On Thu, 6 Sep 2007, Tek Bahadur Limbu wrote:
Hi Simsam,
shijjawi@xxxxxxxxx wrote:
Hi Peter,
No, this is only the https rule, I wrote it done to illustrate that the
https ports are open.
All http traffic are opened.
Could you please give me the commands needed to install SQUID 2.6 according
to tek's advise.
I got the file from the site, I have some worries as the upgrade might
affect the current setup!
Did you install Squid-2.5 with SUSE's package management tool or did you
install it from source?
Which ever method you had used, you can just keep the Old Squid binary and
it's configuration files just in case something goes wrong with the Squid-2.6
installation!
The following installation steps might help:
(1.) tar zxvf squid-2.6.STABLE14.tar.gz
(2.) cd squid-2.6.STABLE14/
(3.) ./configure --bindir=/usr/local/sbin \
I'd rather do it as :
./configure --prefix=/usr/local/squid26
so that it puts all the squid 2.6 related files in single directory. for
easier access of config files and binary and logs, I'd create the symlinks
to my fav path. Just a point to share.
--sysconfdir=/usr/local/etc/squid \
--datadir=/usr/local/etc/squid \
--libexecdir=/usr/local/libexec/squid \
--localstatedir=/usr/local/squid \
--enable-removal-policies=heap,lru \
--enable-storeio=diskd,aufs,coss,ufs,null \
--enable-snmp \
--enable-epoll \
--with-large-files \
--prefix=/usr/local \
--disable-ident-lookups \
--enable-underscores \
--with-large-files \
--disable-http-violations \
--enable-delay-pools \
--with-maxfd=8192
(4.) make all
(5.) make install
(6.) vi /usr/local/etc/squid/squid.conf
(7.) /usr/local/sbin/squid -z
(8.) /usr/local/sbin/squid -f /usr/local/etc/squid/squid.conf
Note: Your compilation parameters may differ. Please adjust accordingly to
your demands and needs.
If your SUSE Linux box has installed and updated all the required development
tools, then the installation should be a breeze!
Remember to read the default squid.conf which comes with the new
installation.
Also check this out:
http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE14-RELEASENOTES.html
Happy Squid proxying with Squid-2.6STABLE14 !!!
Thanking you...
Thank you,
Simsam
Peter Albrecht <peter.albrecht@xxxxxxxxxx> 09/05/2007 05:58 PM
To
squid-users@xxxxxxxxxxxxxxx
cc
Subject
Re: webmails are not accessible - SQUID 2.5.STABLE12
Hi Simsam,
I am still beginner in this field but I could tell you that the proxy
itself is acting as a firewall, no specific protocol filtration and
here
is the acl for the SSL port:
acl SSL_ports port 443 563
http_access deny CONNECT !SSL_ports
acl Safe_ports port 443 563 # https, snews
http_access deny !Safe_ports
Is this your only http_access rule? That would mean you only allow https
connections and no http connections.
The machine hosting the squid is directly connected to the router, as I
mentioned before it is the firewall also and no ACL are there!
No it is not running in the transparent mode!
Before deploying the SQUID, this webmail was normally opening.
When trying to access a specific webmail like
http://mailhost.ccc.com.om/mail it is giving the following:
If you only allow https as mentioned above, that will always be denied. Do
http connections to other servers work?
Internet Explorer cannot display the webpage
Most likely causes:
You are not connected to the Internet. The website is encountering
problems. There might be a typing error in the address.
This does not look like a Squid message denying access ... Please send all
your ACL and http_access rules from squid.conf so that we can have a look.
Regards,
Peter
--