[squid-users] Webpages won't load or load slowly

Rich549 Richard.Aspley at hammonds-uk.com
Thu Jan 29 14:48:52 UTC 2015


Cool, that's the bit I was looking at so I'll follow that, thanks.

I've made the suggested changes to my security but I'm getting the following
error when I run reconfigure:

2015/01/29 14:50:37| aclParseAclList: ACL name '%LOGIN' not found.
FATAL: Bungled /etc/squid3/squid.conf line 312: http_access deny %LOGIN
Squid Cache (Version 3.3.8): Terminated abnormally.
CPU Usage: 0.014 seconds = 0.014 user + 0.000 sys
Maximum Resident Size: 21984 KB
Page faults with physical i/o: 0

My security now looks like this:

# ------------------------------------------------
# ------ Permit/Deny access as appropriate -------
# ------------------------------------------------

refresh_pattern -i (/cgi-bin/|\?) 0 0% 0     
refresh_pattern ^ftp:		1440	20%	10080
refresh_pattern ^gopher:	1440	0%	1440
refresh_pattern .		0	20%	4320
shutdown_lifetime 10 seconds
acl SSL_ports port 443 563 21
acl Safe_ports port 80		# http
acl Safe_ports port 21  	# ftp
acl Safe_ports port 22		# sftp
acl Safe_ports port 443 563	# https, snews
acl Safe_ports port 70		# gopher
acl Safe_ports port 210		# wais
acl Safe_ports port 1025-65535	# unregistered ports
acl Safe_ports port 280		# http-mgmt
acl Safe_ports port 488		# gss-http
acl Safe_ports port 591		# filemaker
acl Safe_ports port 777		# multiling http
acl Safe_ports port 4004	# Radii website download site uses this port
acl Safe_ports port 10000	# Webmin
acl Safe_ports port 900		# Swat
acl Safe_ports port 82		# Pacejet request - test site hosted on HTTP 82
acl Safe_ports port 81		# Image plus test server (hepplewhite)

acl CONNECT method CONNECT

http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

http_access deny BlacklistedSites StoresAllow

http_access allow OK_Unauthenticated
http_access allow StaticIPWhitelist

acl auth proxy_auth REQUIRED
http_access deny %LOGIN

http_access allow InetAllow
http_access allow StoresAllow

http_access allow localhost manager
http_access deny all

acl ftp proto FTP
#http_access allow ftp
#http_access allow CONNECT Safe_ports
http_access deny manager
http_reply_access allow all
icp_access allow all
cache_mgr otrs at hammonds-uk.com
forwarded_for off


Sorry for all of the questions...



--
View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Webpages-won-t-load-or-load-slowly-tp4669408p4669419.html
Sent from the Squid - Users mailing list archive at Nabble.com.


More information about the squid-users mailing list