problem whith squid 3.3.1 in transparent mode

[Дмитрий Шиленко <d.shylenko@xxxxxxxxxxxxxxxx>]

my network 192.168.0.0/24
requests getting transparently sent to the proxy via rule in "ipnat" -> rdr 
bge0 0.0.0.0/0 port 80 -> 127.0.0.1 port 3129
to switch in transparent mode i add "http_port 127.0.0.1:3129" string in 
squid.conf


Antony Stone писал 12.06.2014 15:52:
> On Thursday 12 June 2014 at 14:43:33, Дмитрий Шиленко wrote:
>
> > When I switch squid transparent proxy mode - it blocks access to all sites:
> >
> > "When you receive a URL http://putty.org/ following error occurred
> > Access denied.
> > Access control system does not allow to fulfill your request now. Contact
> > your administrator.
> > Your cache administrator: webmaster. "
> >
> > switch to normal mode - everything works fine.
>
> What's your networking setup?  How are the requests getting transparently 
> sent
> to the proxy?
>
> What are you doing to switch between normal and transparent mode:
>  - on the proxy server
>  - on any firewall / router
>  - on the client/s
>  - anywhere else
>
> > SQUID 3,3,11
> > config here:
> > acl localnet src 192.168.0.0/24    # RFC1918 possible internal network
> > #
> > acl SSL_ports port 443
> > acl Safe_ports port 80        # http
> > acl Safe_ports port 21        # ftp
> > acl Safe_ports port 443        # https
> > acl Safe_ports port 70        # gopher
> > acl Safe_ports port 210        # wais
> > acl Safe_ports port 1025-65535    # unregistered ports
> > acl Safe_ports port 280        # http-mgmt
> > acl Safe_ports port 488        # gss-http
> > acl Safe_ports port 591        # filemaker
> > acl Safe_ports port 777        # multiling http
> > acl CONNECT method CONNECT
> >
> > acl AdminsIP src "/usr/local/etc/squid/AccessLists/AdminsIP.txt"
> > acl RestrictedDomains dstdomain
> > "/usr/local/etc/squid/AccessLists/RestrictedDomains.txt"
> > acl ad_group_rassh urlpath_regex -i
> > "/usr/local/etc/squid/AccessLists/rasshirenie.txt"
> >
> > http_access allow localhost
> > http_access deny !Safe_ports
> > # Deny CONNECT to other than SSL ports
> > http_access deny CONNECT !SSL_ports
> >
> > http_access allow localhost
> > http_access allow AdminsIP
> > http_access deny RestrictedDomains
> > http_access deny ad_group_rassh
> > http_access allow localnet
> > http_access deny all
> > icp_access allow localnet
> > icp_access deny all
> > htcp_access allow localnet
> > htcp_access deny all
> >
> > http_port 192.168.0.97:3128
> > http_port 127.0.0.1:3129 intercept
> > cache deny all
> > access_log /var/log/squid/access.log squid
> >
> > In access.log i fand "TCP_MISS"
>
> Regards,
>
>
> Antony.

--
 С ув. Шиленко Дмитрий
 Системный инженер
 global-it.com.ua
 моб. (063)142-32-59
 офис 221-55-72