Re: squid unable to start on CentOS 6.5

[Derek Cole <derek.cole@xxxxxxxxx>]

Here is the output of the "squid -k parse" command, AFTER making the changes suggested by  Eliezer

2014/12/22 18:34:40| Startup: Initializing Authentication Schemes ...
2014/12/22 18:34:40| Startup: Initialized Authentication Scheme 'basic'
2014/12/22 18:34:40| Startup: Initialized Authentication Scheme 'digest'
2014/12/22 18:34:40| Startup: Initialized Authentication Scheme 'negotiate'
2014/12/22 18:34:40| Startup: Initialized Authentication Scheme 'ntlm'
2014/12/22 18:34:40| Startup: Initialized Authentication.
2014/12/22 18:34:40| Processing Configuration File: /etc/squid/squid.conf (depth 0)
2014/12/22 18:34:40| Processing: visible_hostname BrowserAccess
2014/12/22 18:34:40| Processing: acl SSL_ports port 443
2014/12/22 18:34:40| Processing: acl Safe_ports port 80      # http
2014/12/22 18:34:40| Processing: acl Safe_ports port 21      # ftp
2014/12/22 18:34:40| Processing: acl Safe_ports port 443     # https
2014/12/22 18:34:40| Processing: acl Safe_ports port 70      # gopher
2014/12/22 18:34:40| Processing: acl Safe_ports port 210     # wais
2014/12/22 18:34:40| Processing: acl Safe_ports port 1025-65535  # unregistered ports
2014/12/22 18:34:40| Processing: acl Safe_ports port 280     # http-mgmt
2014/12/22 18:34:40| Processing: acl Safe_ports port 488     # gss-http
2014/12/22 18:34:40| Processing: acl Safe_ports port 591     # filemaker
2014/12/22 18:34:40| Processing: acl Safe_ports port 777     # multiling http
2014/12/22 18:34:40| Processing: acl CONNECT method CONNECT
2014/12/22 18:34:40| Processing: http_access deny !Safe_ports
2014/12/22 18:34:40| Processing: http_access deny CONNECT !SSL_ports
2014/12/22 18:34:40| Processing: http_access allow localhost manager
2014/12/22 18:34:40| Processing: http_access deny manager
2014/12/22 18:34:40| Processing: http_access allow localhost
2014/12/22 18:34:40| Processing: http_access allow all
2014/12/22 18:34:40| Processing: http_access deny all
2014/12/22 18:34:40| Processing: http_port 3128
2014/12/22 18:34:40| Processing: coredump_dir /var/spool/squid
2014/12/22 18:34:40| Processing: refresh_pattern ^ftp:       1440    20% 10080
2014/12/22 18:34:40| Processing: refresh_pattern ^gopher:    1440    0%  1440
2014/12/22 18:34:40| Processing: refresh_pattern -i (/cgi-bin/|\?) 0 0%  0
2014/12/22 18:34:40| Processing: refresh_pattern .       0   20% 4320
2014/12/22 18:34:40| Initializing https proxy context

On Mon, Dec 22, 2014 at 6:25 PM, Derek Cole <derek.cole@xxxxxxxxx> wrote:

Thanks for taking a look.

I did try what you suggested, change the "http_port 3128" line back to default, and also I tried to launch squid with the default squid.conf from the RPM install. Both cases still result in a failed launch.

sharadchhetri.com/2014/03/15/install-configure-transparent-squid-proxy-server-rhelcentos-6-x/

This link is the link I was using when I initially set this up, and got it working on the first machine. I am essentially using iptables to route traffic to squid, and then squid is routing to the internet.

Is there anything else I can check, with respect to selinux, etc that would determine if it's actually running or something?

Thanks

On Mon, Dec 22, 2014 at 6:18 PM, Eliezer Croitoru <eliezer@xxxxxxxxxxxx> wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

OK Amos gave you a suggestion which will cover everything but from
reading the squid.conf I would first try to understand:
What do you want squid to do for you?

You need to remove the "all" acl line and change the http_port from
what it is to the defaults "http_port 3128".
Did you tried to remove squid.conf and run it using the default
squid.conf?

Eliezer


On 12/23/2014 12:57 AM, Derek Cole wrote:
> visible_hostname BrowserAccess #acl localnet src 10.1.1.0/24 #
> RFC1918 possible internal network #acl localnet src 10.22.0.0/23
> acl all src 0.0.0.0/255.255.255.255 acl SSL_ports port 443 acl
> Safe_ports port 80      # http acl Safe_ports port 21      # ftp
> acl Safe_ports port 443     # https acl Safe_ports port 70      #
> gopher acl Safe_ports port 210     # wais acl Safe_ports port
> 1025-65535  # unregistered ports acl Safe_ports port 280     #
> http-mgmt acl Safe_ports port 488     # gss-http acl Safe_ports
> port 591     # filemaker acl Safe_ports port 777     # multiling
> http acl CONNECT method CONNECT http_access deny !Safe_ports
> http_access deny CONNECT !SSL_ports http_access allow localhost
> manager http_access deny manager #http_access allow localnet
> http_access allow localhost http_access allow all http_access deny
> all http_port 3128 accel vhost allow-direct coredump_dir
> /var/spool/squid refresh_pattern ^ftp:       1440    20% 10080
> refresh_pattern ^gopher:    1440    0%  1440 refresh_pattern -i
> (/cgi-bin/|\?) 0 0%  0 refresh_pattern .       0   20% 4320

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJUmKbFAAoJENxnfXtQ8ZQUd6AH/jkZV2m6wpiaSyRrhAnQ1OmK
Yc7EJt9BiyrPKi5AhiCTG1LfySYVWM1J1krdH4xoXVQB543Xnz0TLA5ul7YZrkSt
s+EGMO9GJbPnzA1gjwurBz1sRDOnmd30Yc6f8sT51hJ++csVWld5PTbfCbluun95
UZwUgPl+CfUKDhot/JuobRiPd90UayuEprYcIpH4I5dbPCZlSRliXNZKzVAqE9Ht
9iIeOPuvPXKw1nWawmKxj4sytX79iNxeJ8PrXxPyCYxf8zeFHSMetA3pe2rcYQgK
y2V3aNRCdVY+VSolTkUcE+GmItbM3B//XV4CRb3CNRNsdl2cHFOglvPc8mWmodI=
=DX3j
-----END PGP SIGNATURE-----

_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users