Re: [squid-users] SQUID proxy server configuration

From: Jakob Curdes <jc_at_info-systems.de>
Date: Sun, 03 May 2009 20:29:41 +0200

>
> - i have a machine that has Squid and apache servers both on same
> machine, apache listens to port 80 where Squid listens to port 8000.
> - another machine on the same network has IIS server listens to port 80.
>
> server (like tomcat.no-ip.com) over the internet i receive a response
> from Squid telling that "the requested URL could not be retrieved"
> followed by "access denied", so did configure Squid in the right way?
>
So you are accessing port 80 at tomcat.no-ip.com? Then you do not reach
squid; you wrote yourself that your squid listens on port 8000. Either
this is not true or the error message is coming from apache, not from
squid. To make sense, your setup needs:

- two IP addresses for squid
- squid listening on port 80 for both addresses
- two ip addresses for the web servers OR different ports (not 80) for
the webservers where they are listening
- squid forwarding rules for the squid addresses and port 80 to the
webserver addresses and ports
- and ACLs for squid that allow the traffic designated for the webservers.

It looks to me you are trying to do it the other way round - putting a
squid on port 8000 before a webserver on port 80.
In this way you will end up with a publicly accessible webserver on port
8000 which is probably not what you want.
Note that there is a fundamental difference between the "normal" and
"reverse" proxy situations; also one squid can handle both you really
need to configure a squid reverse proxy with a public announced port
whereas for an internal proxy can listen on an arbitrary port since the
network is under your control!

Hope this helps,
Jakob Curdes
Received on Sun May 03 2009 - 18:30:12 MDT

This archive was generated by hypermail 2.2.0 : Mon May 04 2009 - 12:00:01 MDT