I am installing Squid, a proxy server, behind a firewall. Squid server ip is 192.168.1.200, the firewall ip is 192.168.1.1
 
The proxy is parent with Telstra proxy.cache.telstra.net. The port for http/ftp is 3128
icp is 3130. My Squid.conf file is:
 
cache_peer proxy.cache.telstra.net parent 3128 0 no-query default
acl all src 0.0.0.0/0.0.0.0
never_direct allow all
 
I 've got tcp_denied message in the cache.log file.
 
I believe it is to do with the firewall.
 
My firewall setup is
 
INput
ipchains input -A -j ACCEPT tcp -s proxy.cache.telstra.net -d 192.168.1.200
OUTput
ipchains output -A -j ACCEPT tcp -s 192.168.1.200 -d proxy.cache.telstra.net 3128
 
What are the ports used when the cache server communicate?
Is my firewall script adequate to deal with the traffice between the 2 proxy server?
 
Regards
David Kwok
 

Reply via email to