<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">Could this cause the issue?<div><br></div><div><div>acl https_login url_regex -i ^https.*(login|Login).*</div><div>cache deny https_login</div><div><br></div><div><br><blockquote type="cite"><div>On Jul 11, 2024, at 11:12, Jonathan Lee <jonathanlee571@gmail.com> wrote:</div><br class="Apple-interchange-newline"><div><meta http-equiv="content-type" content="text/html; charset=utf-8"><div style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div><div>cachemgr_passwd disable offline_toggle reconfigure shutdown</div><div>cachemgr_passwd PASSWORDREDCATED all</div><div>eui_lookup on</div><div>acl no_miss url_regex -i gateway\.facebook\.com\/ws\/realtime\?</div><div>acl no_miss url_regex -i web-chat-e2ee\.facebook\.com\/ws\/chat</div><div>acl CONNECT method CONNECT</div><div>acl wuCONNECT dstdomain www.update.microsoft.com</div><div>acl wuCONNECT dstdomain sls.microsoft.com</div><div>http_access allow CONNECT wuCONNECT localnet</div><div>http_access allow CONNECT wuCONNECT localhost</div><div>http_access allow windowsupdate localnet</div><div>http_access allow windowsupdate localhost</div><div>http_access allow HttpAccess localnet</div><div>http_access allow HttpAccess localhost</div><div>http_access deny manager</div><div>http_access deny to_ipv6</div><div>http_access deny from_ipv6</div><div><br></div><div>acl BrokenButTrustedServers dstdomain "/usr/local/pkg/dstdom.broken"</div><div>acl DomainMismatch ssl_error SQUID_X509_V_ERR_DOMAIN_MISMATCH</div><div>sslproxy_cert_error allow BrokenButTrustedServers DomainMismatch</div><div>sslproxy_cert_error deny all</div><div><br></div><div>acl splice_only src 192.168.1.8 #Tasha iPhone</div><div>acl splice_only src 192.168.1.10 #Jon iPhone</div><div>acl splice_only src 192.168.1.11 #Amazon Fire</div><div>acl splice_only src 192.168.1.15 #Tasha HP</div><div>acl splice_only src 192.168.1.16 #iPad</div><div><br></div><div>acl splice_only_mac arp MACADDRESSREDACTED</div><div>acl splice_only_mac arp MACADDRESSREDACTED</div><div>acl splice_only_mac arp MACADDRESSREDACTED</div><div>acl splice_only_mac arp MACADDRESSREDACTED</div><div>acl splice_only_mac arp MACADDRESSREDACTED</div><div><br></div><div>acl NoSSLIntercept ssl::server_name_regex -i "/usr/local/pkg/reg.url.nobump"</div><div>acl NoBumpDNS dstdomain "/usr/local/pkg/dns.nobump"</div><div><br></div><div>acl markBumped annotate_client bumped=true</div><div>acl active_use annotate_client active=true</div><div>acl bump_only src 192.168.1.3 #webtv</div><div>acl bump_only src 192.168.1.4 #toshiba</div><div>acl bump_only src 192.168.1.5 #imac</div><div>acl bump_only src 192.168.1.9 #macbook</div><div>acl bump_only src 192.168.1.13 #dell</div><div><br></div><div>acl bump_only_mac arp MACADDRESSREDACTED</div><div>acl bump_only_mac arp MACADDRESSREDACTED</div><div>acl bump_only_mac arp MACADDRESSREDACTED</div><div>acl bump_only_mac arp MACADDRESSREDACTED</div><div>acl bump_only_mac arp MACADDRESSREDACTED</div><div>sslproxy_cert_sign signTrusted bump_only_mac</div><div><br></div><div>ssl_bump peek step1</div><div>miss_access deny no_miss active_use</div><div>ssl_bump splice https_login active_use</div><div>ssl_bump splice splice_only_mac splice_only active_use</div><div>ssl_bump splice NoBumpDNS active_use</div><div>ssl_bump splice NoSSLIntercept active_use</div><div>ssl_bump bump bump_only_mac bump_only active_use</div><div>acl activated note active_use true</div><div>ssl_bump terminate !activated</div><div><br></div><div>shutdown_lifetime 1 seconds</div><div>negative_dns_ttl 5 minutes</div><div><br></div><div><br></div><div>Does the MAC address and bump have anything to do with it? This worked in the older versions without having to input a MAC for the loopback</div><div><br></div></div><div><blockquote type="cite"><div>On Jul 11, 2024, at 11:08, Jonathan Lee <jonathanlee571@gmail.com> wrote:</div><br class="Apple-interchange-newline"><div><meta http-equiv="content-type" content="text/html; charset=utf-8"><div style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">I use http access acl set as followed <div><br></div><div><div>acl getmethod method GET</div><div>acl to_ipv6 dst ipv6</div><div>acl from_ipv6 src ipv6</div><div>acl HttpAccess dstdomain <b>"/usr/local/pkg/http.access”</b></div><div><br></div><div><br></div><div><b>/usr/local/pkg/http.access</b></div><div>contains:</div><div><div>office.com</div><div>data.microsoft.com</div><div>windowsupdate.com</div><div>dc1-st.ksn.kaspersky-labs.com</div><div>dc1-file.ksn.kaspersky-labs.com</div><div>dc1.ksn.kaspersky-labs.com</div><div>gsa.apple.com</div><div>apps.apple.com</div><div>certs.apple.com</div><div>crl.apple.com</div><div>entrust.net</div><div>digicert.com</div><div>ocsp.apple.com</div><div>ocsp2.apple.com</div><div>valid.apple.com</div><div>push.apple.com</div><div>itunes.apple.com</div><div>appldnld.apple.com</div><div>gg.apple.com</div><div>gs.apple.com</div><div>mesu.apple.com</div><div>oscdn.apple.com</div><div>osrecovery.apple.com</div><div>swcdn.apple.com</div><div>swdownload.apple.com</div><div>updates-http.cdn-apple.com</div><div>appldnld.apple.com.edgesuite.net</div><div>suconfig.apple.com</div><div>audiocontentdownload.apple.com</div><div>devimages-cdn.apple.com</div><div>download.developer.apple.com</div><div>sylvan.apple.com</div><div>static.ips.apple.com</div></div><div><br></div><div><br></div><div>http_access allow CONNECT wuCONNECT localnet</div><div>http_access allow CONNECT wuCONNECT localhost</div><div>http_access allow windowsupdate localnet</div><div>http_access allow windowsupdate localhost</div><div>http_access allow HttpAccess localnet</div><div>http_access allow HttpAccess localhost</div><div>http_access deny manager</div><div>http_access deny to_ipv6</div><div>http_access deny from_ipv6 <br id="lineBreakAtBeginningOfMessage"><div><br><blockquote type="cite"><div>On Jul 11, 2024, at 11:02, Jonathan Lee <jonathanlee571@gmail.com> wrote:</div><br class="Apple-interchange-newline"><div><meta http-equiv="content-type" content="text/html; charset=utf-8"><div style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">also <div><br></div><div><div class="panel-heading" style="box-sizing: border-box; padding: 5px 15px; border-bottom-width: 1px; border-bottom-style: solid; border-color: rgb(214, 233, 198); border-radius: 0px; color: rgb(60, 118, 61); background-color: rgb(223, 240, 216); font-family: Roboto, sans-serif; font-size: 14px;"><h2 class="panel-title" style="box-sizing: border-box; font-family: inherit; font-weight: 500; line-height: 1.1; margin-top: 0px; margin-bottom: 0px; font-size: 16px;">Shell Output - squidclient -h 127.0.0.1 -v -U admin -W redacted mgr:info</h2></div><div class="panel-body" style="box-sizing: border-box; padding: 0px; caret-color: rgb(51, 51, 51); color: rgb(51, 51, 51); font-family: Roboto, sans-serif; font-size: 14px; background-color: rgb(255, 255, 255);"><div class="content" style="box-sizing: border-box; padding: 10px;"><pre style="box-sizing: border-box; overflow: auto; font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: 13px; padding: 9.5px; margin-top: 0px; margin-bottom: 10px; line-height: 1.428571; word-break: break-all; overflow-wrap: break-word; background-color: rgb(245, 245, 245); border: 1px solid rgb(204, 204, 204); border-radius: 4px;">Request:
GET http://127.0.0.1:3128/squid-internal-mgr/info HTTP/1.0
Host: 127.0.0.1:3128
User-Agent: squidclient/6.6
Accept: */*
Authorization: Basic YWRtaW46R09Qc3lzdGVtYWRtaW4xIQ==
Connection: close
.
HTTP/1.1 403 Forbidden
Server: squid
Mime-Version: 1.0
Date: Thu, 11 Jul 2024 18:01:46 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 3788
X-Squid-Error: ERR_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en
Cache-Status: Lee_Family.home.arpa
Cache-Status: Lee_Family.home.arpa;detail=no-cache
Connection: close</pre></div></div><div><br><blockquote type="cite"><div>On Jul 11, 2024, at 10:57, Jonathan Lee <jonathanlee571@gmail.com> wrote:</div><br class="Apple-interchange-newline"><div><meta http-equiv="content-type" content="text/html; charset=utf-8"><div style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div class="panel-heading" style="box-sizing: border-box; padding: 5px 15px; border-bottom-width: 1px; border-bottom-style: solid; border-color: rgb(214, 233, 198); border-radius: 0px; color: rgb(60, 118, 61); background-color: rgb(223, 240, 216); font-family: Roboto, sans-serif; font-size: 14px;"><h2 class="panel-title" style="box-sizing: border-box; font-family: inherit; font-weight: 500; line-height: 1.1; margin-top: 0px; margin-bottom: 0px; font-size: 16px;">Shell Output - squidclient -v -U admin -W REDACTED mgr:info</h2></div><div class="panel-body" style="box-sizing: border-box; padding: 0px; caret-color: rgb(51, 51, 51); color: rgb(51, 51, 51); font-family: Roboto, sans-serif; font-size: 14px; background-color: rgb(255, 255, 255);"><div class="content" style="box-sizing: border-box; padding: 10px;"><pre style="box-sizing: border-box; overflow: auto; font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: 13px; padding: 9.5px; margin-top: 0px; margin-bottom: 10px; line-height: 1.428571; word-break: break-all; overflow-wrap: break-word; background-color: rgb(245, 245, 245); border: 1px solid rgb(204, 204, 204); border-radius: 4px;">Request:
GET http://localhost:3128/squid-internal-mgr/info HTTP/1.0
Host: localhost:3128
User-Agent: squidclient/6.6
Accept: */*
Authorization: Basic YWRtaW46R09Qc3lzdGVtYWRtaW4xIQ==
Connection: close
.
HTTP/1.1 403 Forbidden
Server: squid
Mime-Version: 1.0
Date: Thu, 11 Jul 2024 17:55:05 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 3788
X-Squid-Error: ERR_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en
Cache-Status: Lee_Family.home.arpa
Cache-Status: Lee_Family.home.arpa;detail=no-cache
Connection: close
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html><head>
<meta type="copyright" content="Copyright (C) 1996-2023 The Squid Software Foundation and contributors">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>ERROR: The requested URL could not be retrieved</title>
<style type="text/css"><!--
/*
* Copyright (C) 1996-2023 The Squid Software Foundation and contributor</pre></div></div><div><br></div><div><div class="panel-heading" style="box-sizing: border-box; padding: 5px 15px; border-bottom-width: 1px; border-bottom-style: solid; border-color: rgb(214, 233, 198); border-radius: 0px; color: rgb(60, 118, 61); background-color: rgb(223, 240, 216); font-family: Roboto, sans-serif; font-size: 14px;"><h2 class="panel-title" style="box-sizing: border-box; font-family: inherit; font-weight: 500; line-height: 1.1; margin-top: 0px; margin-bottom: 0px; font-size: 16px;">Shell Output - squidclient -v -U admin -W REDACTED /squid-internal-mgr/info</h2></div><div class="panel-body" style="box-sizing: border-box; padding: 0px; caret-color: rgb(51, 51, 51); color: rgb(51, 51, 51); font-family: Roboto, sans-serif; font-size: 14px; background-color: rgb(255, 255, 255);"><div class="content" style="box-sizing: border-box; padding: 10px;"><pre style="box-sizing: border-box; overflow: auto; font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: 13px; padding: 9.5px; margin-top: 0px; margin-bottom: 10px; line-height: 1.428571; word-break: break-all; overflow-wrap: break-word; background-color: rgb(245, 245, 245); border: 1px solid rgb(204, 204, 204); border-radius: 4px;">Request:
GET /squid-internal-mgr/info HTTP/1.0
User-Agent: squidclient/6.6
Accept: */*
Authorization: Basic YWRtaW46R09Qc3lzdGVtYWRtaW4xIQ==
Connection: close
.
HTTP/1.1 403 Forbidden
Server: squid
Mime-Version: 1.0
Date: Thu, 11 Jul 2024 17:56:48 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 3788
X-Squid-Error: ERR_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en
Cache-Status: Lee_Family.home.arpa
Cache-Status: Lee_Family.home.arpa;detail=no-cache
Connection: close
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html><head>
<meta type="copyright" content="Copyright (C) 1996-2023 The Squid Software Foundation and contributors">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>ERROR: The requested URL could not be retrieved</title>
<style type="text/css"><!--
/*
* Copyright (C) 1996-2023 The Squid Software Foundation and contributors</pre></div></div></div><div>Tested both and they also failed </div><div><br><blockquote type="cite"><div>On Jul 11, 2024, at 10:27, Jonathan Lee <jonathanlee571@gmail.com> wrote:</div><br class="Apple-interchange-newline"><div><div>Thanks what about the password is it set with@ or -p where would I place that?<br>Sent from my iPhone<br><br><blockquote type="cite">On Jul 11, 2024, at 10:17, Amos Jeffries <squid3@treenet.co.nz> wrote:<br><br><br><blockquote type="cite">On 11/07/24 06:08, Alex Rousskov wrote:<br>On 2024-07-10 12:55, Jonathan Lee wrote:<br><blockquote type="cite"><blockquote type="cite">Embedding a password in a cache manager command requires providing a<br>username with -U<br></blockquote>squidclient -w /squid-internal-mgr/info -u admin<br>squidclient -w /squid-internal-mgr/info@redacted -u admin<br>squidclient -w http://192.168.1.1:3128/squid-internal-mgr/info@redacted -u admin<br>squidclient -w http://127.0.0.1:3128/squid-internal-mgr/info@redacted -u admin<br>squidclient -w http://127.0.0.1:3128/squid-internal-mgr/info<br>squidclient http://127.0.0.1:3128/squid-internal-mgr/info<br>squidclient -h 127.0.0.1:3128/squid-internal-mgr/info<br>squidclient -h 127.0.0.1 /squid-internal-mgr/info<br>squidclient -h 127.0.0.1 /squid-internal-mgr/info@redcated<br>squidclient -w 127.0.0.1 /squid-internal-mgr/info@redacted<br>squidclient -w 127.0.0.1 /squid-internal-mgr/info@redcated -u admin<br>squidclient -h 192.168.1.1:3128 /squid-internal-mgr/info@redacted<br>squidclient -h 192.168.1.1 /squid-internal-mgr/info@redacted<br>squidclient -h 192.168.1.1 /squid-internal-mgr/info<br><br>with -w -u -h http spaces I can’t get it to show me stats<br><br>Squid 6.6<br></blockquote>I do not know whether this mistake is relevant, but squidclient documentation and error message imply that you should be using "-U" (capital letter U) while you are using "-u" (small letter u).<br></blockquote><br><br>It is very relevant. As Matus already mentioned, both -U and -W.<br><br><br>squidclient -v -U admin -W cachemgr_password mgr:info<br>Request:<br>GET http://localhost:3128/squid-internal-mgr/info HTTP/1.0<br>Host: localhost:3128<br>User-Agent: squidclient/6.10<br>Accept: */*<br>Authorization: Basic YWRtaW46Y2FjaGVtZ3JfcGFzc3dvcmQ=<br>Connection: close<br><br><br>squidclient -v -U admin -W cachemgr_password /squid-internal-mgr/info<br>Request:<br>GET /squid-internal-mgr/info HTTP/1.0<br>Host: localhost:3128<br>User-Agent: squidclient/6.10<br>Accept: */*<br>Authorization: Basic YWRtaW46Y2FjaGVtZ3JfcGFzc3dvcmQ=<br>Connection: close<br><br><br>Cheers<br>Amos<br>_______________________________________________<br>squid-users mailing list<br>squid-users@lists.squid-cache.org<br>https://lists.squid-cache.org/listinfo/squid-users<br></blockquote></div></div></blockquote></div><br></div></div></blockquote></div><br></div></div></div></blockquote></div><br></div></div></div></div></blockquote></div><br></div></div></blockquote></div><br></div></body></html>