nixCraft

Hi,

I am using Squid 2.6 stable on Red Hat 9. It is working fine if we access it through web browser (IE). Now I want to upload and download the the data from the server of my vendor. To do this I have a client software installed on the PC which uses ssl connection for data transmission. I have configured this client using Squid proxy.. With this I am able to download the data but I am not able to send the data. The error which I come across while sending the data is as mentioned below.

access.log:
1168005701.832 8 192.9.225.28 TCP_DENIED/407 1731 CONNECT db1.com:443 - NONE/- text/html
1168005701.906 0 192.9.225.28 TCP_DENIED/407 1731 CONNECT db1.com:443 - NONE/- text/html
1168005701.915 1 192.9.225.28 TCP_DENIED/407 1731 CONNECT db1.com:443 - NONE/- text/html

I have also tried changing the firwall rules but could not find the solution.

The contents of squid.conf is as mentioned below for the reference.

http_port 3128
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
cache_mem 16 MB
cache_dir ufs /usr/local/squid/var/cache 5120 16 256
access_log /usr/local/squid/var/logs/access.log squid
cache_store_log none
auth_param basic program /usr/local/squid/libexec/ncsa_auth /usr/local/squid/etc/passwd
auth_param basic children 5
auth_param basic children 5
auth_param basic realm Proxy Server
auth_param basic credentialsttl 5 minute
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
half_closed_clients off
acl auth_users proxy_auth REQUIRED
http_access allow auth_users
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 443 # https
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
acl my_network src 192.9.225.1-192.9.225.254 192.9.226.5-192.9.226.254
http_access allow my_network
http_access allow localhost
http_access deny all
http_reply_access allow all
icp_access allow all
cache_effective_user admin
visible_hostname baflproxy
coredump_dir /usr/local/squid/var/cache


Can anybody help and guide me on how to resolve this issue.

Regards
Prasad

Welcome to nixCraft forum.

What error message do you see in cache.log file? Can you paste the output? Error 407 means squid requires authentication, your real error message in cache.log file.

__________________
Vivek Gite
Linux Evangelist
Be proud RHEL user, and let the world know about your enterprise choices! Join RedHat user group.
Always use CODE tags for posting system output and commands!
Do you run a Linux? Let's face it, you need help

There is no error message appearing in the cache.log file.

Please find the contents of cache.log file.

2007/01/06 19:04:09| Starting Squid Cache version 2.6.STABLE5 for i686-pc-linux-gnu...
2007/01/06 19:04:09| Process ID 30808
2007/01/06 19:04:09| With 1024 file descriptors available
2007/01/06 19:04:09| Using poll for the IO loop
2007/01/06 19:04:09| Performing DNS Tests...
2007/01/06 19:04:09| Successful DNS name lookup tests...
2007/01/06 19:04:09| DNS Socket created at 0.0.0.0, port 37508, FD 4
2007/01/06 19:04:09| Adding nameserver 218.248.240.208 from /etc/resolv.conf
2007/01/06 19:04:09| Adding nameserver 218.248.255.193 from /etc/resolv.conf
2007/01/06 19:04:09| helperOpenServers: Starting 5 'ncsa_auth' processes
2007/01/06 19:04:09| Unlinkd pipe opened on FD 14
2007/01/06 19:04:09| Swap maxSize 5242880 KB, estimated 403298 objects
2007/01/06 19:04:09| Target number of buckets: 20164
2007/01/06 19:04:09| Using 32768 Store buckets
2007/01/06 19:04:09| Max Mem size: 16384 KB
2007/01/06 19:04:09| Max Swap size: 5242880 KB
2007/01/06 19:04:09| Store logging disabled
2007/01/06 19:04:09| Rebuilding storage in /usr/local/squid/var/cache (DIRTY)
2007/01/06 19:04:09| Using Least Load store dir selection
2007/01/06 19:04:09| Set Current Directory to /usr/local/squid/var/cache
2007/01/06 19:04:09| Loaded Icons.
2007/01/06 19:04:09| Accepting proxy HTTP connections at 0.0.0.0, port 3128, FD 15.
2007/01/06 19:04:09| Accepting ICP messages at 0.0.0.0, port 3130, FD 16.
2007/01/06 19:04:09| Accepting SNMP messages on port 3401, FD 17.
2007/01/06 19:04:09| WCCP Disabled.
2007/01/06 19:04:09| Ready to serve requests.
2007/01/06 19:04:09| Done reading /usr/local/squid/var/cache swaplog (47 entries)
2007/01/06 19:04:09| Finished rebuilding storage from disk.
2007/01/06 19:04:09| 47 Entries scanned
2007/01/06 19:04:09| 0 Invalid entries.
2007/01/06 19:04:09| 0 With invalid flags.
2007/01/06 19:04:09| 47 Objects loaded.
2007/01/06 19:04:09| 0 Objects expired.
2007/01/06 19:04:09| 0 Objects cancelled.
2007/01/06 19:04:09| 0 Duplicate URLs purged.
2007/01/06 19:04:09| 0 Swapfile clashes avoided.
2007/01/06 19:04:09| Took 0.3 seconds ( 177.3 objects/sec).
2007/01/06 19:04:09| Beginning Validation Procedure
2007/01/06 19:04:09| Completed Validation Procedure
2007/01/06 19:04:09| Validated 47 Entries
2007/01/06 19:04:09| store_swap_size = 748k
2007/01/06 19:04:10| storeLateRelease: released 0 objects


Prasad

If I remove the line "http_access allow auth_users" from squid.conf then I am able to send the data but after doing this there is no authentication is required for accessing the internet through proxy server.

Any iidea how to achieve both ie. sending the data and having proxy authetication.

Thanks in advance,
Prasad