good evening squid support team,

i have problems with connection to https and ftp sites with squid :(

my squid.conf file is in attachement.

thanks to regard
david c. heitmann

#Netzwerkverbindungen
http_port 192.168.10.10:8080
http_port 192.168.10.10:3128

#ICP Protokoll
icp_port 0

#Speichergroesse
cache_mem 64 MB
ipcache_size 5000

#Logfile- und Cache-Verzeichnisse
cache_dir ufs /var/cache/squid 100 16 256

#Logfile-Path
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log

#Prozess-ID-Datei
pid_filename /var/run/squid.pid

#Logging der IP-Adresse oder Rechner-Names
log_fqdn on

#eMail Adresse des Admins
cache_mgr da...@lafourmi.de

#Standartuser und -gruppe
cache_effective_user squid
cache_effective_group squid

#Vollstaendiger Rechnername
visible_hostname proxyfuck

#Anonymisieren der IP-Adresse
forwarded_for off

#AntiVirus
redirect_program /usr/bin/squidvir.pl

#Authentifiyierung mittels Passwortdatei
auth_param basic program /usr/lib/squid/ncsa_auth /squid/users/.pass
auth_param basic realm Authentifizierung am ProxyServer Lafourmi
auth_param basic children 10
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
authenticate_cache_garbage_interval 3600 seconds
authenticate_ttl 1 hour
authenticate_ip_ttl 3600 seconds

acl passwd proxy_auth REQUIRED
acl login_users proxy_auth "/etc/squid/users"
acl login_admin proxy_auth "/etc/squid/admin"


#Bestimmte Objekte nicht speichern
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY


#Access Control Lists (ACL)
acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.1/255.255.255.255
acl laf src 192.168.10.0/255.255.255.0
acl manager proto cache_object


acl Safe_ports port 407 #login
acl SSL_ports port 443  #ssl 
acl SSL_ports port 563  #snews
acl SSL_ports port 995  #rsync
acl Safe_ports port 80  #http
acl Safe_ports port 20  #ftp_up
acl Safe_ports port 21  #ftp_down
acl Safe_ports port 22  #ssh
acl Safe_ports port 443 #https 
acl Safe_ports port 563 #snews
acl Safe_ports port 70  #gopher
acl Safe_ports port 210 #wais
acl Safe_ports port 1025-65535  #unregistered ports
acl Safe_ports port 280  #http-mgmt
acl Safe_ports port 488  #gss-http
acl Safe_ports port 591  #filemaker
acl Safe_ports port 777  #multiling http
acl Safe_ports port 66  #socks
acl Safe_ports port 110  #pop3
acl Safe_ports port 25   #smtp
acl Safe_ports port 465  #smtp
acl Safe_ports port 587  #smtp
acl Safe_ports port 143  #imap
acl Safe_ports port 993  #imap
acl Safe_ports port 631  #cups
acl Safe_ports port 1863 #msn
acl Safe_ports port 7001 #msn
acl Safe_ports port 9    #msn
acl Safe_ports port 30000-65535 #msn
acl Safe_ports port 5000-65535 #msn
acl Safe_ports port 1025-65535 #msn
acl Safe_ports port 1503 #msn
acl Safe_ports port 3389 #msn
acl Safe_ports port 49152-65535 #msn
acl Safe_ports port 5061 #msn
acl Safe_ports port 1025-65535 #msn

#acl PURGE method PURGE
acl CONNECT method CONNECT


#Gesperrte Ausdrücke
acl gesperrt url_regex -i "/etc/squid/gesperrt"



http_access allow login_users 
http_access allow login_admin
#http_access allow PURGE localhost
http_access allow manager localhost
http_access allow laf !gesperrt

#http_access deny PURGE
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny all



#cache_peer "Firewall-Proxy" parent 8080 3128
#never_direct allow all




#Bestimmte URLs ausschliessen
#acl banner url_regex ^http://banner[0-9]*\.z
#http_access deny banner

#Laden von Dateien verhindern, wenn abgebrochen wurde
quick_abort_min 0 KB
quick_abort_max 0 KB
quick_abort_pct 100

Reply via email to