[squid-users] TCP_DENIED/403

2012-10-16 Thread Mike Muir
Hello, I'm getting a TCP DENIED/403 in the access log when trying to access all HTTPS sites via web browser. The browser displays: Error 111 (net::ERR_TUNNEL_CONNECTION_FAILED): Unknown error. I've included the following in my squid.conf (I'm using Squid 2.7) which to my understanding should allo

[squid-users] TCP_DENIED 403

2003-02-24 Thread Valter Brazzini
I've a problem with Squid Version 2.5 Stable 1. I've recently installed it on my Linux RH and I've a problem when I try to access to some sites. I've noticed that Squid return on the log file the following error : TCP_DENIED/403 1349 CONNECT - NONE/- text/html. The previous version 2.1 of Squi

RE: [squid-users] TCP_DENIED/403

2012-10-16 Thread Andrew Krupiczka
Have you specified https_port 443 ... cert= http://www.squid-cache.org/Versions/v2/2.7/cfgman/https_port.html Regards, Andrew -Original Message- From: Mike Muir [mailto:mm...@uniqueltd.com] Sent: Tuesday, October 16, 2012 3:41 PM To: squid-users@squid-cache.org Subject: [squid-users

Re: [squid-users] TCP_DENIED/403

2012-10-16 Thread Eliezer Croitoru
On 10/16/2012 9:41 PM, Mike Muir wrote: Hello, I'm getting a TCP DENIED/403 in the access log when trying to access all HTTPS sites via web browser. The browser displays: Error 111 (net::ERR_TUNNEL_CONNECTION_FAILED): Unknown error. I've included the following in my squid.conf (I'm using Squid

Re: [squid-users] TCP_DENIED/403

2012-10-16 Thread Mike Muir
My acl section and http_access: acl manager proto cache_object COAP acl localhost src 127.0.0.1/32 ::1 acl Whitelist dstdomain "/etc/squid/whitelist_sites" acl ncsa_users proxy_auth REQUIRED acl SSL_ports port 443 acl Safe_ports port 80 acl CONNECT method CONNECT acl all src all # cachemgr acces

Re: [squid-users] TCP_DENIED/403

2012-10-16 Thread Amos Jeffries
On 17.10.2012 09:49, Mike Muir wrote: My acl section and http_access: acl manager proto cache_object COAP acl localhost src 127.0.0.1/32 ::1 acl Whitelist dstdomain "/etc/squid/whitelist_sites" acl ncsa_users proxy_auth REQUIRED acl SSL_ports port 443 acl Safe_ports port 80 acl CONNECT method CO

Re: [squid-users] TCP_DENIED 403

2003-02-24 Thread Marc Elsen
Valter Brazzini wrote: > > I've a problem with Squid Version 2.5 Stable 1. > > I've recently installed it on my Linux RH and I've a problem when I try to > access to some sites. > I've noticed that Squid return on the log file the following error : > TCP_DENIED/403 1349 CONNECT - NONE/- text/h

Re: [squid-users] TCP_DENIED 403

2003-02-24 Thread Henrik Nordstrom
The request is denied by your http_access rules. CONNECT is a request for SSL tunneling. Most likely this is a SSL site running on a non-standard SSL port (if SSL at all...). See your squid.conf, especially the Safe_Ports and SSL_Ports definitions.. Regards Henrik mån 2003-02-24 klockan 16.17 sk

[squid-users] TCP_DENIED/403 1402 GET

2004-05-23 Thread jorn
Hello, I searched the archives, edited my ACLs, but I can't figure this one out. A Version 2.5.STABLE5 that seemed to be working fine is now rejecting users with an access denied message. My access log has entries like the following: 1085339278.198 2 192.168.253.14 TCP_DENIED/403 1352 GET

[squid-users] TCP_DENIED/403 3502 GET errors

2012-08-27 Thread grant lowe
Hi all, I'm brand-spanking new to this, so please don't beat me up too bad :-). Anyway, I have installed squid 3.2.0.17 on a CentOS 6.3 box. I'm trying to set up a squid cluster. But when I test the connection via telnet. I keep on getting errors like these in the access_log: 1346095968.991

[squid-users] TCP_DENIED/403 for internal servers

2013-06-04 Thread Satish Thareja
Hi, I have configured my squid box without restricting 'http_access' on any resource. But when I try to access a resource 'host.domain.com' using the hostname (i.e. host ) directly, I am getting TCP_DENIED/403 response code. I able to resolve 'host' from the squid machine directly, but http reque

Re: [squid-users] TCP_DENIED/403 1402 GET

2004-05-23 Thread Christoph Haas
On Sun, May 23, 2004 at 03:35:13PM -0500, jorn wrote: > Hello, > > I searched the archives, edited my ACLs, but I can't figure this one > out. A Version 2.5.STABLE5 that seemed to be working fine is now > rejecting users with an access denied message. My access log has > entries like the follow

Re: [squid-users] TCP_DENIED/403 1402 GET

2004-05-23 Thread jorn
On May 23, 2004, at 3:57 PM, Christoph Haas wrote: Try this: debug_options ALL,1 33,2 and watch your cache.log to see which ACL blocks you. Christoph -- My cache.log seemed to show no more interesting data than before, which is essentially startup data and nothing else. Even when I set :

Re: [squid-users] TCP_DENIED/403 1402 GET

2004-05-23 Thread jorn
On May 23, 2004, at 3:57 PM, Christoph Haas wrote: Try this: debug_options ALL,1 33,2 and watch your cache.log to see which ACL blocks you. Christoph -- My cache.log seemed to show no more interesting data than before, which is essentially startup data and nothing else. Even when I set :

Re: [squid-users] TCP_DENIED/403 1402 GET

2004-05-23 Thread Christoph Haas
On Sun, May 23, 2004 at 04:32:23PM -0500, jorn wrote: > On May 23, 2004, at 3:57 PM, Christoph Haas wrote: > >Try this: > >debug_options ALL,1 33,2 > > > >and watch your cache.log to see which ACL blocks you. > > > > Christoph > > My cache.log seemed to show no more interesting data than before, w

Re: [squid-users] TCP_DENIED/403 1402 GET

2004-05-23 Thread jorn
On May 23, 2004, at 4:49 PM, Christoph Haas wrote: May I assume you have restarted squid? Christoph A fair question. :) The answer is yes, several times. I even started it and kept it from running in the background: squid -N -d 9 Nothing useful came up on my console; nothing. I'm a bit

Re: [squid-users] TCP_DENIED/403 1402 GET

2004-05-23 Thread Jose Nathaniel Nengasca
It seems that your netmask ACL on ALL is a bit messy, try not to use 255.255.255.255, use 0.0.0.0 instead... > Hello, > > I searched the archives, edited my ACLs, but I can't figure this one > out. A Version 2.5.STABLE5 that seemed to be working fine is now > rejecting users with an access denied

Fw: [squid-users] TCP_DENIED/403 1402 GET

2004-05-23 Thread Jose Nathaniel Nengasca
004 11:12 AM Subject: Re: [squid-users] TCP_DENIED/403 1402 GET > It seems that your netmask ACL on ALL is a bit messy, try not to use > 255.255.255.255, use 0.0.0.0 instead... > > > > Hello, > > > > I searched the archives, edited my ACLs, but I can't figure this o

Re: [squid-users] TCP_DENIED/403 1402 GET

2004-05-24 Thread jorn
On May 24, 2004, at 1:15 PM, Jose Nathaniel Nengasca wrote: And by the way, 192.168.0.0/255.255.0.0 is correct? are you using class B on 192.168? instead of using class C? I'm using more than one /24 in 192.168, so I just mask it off at /16. :) smime.p7s Description: S/MIME cryptographic signa

Re: [squid-users] TCP_DENIED/403 3502 GET errors

2012-08-27 Thread Eliezer Croitoru
On 8/27/2012 11:09 PM, grant lowe wrote: What am I doing wrong? squid does exactly what the squid.conf saying.. ##start http_access allow localhost manager http_access deny manager http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow localnet http_access allow local

Re: [squid-users] TCP_DENIED/403 for internal servers

2013-06-04 Thread Amos Jeffries
On 4/06/2013 11:17 p.m., Satish Thareja wrote: Hi, I have configured my squid box without restricting 'http_access' on any resource. But when I try to access a resource 'host.domain.com' using the hostname (i.e. host ) directly, I am getting TCP_DENIED/403 response code. I able to resolve 'host

Re: [squid-users] TCP_DENIED/403 for internal servers

2013-06-04 Thread Satish Thareja
Amos, The config is to allow http access for all but this case. I came across this link : http://www.linuxquestions.org/questions/linux-networking-3/so-many-tcp_denied-in-squid-access-log-469574/ but I do not have anything blocked in my configuration. Is it possible that, if the 'host' does not

Re: [squid-users] TCP_DENIED/403 for internal servers

2013-06-04 Thread Eliezer Croitoru
Sorry Satish Thareja, This post is outdated since squid is not in 2.5\6 but on 3.3. If you will share more from squid.conf lines we can try to help you. if you can share the access.log we can try to understand. please share IP etc.. if you are getting 403 it means that the server is rejecting you

Re: [squid-users] TCP_DENIED/403 for internal servers

2013-06-05 Thread Satish Thareja
Thanks Eliezer. I think the server is the rejecting squid's IP as you pointed out, with http_access not blocked for any machine. Regards, Satish On Wed, Jun 5, 2013 at 1:51 AM, Eliezer Croitoru wrote: > Sorry Satish Thareja, > > This post is outdated since squid is not in 2.5\6 but on 3.3. > If

Re: Fw: [squid-users] TCP_DENIED/403 1402 GET

2004-05-23 Thread Merton Campbell Crockett
Original Message - > From: "Jose Nathaniel Nengasca" <[EMAIL PROTECTED]> > To: "Squid Mailing List" <[EMAIL PROTECTED]> > Sent: Monday, May 24, 2004 11:12 AM > Subject: Re: [squid-users] TCP_DENIED/403 1402 GET > > > > It seems that your n