Search squid archive

Re: GET cache_object://localhost/info on a reverse proxy setup

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Oh, you are using a url rewriter..

I would do it differently.

url_rewrite_access deny manager

this way you can still use squidclient on your published URLs and have
Squid react like expected on them, including URL rewrites...

On mån, 2008-07-07 at 14:25 +0200, David Obando wrote:
> Hi,
> 
> I found out, I had to configure an acl in squidGuard.conf:
> 
> 
> dbhome /var/lib/squidguard/db
> logdir /var/log/squid
> 
> #
> # DESTINATION CLASSES:
> #
> 
> src local {
>         ip      127.0.0.1
> }
> 
> dest good {
> }
> 
> dest local {
> }
> 
> acl {
>         local {
>                 pass all
>         }
> 
>         default {
>                 redirect 
> http://localhost:8080/VirtualHostBase/http/www.xyz.de:80/VirtualHostRoot/%p
>         }
> }
> 
> 
> 
> 
> Thanks!
> David
> 
> Henrik Nordstrom schrieb am 07.07.2008 14:03:
> > On mån, 2008-07-07 at 10:19 +0200, David Obando wrote:
> >   
> >> Hi,
> >>
> >> thanks for the hint, I added
> >>
> >> http_port 127.0.0.1:3128
> >>
> >> to my config. Now I can access port 3128 with telnet or squidclient, but 
> >> receive an "access denied":
> >>
> >> /var/log/squid/access.log:
> >> 127.0.0.1 - - [07/Jul/2008:10:16:43 +0200] "GET 
> >> cache_object://localhost/info HTTP/1.0" 403 1430 "-" "-" TCP_DENIED:NONE
> >>     
> >
> > You probably aren't allowing localhost access to the manager functions..
> >
> > there is rules to allow this in the standard squid.conf installed when
> > you install Squid, but..
> >
> > Regards
> > Henrik
> >   
> 
> 

Attachment: signature.asc
Description: This is a digitally signed message part


[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux