This is in an IPCop box. Very simple config. Here is the whole thing. shutdown_lifetime 5 seconds
icp_port 0 http_port 172.21.0.1:800 acl QUERY urlpath_regex cgi-bin \? no_cache deny QUERY cache_effective_user squid cache_effective_group squid pid_filename /var/run/squid.pid cache_access_log /var/log/squid/access.log cache_log /var/log/squid/cache.log cache_store_log /var/log/squid/store.log log_mime_hdrs off forwarded_for off authenticate_program /usr/lib/squid/ncsa_auth /home/.htpasswd acl password proxy_auth REQUIRED acl local-servers dstdomain bbe.k12.mn.us map.nwea.org nwea.org acl all src 0.0.0.0/0.0.0.0 acl localhost src 127.0.0.1/255.255.255.255 acl localnet src 172.21.0.0/255.255.0.0 acl SSL_ports port 443 563 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 563 # https, snews acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl Safe_ports port 800 # Squids port (for icons) acl Safe_ports port 1433 # skyward acl Safe_ports port 16125 # skyward acl Safe_ports port 26125 # skyward acl Safe_ports port 16126 # ns1 acl Safe_ports port 36125 # extra acl Safe_ports port 46125 # fintrain acl Safe_ports port 56125 # stutrain acl Safe_ports port 81 # ipcop # acl CONNECT method CONNECT # http_access allow localhost http_access allow !Safe_ports # http_access allow CONNECT !SSL_ports # http_access allow localnet http_access allow password always_direct allow local-servers http_access deny all maximum_object_size 4096 KB minimum_object_size 0 KB cache_mem 2000 KB cache_dir ufs /var/log/cache 50 16 256 request_body_max_size 0 KB reply_body_max_size 0 KB ----- Original Message ----- From: "Adam Aube" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, September 12, 2003 10:28 PM Subject: Re: [squid-users] TCP_Denied > > I am trying to connect to a secure site, but keep getting the following > > error. Being a novice with squid I am not sure what to change. Can anyone > > help me with this? > > You didn't send your complete squid.conf (or at least I hope you didn't) - > there's quite a bit missing. > > Post your entire squid.conf, and then maybe we can help you. > > Adam >
