_swap_high 95 maximum_object_size 4096 KB ipcache_size 1024 ipcache_low 90 ipcache_high 95 cache_dir ufs /opt/squid/cache 1000 16 256 cache_access_log /opt/squid/logs/access.log cache_log /opt/squid/logs/cache.log cache_store_log none pid_filename /usr/local/squid/var/logs/squid.pid client_netmask 255.255.255.255 ftp_user anonymous hosts_file /etc/hosts auth_param basic program /usr/local/squid/libexec/ncsa_auth /usr/local/squid/etc/passwd auth_param basic children 5 auth_param basic realm gnia auth_param basic credentialsttl 2 hours external_acl_type check_ip %SRC %LOGIN /usr/local/squid/bin/ip_user_check -f /usr/local/squid/etc/ip_user_check.conf refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern . 0 20% 4320 quick_abort_min 16 KB quick_abort_max 16 KB quick_abort_pct 95 # ACCESS CONTROLS # ----------------------------------------------------------------------------- acl all src 0.0.0.0/0.0.0.0 acl gnia src 160.13.0.0/255.255.0.0 acl ip_src external check_ip acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl to_localhost dst 127.0.0.0/8 acl SSL_ports port 443 563 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 563 # https, snews acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT acl site_bull dst "/usr/local/squid/conf/site_bull" acl acces_bull src "/usr/local/squid/conf/acces_bull" acl site_cia dst "/usr/local/squid/conf/site_cia" acl acces_cia src "/usr/local/squid/conf/acces_cia" http_access allow acces_bull site_bull gnia ip_src http_access allow acces_cia site_cia gnia ip_src http_access deny acces_bull http_access deny acces_cia http_access allow manager localhost http_access deny manager http_access deny !Safe_ports http_access deny CONNECT !SSL_ports never_direct allow all http_access allow gnia ip_src http_access deny all http_reply_access allow all icp_access allow all cache_effective_user squid cache_effective_group squid visible_hostname proxy logfile_rotate 10 ie_refresh off ######## # END # ######## My proxy (160.13.1.21) is behind a firewall When I connect a proxy client to the web, I receive the following error message in cache.log : 2005/11/30 11:42:43| Detected DEAD Parent: 160.13.1.21/8081/0 2005/11/30 11:42:43| TCP connection to 160.13.1.21/8081 failed 2005/11/30 11:42:44| Failed to select source for 'http://www.google.fr/' 2005/11/30 11:42:44| always_direct = 0 2005/11/30 11:42:44| never_direct = 1 2005/11/30 11:42:44| timedout = 0 And there is another warning in access.log : 1133343958.794 2 160.13.54.27 TCP_DENIED/407 1639 GET http://www.google.fr/ - NONE/- text/html 1133343962.763 975 160.13.54.27 TCP_MISS/503 1342 GET http://www.google.fr/ tpa NONE/- text/html Any idea? Thanks in advance! Regards
