I thought i did with these acl's ?
(i've allowed only our internet ip adresses for testing )

acl all src 0.0.0.0/0.0.0.0
acl bron src 10.10.10.7/255.255.255.255
acl pipo proxy_auth src 164.111.141.141/255.255.255.248

http_access allow bron
http_access allow pipo
http_access deny all

Hans.


> You need to allow access to the site in http_access..
> 
> Regards
> Henrik
> 
> On Thu, 13 Nov 2003 [EMAIL PROTECTED] wrote:
> 
> > 
> > 
> >  my situation : an iis server with intranet on the 
internal 
> > network (10.10.10.7:80.)
> > 
> > I am trying to disclose the intranet pages to the 
internet 
> > with ncsa authentication. 
> > 
> > I have patched the source to get authentication working 
in 
> > reversed proxy mode.
> > 
> > I can see in access.log that the authentication works 
but 
> > on my browser connected to the internet i get ACCESS 
DENIED 
> > to 10.10.10.7. 
> > 
> > it seems that i have no acl matching for the intranet 
> > server, but i have !
> > 
> > Is this construcion possible in the first place ?
> > 
> > should i try squid 3?
> >  
> > 1068646051.440     12 164.111.141.141 TCP_DENIED/403 
1381 
> > GET 
> > http://10.10.10.7/frameset_1024.php hans NONE/- 
text/html
> >  
> > 1068646083.354      3 164.111.141.141 TCP_DENIED/401 
1665 
> > GET http://10.10.10.7/ - NONE/- text/html
> >  
> > 1068646093.452    570 164.111.141.141 TCP_DENIED/403 
1347 
> > GET http://10.10.10.7/ hans NONE/- text/html
> >  
> > (the ip adresses are made up)
> > 
> > Hans.
> > 
> > 
> 




-- 
_____________________________________________________________________
Snel en voordelig ADSL nu voor iedereen bereikbaar.
Zon Breedband Budget voor EUR 14,95 per maand.
Nu tijdelijk geen aansluitkosten. Bestel snel op zonnet.nl/breedband

Reply via email to