Re: [squid-users] Re: Problem with the access to ports above 1024

Adam Aube wrote:

>José Luis Castañeda wrote:
>
>
>
>>I have an application that accesses to ports above the 1024 and I have
>>configured the following thing
>>
>>acl Safe_ports port 1025-65535 # unregistered ports
>>
>>http_access deny !Safe_ports
>>http_access allow CONNECT Safe_ports
>>
>>In the file acces.log gives me the following error:
>>
>>1089393604.101 2 192.168.129.16 TCP_DENIED/403 1388 CONNECT
>>67.15.18.46:3306 - NONE/- text/html
>>
>>
>
>Do those http_access lines precede the
>
>http_access deny CONNECT !SSL_ports
>
>line in your squid.conf?
>
>Adam
>
>
>
>
Yes,

But in this I see something strange, my definition of Safe_ports and
SSL_ports is the following one

acl SSL_ports port 443 563 81
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 81 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
 
And I am usually using http and ftp that are declared there

-- 
José Luis Castañeda
Casa de Software
Facultad de Matemática y computación
Universidad de La Habana
EMail:	jose@uh.cu
	jose@matcom.uh.cu