problemas com o Squid

Melikth
(usa Ubuntu)

Enviado em 27/06/2023 - 14:31h

Opa tudo certo com vocês? Então, comecei recentemente a utilizar o proxy squid mas ando tendo problemas com ele, pois quando faço uma conexão com o proxy manualmente pelo fire fox ele nao carrega a pagina, acusando problema de proxy
O código:
#### Minhas ACLs ################
acl redeinterna src 198.162.0.0/24
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
#################################
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost manager
http_access deny manager
http_access allow localhost
#### Meus HTTP_ACCESS ####
http_access allow redeinterna
########################
http_access deny all
########################
include /etc/squid/conf.d/*
http_port 3128
coredump_dir /var/spool/squid
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern \/(Packages|Sources)(|\.bz2|\.gz|\.xz)$ 0 0% 0 refresh-ims
refresh_pattern \/Release(|\.gpg)$ 0 0% 0 refresh-ims
refresh_pattern \/InRelease$ 0 0% 0 refresh-ims
refresh_pattern \/(Translation-.*)(|\.bz2|\.gz|\.xz)$ 0 0% 0 refresh-ims
refresh_pattern . 0 20% 4320
visible_hostname hostname

alexabolada
(usa Debian)

Enviado em 27/06/2023 - 14:31h

Olá, parece que pode ser um problema na definição de permissões do seu Squid.

Primeiro, revise sua lista de regras de ACL em busca de possíveis erros ou conflitos. Aqui está o trecho relevante do seu arquivo de configuração:

acl redeinterna src 198.162.0.0/24

acl SSL_ports port 443

acl Safe_ports port 80          # http

acl Safe_ports port 21          # ftp

acl Safe_ports port 443         # https

acl Safe_ports port 70          # gopher

acl Safe_ports port 210         # wais

acl Safe_ports port 1025-65535  # unregistered ports

acl Safe_ports port 280         # http-mgmt

acl Safe_ports port 488         # gss-http

acl Safe_ports port 591         # filemaker

acl Safe_ports port 777         # multiling http

acl CONNECT method CONNECT

 

Logo após, observe as regras de acesso:

http_access deny !Safe_ports

http_access deny CONNECT !SSL_ports

http_access allow localhost manager

http_access deny manager

http_access allow localhost

http_access allow redeinterna

http_access deny all

 

Se você está testando de uma rede interna que não é a "198.162.0.0/24", certifique-se de adicionar essa