Cool, that's the bit I was looking at so I'll follow that, thanks. I've made the suggested changes to my security but I'm getting the following error when I run reconfigure: 2015/01/29 14:50:37| aclParseAclList: ACL name '%LOGIN' not found. FATAL: Bungled /etc/squid3/squid.conf line 312: http_access deny %LOGIN Squid Cache (Version 3.3.8): Terminated abnormally. CPU Usage: 0.014 seconds = 0.014 user + 0.000 sys Maximum Resident Size: 21984 KB Page faults with physical i/o: 0 My security now looks like this: # ------------------------------------------------ # ------ Permit/Deny access as appropriate ------- # ------------------------------------------------ refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern . 0 20% 4320 shutdown_lifetime 10 seconds acl SSL_ports port 443 563 21 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 22 # sftp acl Safe_ports port 443 563 # https, snews acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl Safe_ports port 4004 # Radii website download site uses this port acl Safe_ports port 10000 # Webmin acl Safe_ports port 900 # Swat acl Safe_ports port 82 # Pacejet request - test site hosted on HTTP 82 acl Safe_ports port 81 # Image plus test server (hepplewhite) acl CONNECT method CONNECT http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access deny BlacklistedSites StoresAllow http_access allow OK_Unauthenticated http_access allow StaticIPWhitelist acl auth proxy_auth REQUIRED http_access deny %LOGIN http_access allow InetAllow http_access allow StoresAllow http_access allow localhost manager http_access deny all acl ftp proto FTP #http_access allow ftp #http_access allow CONNECT Safe_ports http_access deny manager http_reply_access allow all icp_access allow all cache_mgr otrs@xxxxxxxxxxxxxxx forwarded_for off Sorry for all of the questions... -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Webpages-won-t-load-or-load-slowly-tp4669408p4669419.html Sent from the Squid - Users mailing list archive at Nabble.com. _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
