Continuing the top-posting trend...
free.fr is an IPv6-enabled network. Which means Squid version and your
OS type is now quite important when debugging.
Amos
On 4/05/2012 1:58 a.m., FredB wrote:
Firewall problem with passive/active ? Just try on shell
ftp ftp.free.fr -> with password and login anonymous anonymous
[02/May/2012:11:44:55 +0200] "GET ftp://ftp.free.fr/ HTTP/1.0" 504
3190 "-" "Mozilla/5.0 (Windows NT 5.1; rv:12.0) Gecko/20100101
504 mean Gateway Timeout: The server was acting as a gateway or proxy and did not receive a timely response from the upstream serve
----- Mail original -----
De: "Hugo Deprez"
Hello,
no one have an idea on this issue ?
Regards
On 2 May 2012 11:55, Hugo Deprez wrote:
Dear community,
I am setting up a squid proxy but I am not able to allow access to
ftp server.
I read many explanation on this but I'm a bit lost.
So here is my conf :
acl SSL_ports port 443 20 21
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl CONNECT method CONNECT
####### IPOC ACL's
acl sub1 src 10.1.1.0/24
acl sub2 src 10.1.2.128/25
acl ftp proto FTP
http_access allow ftp
###### Default access based on defined access lists
http_access allow manager localhost
http_access deny manager
# Deny requests to certain unsafe ports
http_access deny !Safe_ports
# Deny CONNECT to other than secure SSL ports
http_access deny CONNECT !SSL_ports
http_access allow sub1
http_access allow sub2
# Deny all
http_access deny all
###### Squid's port
http_port 3128
###### Default Squid
hierarchy_stoplist cgi-bin ?
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
I can see the following log in the access.log :
[02/May/2012:11:44:55 +0200] "GET ftp://ftp.free.fr/ HTTP/1.0" 504
3190 "-" "Mozilla/5.0 (Windows NT 5.1; rv:12.0) Gecko/20100101
Firefox/12.0" TCP_MISS:DIRECT
But I get a squid error message on firefox :
The requested URL could not be retrieved
What am I missing here ?
Regards,
Hugo
