Re: [squid-users] access denied

Christoph Haas wrote:

>On Wed, Oct 15, 2003 at 09:19:35PM +0200, deny wrote:
>
>
>>when i configure my proxy with the server squid (127.0.0.1 port 3128 )
>>i have in my navigator
>>
>>While trying to retrieve the URL: http://www.google.fr/
>>
>>The following error was encountered:
>>
>> * * Access Denied.*
>>
>>in my squid.conf i ve added
>>
>>http_access allow manager localhost linux-pour-lesnuls.com
>>http_access deny manager !localhost
>>
>>
>>but i ve always access denied
>>
>>
>
>I bet you also have some other "http_access" lines there. And those are
>causing that error message. Look through them. You probably need
>something like "acl lan src 10.0.0.0/8" and "http_access allow lan".
>
> Christoph
>

Hi
i list all my http_access in squid.conf
here are they,it seems good

http_access allow manager localhost
http_access allow lan
http_access deny manager !localhost !lan
# Deny requests to unknown ports
http_access deny !Safe_ports
# Deny CONNECT to other than SSL ports
http_access deny CONNECT !SSL_ports
http_access deny all
http_reply_access allow all
icp_access allow all


and the acl
acl all src 0.0.0.0/0.0.0.0
acl lan src 192.168.0.1/255.255.255.255
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT


why i always have "access denied "
when i enter to mozilla with preferences proxy are
http proxy 127.0.0.1 port 3128


thanks




>
>
>