[squid-users] TCP_DENIED/403

[Filip Maroul]

Hello I am try to configure squid3 on debian 8 x64 version of squid is 3.4.8
Here is the conf file:
http_port 3128
hierarchy_stoplist cgi-bin ?

visible_hostname proxy.HlubinaMysleni.42.local
append_domain .HlubinaMysleni.42.local

refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
refresh_pattern .               0       20%     4320

acl LAN src 192.168.6.0/24 # RFC 1918 possible internal network

acl SSL_ports port 443          # https

acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl Safe_ports port 8081 8443 8834

acl CONNECT method CONNECT

http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost manager
http_access deny manager
http_access allow LAN
http_access deny to_localhost
http_access allow localhost
http_access deny all

cache_dir ufs /mnt/ext-hdd/squid_cache 7000 16 256
cache_mem 1 GB
maximum_object_size_in_memory 128 kb
cache_replacement_policy heap GDSF

Here is the error from access.log

1444892270.564      0 192.168.6.22 TCP_DENIED/403 421 GET
http://seznam.cz/favicon.ico - HIER_NONE/- text/html
1444892297.082      0 192.168.6.22 TAG_NONE/400 3604 OPTIONS / -
HIER_NONE/- text/html
1444892338.576      0 192.168.6.22 TCP_DENIED/403 3731 CONNECT
clients2.google.com:443 - HIER_NONE/- text/html
1444892418.099      0 192.168.6.22 TCP_DENIED/403 421 GET
http://seznam.cz/ - HIER_NONE/- text/html
1444892418.125      0 192.168.6.22 TCP_DENIED/403 421 GET
http://seznam.cz/favicon.ico - HIER_NONE/- text/html
1444892419.978      0 192.168.6.22 TCP_DENIED/403 421 GET
http://seznam.cz/ - HIER_NONE/- text/html
1444892420.007      0 192.168.6.22 TCP_DENIED/403 421 GET
http://seznam.cz/favicon.ico - HIER_NONE/- text/html
1444892421.259      0 192.168.6.22 TCP_DENIED/403 421 GET
http://seznam.cz/ - HIER_NONE/- text/html
1444892421.284      0 192.168.6.22 TCP_DENIED/403 421 GET
http://seznam.cz/favicon.ico - HIER_NONE/- text/html
1444892597.190      0 192.168.6.22 TAG_NONE/400 3604 OPTIONS / -
HIER_NONE/- text/html
1444893092.284      0 192.168.6.22 TCP_DENIED/403 421 GET
http://seznam.cz/ - HIER_NONE/- text/html
1444893092.313      0 192.168.6.22 TCP_DENIED/403 421 GET
http://seznam.cz/favicon.ico - HIER_NONE/- text/html
1444893197.178      0 192.168.6.22 TAG_NONE/400 3604 OPTIONS / -
HIER_NONE/- text/html
1444893281.370      0 192.168.6.22 TCP_DENIED/403 421 GET
http://seznam.cz/ - HIER_NONE/- text/html
1444893281.403      0 192.168.6.22 TCP_DENIED/403 421 GET
http://seznam.cz/favicon.ico - HIER_NONE/- text/html
1444893341.741      0 192.168.6.22 TCP_DENIED/403 3731 CONNECT
clients2.google.com:443 - HIER_NONE/- text/html
1444893434.576      0 192.168.6.22 TCP_DENIED/403 421 GET
http://seznam.cz/ - HIER_NONE/- text/html
1444893434.603      0 192.168.6.22 TCP_DENIED/403 421 GET
http://seznam.cz/favicon.ico - HIER_NONE/- text/html
1444893497.292      0 192.168.6.22 TAG_NONE/400 3604 OPTIONS / -
HIER_NONE/- text/html
1444893797.287      0 192.168.6.22 TAG_NONE/400 3604 OPTIONS / -
HIER_NONE/- text/html

How can I fix it.

Thank you for any repply.



--
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20151015/2cc1d451/attachment.html>