At least you need acl for the pc's to access the net: ie acl src
192.168.1.0/255.255.255.0 in your squid.conf which is your local network
on which the two pc's are part of the localnet,hope this clearified your
point.
paul
On Sat, 13 Mar 2004 12:14:24 +0100, "K. Ghosh" <[EMAIL PROTECTED]>
said:
> I am trying to configure a proxy server on my _standalone_ box running
> Debian with two users. The objective is to prevent access to certain
> objectionable sites.
>
> For this I have chosen Squid & Opera, and both are configured to the
> extent possible. The relevant portion of squid.conf is given at the end.
>
> In Opera, I have enabled HTTP, 'localhost' and Port 3128 as advised by
> squid (File->preferences->network->proxy servers).
>
> The problem is, Opera is unable to open any website, complaining about
> 'access denied'.
>
> I am unable to configure the squid.conf for allowing access to the two
> users ('kghosh' and 'kanad', hostname is 'gkps')in the standalone box.
>
> Can experienced users help please ?
> __________________________________________
> /etc/squid.conf -
> ....
>
> # TAG: acl
>
> acl blockedsites url_regex "/usr/share/squid/etc/blocks/block.txt"
> acl unblockedsites url_regex "/usr/share/squid/etc/blocks/unblock.txt"
> acl all src 0.0.0.0/0.0.0.0
> acl manager proto cache_object
> acl localhost src 127.0.0.1/255.255.255.255
> acl SSL_ports port 443 563
> acl Safe_ports port 80 # http
> acl Safe_ports port 21 # ftp
> acl Safe_ports port 443 563 # https, snews
> acl Safe_ports port 70 # gopher
> acl Safe_ports port 210 # wais
> acl Safe_ports port 1025-65535 # unregistered ports
> acl Safe_ports port 280 # http-mgmt
> acl Safe_ports port 488 # gss-http
> acl Safe_ports port 591 # filemaker
> acl Safe_ports port 631 # cups
> acl Safe_ports port 777 # multiling http
> acl Safe_ports port 901 # SWAT
> acl purge method PURGE
> acl CONNECT method CONNECT
>
> # TAG: http_access
>
> http_access allow manager localhost
> http_access deny manager
> http_access allow purge localhost
> http_access deny purge
> http_access deny !Safe_ports
> http_access deny CONNECT !SSL_ports
> http_access allow CONNECT localhost
> http_access deny blockedsites !unblockedsites
> http_access deny all
>
> # TAG: icp_access
>
> icp_access allow all
> .....
> _______________________________________
>
> Thanks in advance,
> --
> **********************
> K. Ghosh,
> G. K. Power Systems,
> Hyderabad.
> **********************
> [EMAIL PROTECTED]
> BSNL: (040) 2715 4929
> RIM: (040) 310 58 749
> **********************
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: IBM Linux Tutorials
> Free Linux tutorial presented by Daniel Robbins, President and CEO of
> GenToo technologies. Learn everything from fundamentals to system
> administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
> _______________________________________________
> linux-india-help mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/linux-india-help
--
http://www.fastmail.fm - Access all of your messages and folders
wherever you are
-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
linux-india-help mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/linux-india-help
