I have setup a squid server, and it works fine on every port except squid's
default (3128). Using
a browser, every other port connects fine, but not 3128.
I ran a utility called lsof to confirm that squid is listening on 3128. Here is
the positive
result:
COMMAND PID USER FD TYPE DEVICE
tor 2007-06-28 klockan 12:50 -0700 skrev Reid:
> When my browser attempts to connect via 3128 it just hangs and eventually
> times out. The squid
> error log doesn't even show an attempt to connect. The other ports connect no
> problem.
Check if there is a firewall rule blocking port 3128.
ipt
tor 2007-06-28 klockan 14:26 -0700 skrev Reid:
> Hi,
>
> Thank you for your reply. I'm using webmin, which reports that "No IPtables
> firewall has been
> setup yet on your system".. Frustrated,
And if you execute "iptables-save | grep 3128" from the command line (as
root)? It's possible there i
Running "iptables-save | grep 3128" return nothings (No output, no error, just
another prompt).
I'm not aware of any other firewall. Baffled
> And if you execute "iptables-save | grep 3128" from the command line (as
> root)? It's possible there is iptables rules Webmin doesn't know about..
> Or c
> Running "iptables-save | grep 3128" return nothings (No output, no error,
> just another prompt).
> I'm not aware of any other firewall. Baffled
>
>> And if you execute "iptables-save | grep 3128" from the command line (as
>> root)? It's possible there is iptables rules Webmin doesn't know about.
Yes, I meant to say "cache.log". If I try to connect via 3128, the browser
times out, and no entry
appears in cache.log.
Here are the entries in squid.conf, where "#.#.#.#" is my ip:
http_port #.#.#.#:8080
http_port #.#.#.#:8000
http_port #.#.#.#:3128
http_port #.#.#.#:3127
I'm new to squid and
Hi,
On Thu, 2007-06-28 at 16:15 -0700, Reid wrote:
> Yes, I meant to say "cache.log". If I try to connect via 3128, the browser
> times out, and no entry
> appears in cache.log.
>
> Here are the entries in squid.conf, where "#.#.#.#" is my ip:
>
> http_port #.#.#.#:8080
> http_port #.#.#.#:8000
Yes, those command show squid as running, and listening on port 3128:
> lsof -ni tcp:3128
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
squid 7281 squid 18u IPv4 54844 TCP #.#.#.#:3128 (LISTEN)
> ps -ef
UIDPID PPID C STIME TTY TIME CMD
root 7279 1 0
tor 2007-06-28 klockan 16:15 -0700 skrev Reid:
> Yes, I meant to say "cache.log". If I try to connect via 3128, the browser
> times out, and no entry
> appears in cache.log.
And what about access.log?
What happens if you run
"/path/to/bin/squidclient -p 3128 http://www.squid-cache.org";
Regards
Hi,
On Thu, 2007-06-28 at 16:47 -0700, Reid wrote:
> Yes, those command show squid as running, and listening on port 3128:
>
> > lsof -ni tcp:3128
> COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
> squid 7281 squid 18u IPv4 54844 TCP #.#.#.#:3128 (LISTEN)
>
> > ps -ef
> UID
Well it just took me 3 hours to figure out that squidclient requires localhost.
Fun.
So I tried "squidclient -p 3128 http://www.squid-cache.org"; and it works fine.
It outputs the
entire html of squid-cache.org homepage.
But using IE/Firefox to proxy through 3128 still causes the browser to han
On Thu, 2007-06-28 at 20:11 -0700, Reid wrote:
> Well it just took me 3 hours to figure out that squidclient requires
> localhost. Fun.
>
> So I tried "squidclient -p 3128 http://www.squid-cache.org"; and it works
> fine. It outputs the
> entire html of squid-cache.org homepage.
>
> But using I
> Sounds very very much as if there is a firewall blocking access to port
> 3128.
> Regards
> Henrik
Could you advise of how I can determine if there is some firewall running?
Here is a list of running processes:
Thank you
1 root Jun26 init [2]
2 root Jun26 [migration/0]
3 root Jun26 [ksoftirq
On Thu, 2007-06-28 at 22:26 -0700, Reid wrote:
> Could you advise of how I can determine if there is some firewall running?
To check if there is a local firewall running:
iptables-save
To check if there is a firewall between the client and the Squid server:
run "tcpdump -n -i any port 3128"
Reid ha scritto:
Sounds very very much as if there is a firewall blocking access to port
3128.
Regards
Henrik
Could you advise of how I can determine if there is some firewall running?
Here is a list of running processes:
Thank you
1 root Jun26 init [2]
2 root Jun26 [migration/0]
3 root Ju
These are the results of running the commands. Does it look like there is
anything that could be
interfering with port 3128 connections?
> iptables-save
# Generated by iptables-save v1.2.11 on Thu Jun 28 15:32:38 2007
*nat
:PRER
Reid ha scritto:
These are the results of running the commands. Does it look like there is
anything that could be
interfering with port 3128 connections?
iptables-save
# Generated by iptables-save v1.2.11 on Thu Jun 28 15:32
Could you advise of how I can determine if there is some firewall running?
Here is a list of running processes:
You cannot see the firewall as it is part of the kernel.
Do a
telnet localhost 3128
If you get ANY response, the port is open for the localhost, if the
command fails immediately or
> Do a telnet localhost 3128
> If you get ANY response, the port is open for the localhost, if the
> command fails immediately or it takes ages to fail, there is a firewall
> blocking access from localhost. You can do the same from a client in
> your network; replace the localhost by the IP of
telnet localhost 3128
Trying 127.0.0.1...
Connected to localhost.localdomain.
Escape character is '^]'.
Connection closed by foreign host.
I get the same result for ports like 8000, 8080.
Telnet from client to 3128 hangs and doesn't connect. Telnet to other ports
does connect.
Then you ha
Reid wrote:
Yes, I meant to say "cache.log". If I try to connect via 3128, the browser
times out, and no entry
appears in cache.log.
Hi Reid,
Do the timeouts in your web browser give any indication related to your
Squid proxy server?
Here are the entries in squid.conf, where "#.#.#.#" is
Hi,
All those tests checked out - the commands did not produce any errors.
Here are the uncommented lines from my squid.conf.. See anything that might
block 3128? Thanks
WELCOME TO SQUID 2.6.STABLE5
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
ca
Thank you everyone for your help. The dedicated server company where my squid
is located has just
reported to me that "we are blocking outgoing connections on tcp/3128 port for
security reasons".
Does this mean that they are a "squid unfriendly" company? Is there any reason
to block that port,
Reid wrote:
Thank you everyone for your help. The dedicated server company where my squid
is located has just
reported to me that "we are blocking outgoing connections on tcp/3128 port for
security reasons".
Does this mean that they are a "squid unfriendly" company? Is there any reason
to blo
many scanners look for open proxies on port 3128 and 8080.
mike
At 12:52 PM 6/29/2007, Tek Bahadur Limbu wrote:
Reid wrote:
Thank you everyone for your help. The dedicated server company
where my squid is located has just
reported to me that "we are blocking outgoing connections on
tcp/3128 p
Reid wrote:
> Thank you everyone for your help. The dedicated server company where my squid
> is located has just
> reported to me that "we are blocking outgoing connections on tcp/3128 port
> for security reasons".
>
> Does this mean that they are a "squid unfriendly" company? Is there any
> r
Thank you everyone for your help. The dedicated server company where my squid
is located has just
reported to me that "we are blocking outgoing connections on tcp/3128 port for
security reasons".
Does this mean that they are a "squid unfriendly" company? Is there any reason
to block that por
On Fri, 2007-06-29 at 12:32 -0700, Reid wrote:
> Does this mean that they are a "squid unfriendly" company?
Their answer made me a little confused.. they say outgoing connections.
Your connections is incoming to the hosted server I think, and it seems
they blocked that as well..
> Is there any r
On 29.06.07 12:32, Reid wrote:
(please, configure your mailer to wrap lines below 80 chars)
> Thank you everyone for your help. The dedicated server company where my
> squid is located has just reported to me that "we are blocking outgoing
> connections on tcp/3128 port for security reasons".
eh
Reid ha scritto:
Could you tell me the command to make squid listen only on 3128? When I run
"tcpdump -n -i any
port 3128" (or any other port) it gives me an error - something about
promiscuous command. Thanks
Have you tried to make squid listen only on the 3128 port ?
Maybe you could start
30 matches
Mail list logo
