Re: [squid-users] Squid behind another proxy - help with simple config
oh dear that was it! can't believe I had a big fat type, it was driving me crazy ;) Thanks a lot for the help Amos! Cheers, Daniel On Wed, Jan 13, 2010 at 6:29 PM, Amos Jeffries squ...@treenet.co.nz wrote: Daniel Iversen wrote: Hi there.. I have a seemingly simple requirement that I can't get working in Squid (2.7 on Windows), and that is to be able to use a a Squid setup as a proxy server (with aggressive caching) behind another closed-off corporate proxy server (not squid necessarily) for all Internet HTTP access going out. So basically, I have the following config in squid.conf; cache_peer parent IP or hostname of my proxy server 8080 0 no-query default If thats not a typo ... try: cache_peer IP-address parent 8080 0 no-query default acl all src 0.0.0.0/0.0.0.0 http_access allow all never_direct allow all (I used to have the recommended and more secure http_access parameters but reverted to the above for testing but it made no difference) I am always getting errors like this; 2010/01/13 15:20:24| Failed to select source for 'http://www.google.com.au/' 2010/01/13 15:20:24| always_direct = 0 2010/01/13 15:20:24| never_direct = 1 2010/01/13 15:20:24| timedout = 0 Its to be noted that in my corporate environment I have to go through this external proxy to get internet access and I can't even ping servers from my local machine and probably have limited DNS access too. So really my Squid server needs to forward all details as-is to the external proxy but it does not work. I have also tried experimenting with the following command line arguments when starting squid -DY -d 4 -X but to no avail? Am I crazy here? Should this not be a simple setup? Any ideas why this could be? Anyone has a working Squid config for something like this that they could share? Thanks a lot in advance for your help.. Cheers, Daniel Amos -- Please be using Current Stable Squid 2.7.STABLE7 or 3.0.STABLE21 Current Beta Squid 3.1.0.15
[squid-users] Squid behind another proxy - help with simple config
Hi there.. I have a seemingly simple requirement that I can't get working in Squid (2.7 on Windows), and that is to be able to use a a Squid setup as a proxy server (with aggressive caching) behind another closed-off corporate proxy server (not squid necessarily) for all Internet HTTP access going out. So basically, I have the following config in squid.conf; cache_peer parent IP or hostname of my proxy server 8080 0 no-query default acl all src 0.0.0.0/0.0.0.0 http_access allow all never_direct allow all (I used to have the recommended and more secure http_access parameters but reverted to the above for testing but it made no difference) I am always getting errors like this; 2010/01/13 15:20:24| Failed to select source for 'http://www.google.com.au/' 2010/01/13 15:20:24| always_direct = 0 2010/01/13 15:20:24| never_direct = 1 2010/01/13 15:20:24| timedout = 0 Its to be noted that in my corporate environment I have to go through this external proxy to get internet access and I can't even ping servers from my local machine and probably have limited DNS access too. So really my Squid server needs to forward all details as-is to the external proxy but it does not work. I have also tried experimenting with the following command line arguments when starting squid -DY -d 4 -X but to no avail? Am I crazy here? Should this not be a simple setup? Any ideas why this could be? Anyone has a working Squid config for something like this that they could share? Thanks a lot in advance for your help.. Cheers, Daniel
Re: [squid-users] Squid behind another proxy - help with simple config
Daniel Iversen wrote: Hi there.. I have a seemingly simple requirement that I can't get working in Squid (2.7 on Windows), and that is to be able to use a a Squid setup as a proxy server (with aggressive caching) behind another closed-off corporate proxy server (not squid necessarily) for all Internet HTTP access going out. So basically, I have the following config in squid.conf; cache_peer parent IP or hostname of my proxy server 8080 0 no-query default If thats not a typo ... try: cache_peer IP-address parent 8080 0 no-query default acl all src 0.0.0.0/0.0.0.0 http_access allow all never_direct allow all (I used to have the recommended and more secure http_access parameters but reverted to the above for testing but it made no difference) I am always getting errors like this; 2010/01/13 15:20:24| Failed to select source for 'http://www.google.com.au/' 2010/01/13 15:20:24| always_direct = 0 2010/01/13 15:20:24|never_direct = 1 2010/01/13 15:20:24|timedout = 0 Its to be noted that in my corporate environment I have to go through this external proxy to get internet access and I can't even ping servers from my local machine and probably have limited DNS access too. So really my Squid server needs to forward all details as-is to the external proxy but it does not work. I have also tried experimenting with the following command line arguments when starting squid -DY -d 4 -X but to no avail? Am I crazy here? Should this not be a simple setup? Any ideas why this could be? Anyone has a working Squid config for something like this that they could share? Thanks a lot in advance for your help.. Cheers, Daniel Amos -- Please be using Current Stable Squid 2.7.STABLE7 or 3.0.STABLE21 Current Beta Squid 3.1.0.15
[squid-users] squid behind another proxy
Hi Guys! I'm writing down this email because i tried several times perform an specific task with squid and i still not able to reach my aim. I have a computer runing NTLM, another proxy with Micro$oft authentication, i put a Squid behind this proxy and i cannot connect to any internet web pages, i still recieving Time out message from any web page that i'm trying to open. The only thing that i receive besides this error message is the IP address for the page requested. I got from some how-to a rule called cache-per and i set the followings option: cache_peer xxx.xxx.xxx.xxx parent 3128 0 default no-query (I seted the 3128 port in the NTLM as well) Also i tried with cache_peer xxx.xxx.xxx.xxx sibling 3128 0 default no-query and i received the same error. Could you help in order to resolve this problem??? I don't know what to do about it. I will appreciate all your help. -- --- Lucas Coudures Registered Linux User #442566 Blog: http://lucas-coudures.blogspot.com/ Jabber: [EMAIL PROTECTED]
Re: [squid-users] squid behind another proxy
Hi, On Sat, May 19, lucas coudures wrote: I got from some how-to a rule called cache-per and i set the followings option: cache_peer xxx.xxx.xxx.xxx parent 3128 0 default no-query (I seted the 3128 port in the NTLM as well) did you have a line like: never_direct allow all to tell squid, it shall get all pages via the peers and not directly ? -- Gruß Dieter -- I do not get viruses because I do not use MS software. If you use Outlook then please do not put my email address in your address-book so that WHEN you get a virus it won't use my address in the From field. signature.asc Description: Digital signature
[squid-users] Squid behind another proxy
Hi everybody, I'm a new user on list I try to configure squid with a proxy parent which had only 8080 http port open so I can use squid with ICP request ... So in fact I have this Local NetworkProxy squid---Proxy (only port 8080 and connection with login+ pass)--internet So in the squid.Conf, I have add a line: cache_peer proxy parent 8080 0 no-query login=login:pass prefer-direct off But It doesn't work ans my acces.log have only TCP_MISS and i have a time out on the client Please if someone had a solution Thanks a lot/ ++ Alex
RE: [squid-users] Squid behind another proxy
Hi everybody, I'm a new user on list I try to configure squid with a proxy parent which had only 8080 http port open so I can use squid with ICP request ... So in fact I have this Local NetworkProxy squid---Proxy (only port 8080 and connection with login+ pass)--internet So in the squid.Conf, I have add a line: cache_peer proxy parent 8080 0 no-query login=login:pass prefer-direct off But It doesn't work ans my acces.log have only TCP_MISS and i have a time out on the client Please if someone had a solution Thanks a lot/ ++ Some remarks, in the beginning of the past , you seem to indicate the parent supports ICP. In that case you must not use 'no-query', instead do not use this parameter and specify the ICP port that the parent uses instead of '0'. In case the parent is the only one with Internet access you need : never_direct allow all instead of prefer_direct off. M.
