Dear i'm using squid 3.2.0.13-20111121-r11422 for each request i receive an event Nov 23 11:08:24 kav4proxy64Coatpont squid[16844]: ERROR: No forward-proxy ports configured. Nov 23 11:08:24 kav4proxy64Coatpont squid[16844]: ERROR: No forward-proxy ports configured. Nov 23 11:08:24 kav4proxy64Coatpont squid[16844]: ERROR: No forward-proxy ports configured. Nov 23 11:08:24 kav4proxy64Coatpont squid[16844]: ERROR: No forward-proxy ports configured. here it is a piece of config file # IS 3.2 YES # IS 3.1 YES acl localhost src 127.0.0.1/8 0.0.0.0/32 acl to_localhost dst 127.0.0.1/8 0.0.0.0/32 auth_param basic credentialsttl 2 hour authenticate_ttl 1 hour authenticate_ip_ttl 60 seconds #--------- TWEEKS PERFORMANCES # http://blog.last.fm/2007/08/30/squid-optimization-guide memory_pools off quick_abort_min 0 KB quick_abort_max 0 KB log_icp_queries off client_db off buffered_logs on half_closed_clients off #--------- UfdbGuard #Disabled enable_UfdbGuard=0 #--------- squidGuard #Disabled enable_squidguard= 0 #--------- SQUID PARENTS (feature not enabled) #--------- acls acl blockedsites url_regex "/etc/squid3/squid-block.acl" acl CONNECT method CONNECT acl purge method PURGE acl FTP proto FTP acl office_network src all #--------- MAIN RULES... always_direct allow FTP # --------- SAFE ports acl Safe_ports port 80 #http acl Safe_ports port 22 #ssh acl Safe_ports port 443 563 #https, snews acl Safe_ports port 1863 #msn acl Safe_ports port 70 #gopher acl Safe_ports port 210 #wais acl Safe_ports port 1025-65535 #unregistered ports acl Safe_ports port 280 #http-mgmt acl Safe_ports port 488 #gss-http acl Safe_ports port 591 #filemaker acl Safe_ports port 777 #multiling http acl Safe_ports port 631 #cups acl Safe_ports port 873 #rsync acl Safe_ports port 901 #SWAT acl Safe_ports port 20 #ftp-data acl Safe_ports port 21 #ftp# # --------- Use x-forwarded-for for local Dansguardian or load balancers log_uses_indirect_client on follow_x_forwarded_for allow localhost acl SSL_ports port 9000 #Artica acl SSL_ports port 443 #HTTPS acl SSL_ports port 563 #https, snews acl SSL_ports port 6667 #tchat # --------- RULES DEFINITIONS url_rewrite_access deny localhost url_rewrite_access allow all http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow localhost http_access allow manager localhost http_access allow purge localhost http_access deny purge http_access deny blockedsites http_access allow office_network http_access deny to_localhost http_access deny all # --------- ICAP Services.(1 service(s)) # --------- icap_service KASPERSKY mode 3.1.1 icap_service is_kav_resp respmod_precache routing=on bypass=on icap://127.0.0.1:1344/av/respmod icap_service is_kav_req reqmod_precache routing=on bypass=on icap://127.0.0.1:1344/av/reqmod # --------- adaptation For Kaspersky Antivirus adaptation_service_set class_antivirus_kav_resp is_kav_resp adaptation_service_set class_antivirus_kav_req is_kav_req adaptation_access class_antivirus_kav_req allow all adaptation_access class_antivirus_kav_resp allow all icap_enable on icap_preview_size 128 icap_service_failure_limit -1 icap_preview_enable on icap_send_client_ip on icap_send_client_username on icap_client_username_header X-Authenticated-User icap_client_username_encode on # --------- ident_lookup_access hierarchy_stoplist cgi-bin ? # --------- General settings visible_hostname proxyweb # --------- time-out dead_peer_timeout 10 seconds dns_timeout 2 minutes connect_timeout 1600 seconds persistent_request_timeout 3 minutes pconn_timeout 1600 seconds maximum_object_size 300 MB minimum_object_size 0 KB maximum_object_size_in_memory 1024 KB #http/https ports http_port 33070 transparent # --------- SSL Rules # --------- Caches cache_effective_user squid cache_effective_group squid #cache_replacement_policy heap LFUDA cache_mem 512 MB cache_swap_high 90 cache_swap_low 95 # --------- DNS and ip caches ipcache_size 51200 ipcache_low 90 ipcache_high 95 fqdncache_size 51200 # --------- SPECIFIC DNS SERVERS dns_nameservers resolve.conf #--------- FTP specific parameters ftp_passive on ftp_sanitycheck off ftp_epsv off ftp_epsv_all off ftp_telnet_protocol off
