Search squid archive

Re: squidclient -h 127.0.0.1 -p 3128 mgr:info shows access denined

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Oh, I see the problem:

  http_port 127.0.0.1:3128 intercept ...

(which also means you lack a firewall rule preventing external software like squidclient from sending traffic directly to your intercept port.)


Please **do not** use port 3128 to receive intercepted traffic.


I recommend changing your main port to this:

   http_port 3128 ssl-bump ....

and receiving the intercepted traffic on:

  http_port 3129 intercept ssl-bump ...


and check your firewall has all the rules listed at <https://wiki.squid-cache.org/ConfigExamples/Intercept/LinuxRedirect>.
One to note in particular is the "mangle" table rule.


Cheers
Amos
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.squid-cache.org/listinfo/squid-users



[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux