Here is the squid configuration file, on both boxes:
visible_hostname BrowserAccess
#acl localnet src 10.1.1.0/24 # RFC1918 possible internal network
#acl localnet src 10.22.0.0/23
acl all src 0.0.0.0/255.255.255.255
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost manager
http_access deny manager
#http_access allow localnet
http_access allow localhost
http_access allow all
http_access deny all
http_port 3128 accel vhost allow-direct
coredump_dir /var/spool/squid
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
visible_hostname BrowserAccess
#acl localnet src 10.1.1.0/24 # RFC1918 possible internal network
#acl localnet src 10.22.0.0/23
acl all src 0.0.0.0/255.255.255.255
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost manager
http_access deny manager
#http_access allow localnet
http_access allow localhost
http_access allow all
http_access deny all
http_port 3128 accel vhost allow-direct
coredump_dir /var/spool/squid
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
On Mon, Dec 22, 2014 at 5:52 PM, Derek Cole <derek.cole@xxxxxxxxx> wrote:
Sorry, my previous message got sent prematurely.is the configuration on both machines. As for the basic permissions issue, I thought I read somewhere about a missing pid file, but I don't know when that gets made/deleted. It is not currently there on the broken box, but it is ont he good one, which squid is running on.
As I was saying, I am not currently using selinux
SELINUX=disabled
SELINUXTYPE=targeted
-rw-r--r-- 1 root squid 6 Dec 22 16:23 /var/run/squid.pidOn Mon, Dec 22, 2014 at 5:49 PM, Derek Cole <derek.cole@xxxxxxxxx> wrote:Ok - thanks for saving me from chasing that issue down.I am not currently using selinux:On Mon, Dec 22, 2014 at 5:37 PM, Eliezer Croitoru <eliezer@xxxxxxxxxxxx> wrote:-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 12/23/2014 12:26 AM, Derek Cole wrote:
> Hello,
>
> Yes it is true I am using the RPM repository to do the install. I
> have downloaded your script and I will see if I can find any
> differences that may be the culprit. In the meantime I thought I
> may be on to something - but I am not sure. Is that error message
> one that you may get if the iptables rules are not set up properly?
> I have these two boxes on different networks, so the rules are
> going to be slightly different.
Hey Derek,
No this is not an iptables level issue.
It can be one of couple from my experience:
- - basic permissions issue
- - selinux enforcement
- - a missing directory
Are you using SMP features in your configuration?
Eliezer
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQEcBAEBAgAGBQJUmJ1EAAoJENxnfXtQ8ZQUlWwIAIuJhLOekHKMdp1/AyGpkFh0
bOb1Msurt7+vLkOiEhUmiu8d3WaH5tYoPCD/aYleQxQm3Kf5S8jEZfWU30Wrj4Mq
9qrTUuI2KoQx/X/gkUuvyzbm4sE9ePWjkqYH2ulpw9nAMw5pTbFhyd8cLGEYiUpS
AS5HQclq9VquDvJccY5htKwQjoF5LR9sc8WPIjvHPC1O5TkAFlqTnESBJkoGQBqE
C3M3K2nI5LyZo+xiDNNO8YNXzEnU8uVDWj/h3gfotOp1FXMEX7E/t4NPLuAJJ4/d
/mznTJdX8hupcyIV7omkSnSWPdyOan61IEWJTTME+bcZufuR8PU8wdDWTHKYTB4=
=HNGr
-----END PGP SIGNATURE-----
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users