[squid-users] RES: New Squid Server 3.5.20 on Centos 7 - Trying to redirect local web access to Port 80 on Linux Servers with iptables to Squid Server with http_port intercept

[Rogério Ceni Coelho]

Please, take a look :

[root at prd-rbs-squid01-poa squid]# cat /etc/squid/squid.conf | egrep -v
"^#|^$"

acl localnet src 10.0.0.0/8     # RFC1918 possible internal network

acl localnet src 172.16.0.0/12  # RFC1918 possible internal network acl
localnet src 192.168.0.0/16 # RFC1918 possible internal network

acl localnet src fc00::/7       # RFC 4193 local private network range

acl localnet src fe80::/10      # RFC 4291 link-local (directly plugged)
machines

acl SSL_ports port 443

acl Safe_ports port 80          # http

…

acl Safe_ports port 21          # ftp

acl Safe_ports port 443         # https

acl Safe_ports port 70          # gopher

acl Safe_ports port 210         # wais

acl Safe_ports port 1025-65535  # unregistered ports

acl Safe_ports port 280         # http-mgmt

acl Safe_ports port 488         # gss-http

acl Safe_ports port 591         # filemaker

acl Safe_ports port 777         # multiling http

acl CONNECT method CONNECT

http_access deny !Safe_ports

http_access deny CONNECT !SSL_ports

http_access allow localhost manager

http_access deny manager

http_access allow localnet

http_access allow localhost

*http_port 3128*

*http_port 3129 intercept*

cache_dir ufs /var/spool/squid 100 16 256 coredump_dir /var/spool/squid

refresh_pattern ^ftp:           1440    20%     10080

refresh_pattern ^gopher:        1440    0%      1440

refresh_pattern -i (/cgi-bin/|\?) 0     0%      0

refresh_pattern .               0       20%     4320

[root at prd-rbs-squid01-poa squid]#
Em qua, 24 de mai de 2017 às 18:13, Amos Jeffries <squid3 at treenet.co.nz>
escreveu:

> On 25/05/17 08:12, Rogerio Coelho wrote:
> > On my new Squid Server running 3.5.20 on Centos 7 a try to use in many
> different ways.
> >
> > When i use wget or firefox using http_proxy conf web access go ok. But
> when i try to access web using iptables redirect from Linux Server i got
> bad request / Invalid URL.
>
> You omitted the squid.conf dump on this post so I cannot be sure but
> that is the behaviour which happens when use a forward/explicit proxy
> port (eg 3128) to receive intercepted port-80 traffic.
>
> You need separate http_port lines for receiving these two quite
> different types of HTTP traffic.
>
>
> Amos
>
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20170524/077ed2c6/attachment.html>