Dear all I cannot use squidclient on the local squid machine. Is it possible to help me to set the right settings ? /usr/bin/squidclient -h 127.0.0.1 mgr:storedir client: ERROR: Cannot connect to 127.0.0.1:3128: Connection refused Here it is my squid.conf acl localhost src 127.0.0.1/8 0.0.0.0/32 acl to_localhost dst 127.0.0.1/8 0.0.0.0/32 auth_param basic credentialsttl 2 hour authenticate_ttl 1 hour authenticate_ip_ttl 60 seconds #--------- TWEEKS PERFORMANCES memory_pools off quick_abort_min 0 KB quick_abort_max 0 KB log_icp_queries off client_db off buffered_logs on half_closed_clients off #--------- UfdbGuard url_rewrite_program /usr/bin/ufdbgclient -l /var/log/squid url_rewrite_children 20 startup=5 idle=1 concurrency=0 #--------- SQUID PARENTS (feature not enabled) #--------- acls acl blockedsites url_regex "/etc/squid3/squid-block.acl" acl CONNECT method CONNECT acl purge method PURGE acl FTP proto FTP acl multimedia_rep rep_mime_type -i ^video/x-ms-asf$ acl multimedia_rep rep_mime_type -i ^application/vnd.ms.wms-hdr.asfv1$ acl multimedia_rep rep_mime_type -i ^application/x-mms-framed$ acl multimedia_rep rep_mime_type -i ^image/ acl multimedia_rep rep_mime_type -i ^video acl multimedia_rep rep_mime_type -i ^audio acl multimedia_rep rep_mime_type -i ^application/x-dvi$ acl multimedia_rep rep_mime_type -i ^application/x-isoview acl multimedia_browsers browser -i ^.*player acl bigfiles_types urlpath_regex -i \.(deb|rpm|iso|tar\.gz|gz|bz|tar| cue|nrg|crf|bwi|bwt|lcd|ccd|mdf|mds|vcd|cif|vdi|img)((\?|&).*)?$ acl office_network src all #--------- MAIN RULES... always_direct allow FTP # --------- SAFE ports acl Safe_ports port 80 #http acl Safe_ports port 22 #ssh acl Safe_ports port 443 563 #https, snews acl Safe_ports port 1863 #msn acl Safe_ports port 70 #gopher acl Safe_ports port 210 #wais acl Safe_ports port 1025-65535 #unregistered ports acl Safe_ports port 280 #http-mgmt acl Safe_ports port 488 #gss-http acl Safe_ports port 591 #filemaker acl Safe_ports port 777 #multiling http acl Safe_ports port 631 #cups acl Safe_ports port 873 #rsync acl Safe_ports port 901 #SWAT acl Safe_ports port 20 #ftp-data acl Safe_ports port 21 #ftp# acl SSL_ports port 9000 #Artica acl SSL_ports port 443 #HTTPS acl SSL_ports port 563 #https, snews acl SSL_ports port 6667 #tchat acl MULTIMEDIA rep_mime_type -i ^(audio\/x-mpegurl|audio\/mpeg|video \/flv|video\/x-flv|application\/x-shockwave-flash|audio\/ogg|video\/ogg| application\/ogg)$ # --------- RULES DEFINITIONS url_rewrite_access deny localhost url_rewrite_access allow all http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow localhost http_access allow manager localhost http_access allow purge localhost http_access deny purge http_access deny blockedsites http_access allow office_network http_access deny to_localhost http_access deny all # --------- ICAP Services.(1 service(s)) # --------- icap_service KASPERSKY mode 3.1.1 icap_service is_kav_resp respmod_precache routing=on bypass=on icap://127.0.0.1:1344/av/respmod icap_service is_kav_req reqmod_precache routing=on bypass=on icap://127.0.0.1:1344/av/reqmod # --------- adaptation For Kaspersky Antivirus adaptation_service_set class_antivirus_kav_resp is_kav_resp adaptation_service_set class_antivirus_kav_req is_kav_req adaptation_access class_antivirus_kav_req deny MULTIMEDIA adaptation_access class_antivirus_kav_req allow all adaptation_access class_antivirus_kav_resp allow all icap_enable on icap_preview_size 128 icap_service_failure_limit -1 icap_preview_enable on icap_send_client_ip on icap_send_client_username on icap_client_username_header X-Authenticated-User icap_client_username_encode on # --------- ident_lookup_access hierarchy_stoplist cgi-bin ? # --------- General settings visible_hostname proxyweb # --------- time-out dead_peer_timeout 10 seconds dns_timeout 2 minutes connect_timeout 1600 seconds persistent_request_timeout 3 minutes pconn_timeout 1600 seconds maximum_object_size 300 MB minimum_object_size 0 KB maximum_object_size_in_memory 1024 KB #http/https ports http_port 3128 # --------- SSL Rules # --------- Caches cache_effective_user squid cache_effective_group squid #cache_replacement_policy heap LFUDA cache_mem 8 MB cache_swap_high 90 cache_swap_low 95 # --------- DNS and ip caches ipcache_size 1024 ipcache_low 90 ipcache_high 95 fqdncache_size 1024 # --------- SPECIFIC DNS SERVERS #--------- FTP specific parameters ftp_passive on ftp_sanitycheck off ftp_epsv off ftp_epsv_all off ftp_telnet_protocol off debug_options ALL,1 refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern . 0 20% 4320 refresh_pattern -i (/cg-bin/|\?) 0 0% 0 icp_port 3130 #Logs------------------------------------------------- coredump_dir /var/squid/cache cache_log /var/log/squid/cache.log pid_filename /var/run/squid.pid logformat common MAC:%>eui %>a %[ui %[un [%tl] "%rm %ru HTTP/%rv" %>Hs %<st %Ss:%Sh cache_store_log stdio:/var/log/squid/store.log access_log daemon:/var/log/squid/access.log common access_log daemon:/var/log/squid/sarg.log squid cache_dir ufs /var/cache/squid 2000 16 256 # --------- OTHER CACHES cache_dir rock /var/squid/squid3 2500 max-size=1024000
