Squid Proxy Server Problems

**unixgurus** · 07-08-2009

Hi,

Im using debian etch 4.0. I runing Squid Proxy Server on my dedicated server. Because of first time i installing it. Im confiusing why when im try it on browser it re-direct back to my website.

IP: 77.92.87.175 Port: 3128

Anyone can help?

Thanks!

-= Debiano =-

**paulkoan** · 07-09-2009

I am guessing it isn't running correctly.

Try

Code:

netstat -ant | grep 3128

and you should see 0.0.0.0:3128

**unixgurus** · 07-10-2009

Thanks for reply bro.. Howto fix it?

[root@unixguru] null $ netstat -ant | grep 3128
tcp6 0 0 :::3128 :::* LISTEN
tcp6 0 12161 ::ffff:83.170.115.:3128 ::ffff:203.121.44.:2004 FIN_WAIT1
tcp6 0 12161 ::ffff:83.170.115.:3128 ::ffff:203.121.44.:1811 FIN_WAIT1

[root@unixguru] null $ cat /etc/squid/squid.conf | sed '/ *#/d; /^ *$/d'
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl purge method PURGE
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access deny all
http_reply_access allow all
icp_access allow all
coredump_dir /var/cache/squid
never_direct allow Safe_ports
http_port 3128
cache_peer 192.168.0.1 parent 3128 3130
header_access via allow all
header_access from allow all
forwarded_for on
access_log /var/log/squid/access_log_v3
cache_access_log /var/log/squid/cache_acces_log_v3
cache_mem 64 MB
[root@unixguru] null $

**paulkoan** · 07-10-2009

Hello..

It looks like you aren't listening on ip4 at all, just ip6.

But your access list only allows access from the localhost. :

Code:

http_access allow localhost
http_access deny all

Who do you want to be able to access your squid server? Having an open proxy isn't a good idea unless this is your intention. Then change the last line to "allow all"

Otherwise you would do something like:

Code:

acl mynetworks src  200.200.200.0/24
http_access allow localhost
http_access allow mynetworks
http_access deny all

**unixgurus** · 07-10-2009

Thanks Paul,

Who do you want to be able to access your squid server?
-> Anyone..thanks for your advise.

I did some change here.. but it's still fowarded to myweb.

[root@unixguru] null $ cat /etc/squid/squid.conf | sed '/ *#/d; /^ *$/d'
acl all src all
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl SSL_ports port 443 563
acl purge method PURGE
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access allow all
http_reply_access allow all
icp_access allow all
coredump_dir /var/cache/squid
http_port 3128
cache_peer 77.92.87.41 parent 3128 3130
forwarded_for on
access_log /var/log/squid/access_log_v3
cache_access_log /var/log/squid/cache_acces_log_v3
cache_mem 64 MB
[root@unixguru] null $

**paulkoan** · 07-10-2009

It looks like your apache server is listening on 3128:

Code:

telnet 77.92.87.175 3128
Trying 77.92.87.175...
Connected to 77.92.87.175.
Escape character is '^]'.
helo
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>501 Method Not Implemented</title>
</head><body>
<h1>Method Not Implemented</h1>
<p>helo to /index.html not supported.<br />
</p>
<hr>
<address>Apache/2.2.3 (Debian) mod_python/3.2.10 Python/2.4.4 PHP/5.2.0-8+etch15 mod_ssl/2.2.3 OpenSSL/0.9.8c mod_perl/2.0.2 Perl/v5.8.8 Server at unixguru.asia Port 80</address>
</body></html>
Connection closed by foreign host.

You may find something in the squid logs to this effect, that it isn't able to bind to 3128 because something else already has it.

Which is weird, because it doesn't show in the netstat command.

It should look like this:

Code:

tcp        0      0 0.0.0.0:3128            0.0.0.0:*               LISTEN

**paulkoan** · 07-10-2009

Actually, if you do netstat -pant as root, you'll see who owns the ports:

Code:

tcp        0      0 0.0.0.0:3128            0.0.0.0:*               LISTEN     7062/(squid)

**unixgurus** · 07-10-2009

Maybe it's there on ports.conf . I have remove it from there : Listen 3128

It's okay if i remove from there? but now Internet Explorer cannot display the webpage

[root@unixguru] apache2 $ pico ports.conf
[root@unixguru] apache2 $ /etc/init.d/apache2
Usage: /etc/init.d/apache2 {start|stop|restart|reload|force-reload}
[root@unixguru] apache2 $ /etc/init.d/apache2 restart
Forcing reload of web server (apache2)... waiting .
[root@unixguru] apache2 $ netstat -ant | grep 3128
tcp6 0 12161 ::ffff:83.170.115.:3128 ::ffff:203.121.44.:2004 FIN_WAIT1
tcp6 0 12161 ::ffff:83.170.115.:3128 ::ffff:203.121.44.:1811 FIN_WAIT1
[root@unixguru] apache2 $

**paulkoan** · 07-10-2009

Ok, so this is a different problem: "Why can't internet exporer see your site when apache is not listening on 3128?"

When you say ie cannot get to the site, is this without any proxy settings defined?

**unixgurus** · 07-10-2009

Okay.. now it's working thanks for help and info :

Che3rS!

Thread Tools

Display

Squid Proxy Server Problems

Posting Permissions