squid port 443 problem.

Discussion in 'HOWTO-Related Questions' started by abid, Mar 25, 2009.

  1. abid

    abid New Member

    hi i am using ubuntu 8.10 squid 2.6 stable but my squid server not forword 443 port request here is my squid.conf please help me in this regrad.


    acl mynet url_regex -i .exe .mp3 .vqf .tar.gz .gz .rpm .zip .rar .avi .mpeg .mpe .mpg .qt .ram .rm .iso .raw .wav .mov .asf .wma .psf .cab .flv

    # WELCOME TO SQUID 2
    # ------------------
    #

    acl mac arp "/etc/squid/allow.dat"
    http_access allow mac

    acl blockfiles urlpath_regex "/etc/squid/blocks.files.acl"
    #deny_info ERR_BLOCKED_FILES blockfiles
    http_access deny blockfiles

    # NETWORK OPTIONS

    http_port 172.16.1.5:8888
    cache_peer 10.11.0.11 parent 8080 0 proxy-only
    cache_access_log /var/log/squid/access.log
    cache_log /var/log/squid/cache.log

    hosts_file /etc/hosts


    refresh_pattern ^ftp: 1440 20% 10080
    refresh_pattern ^gopher: 1440 0% 1440
    refresh_pattern . 0 20% 4320


    # TIMEOUTS

    ####################################################################
    acl blockeddomain dstdomain "/etc/squid/blocked.domains.acl"
    http_access deny blockeddomain
    ###########################################################################
    acl deny_rep_mime_flashvideo rep_mime_type video/flv
    http_reply_access deny deny_rep_mime_flashvideo

    #************************************************************************
    acl www.orkut.com dstdomain .orkut.com
    http_access deny www.orkut.com
    acl www.facebook.com dstdomain .facebook.com
    http_access deny www.facebook.com
    acl www.youtube.com dstdomain .youtube.com
    http_access deny www.youtube.com

    #***************************************************************************************
    #acl javascript rep_mime_type -i ^application/x-javascript$

    #Recommended minimum configuration:
    acl all src 0.0.0.0/0.0.0.0
    acl manager proto cache_object
    acl localhost src 127.0.0.1/255.255.255.255
    acl to_localhost dst 127.0.0.0/8
    acl SSL_ports port 443 563 # https, snews
    acl SSL_ports port 873 # rsync
    acl Safe_ports port 80 # http
    acl Safe_ports port 21 # ftp
    acl Safe_ports port 443 563 # https, snews
    acl Safe_ports port 70 # gopher
    acl Safe_ports port 210 # wais
    acl Safe_ports port 1025-65535 # unregistered ports
    acl Safe_ports port 280 # http-mgmt
    acl Safe_ports port 488 # gss-http
    acl Safe_ports port 591 # filemaker
    acl Safe_ports port 777 # multiling http
    acl Safe_ports port 631 # cups
    acl Safe_ports port 873 # rsync
    acl Safe_ports port 901 # SWAT
    acl purge method PURGE
    acl CONNECT method CONNECT



    http_access deny all
    http_access allow manager localhost
    http_access deny manager
    http_access allow purge localhost
    http_access deny purge
    http_access deny Safe_ports
    http_access deny CONNECT !SSL_ports
    http_access allow localhost
    http_reply_access allow all
    icp_access allow all


    cache_mgr admincse
    coredump_dir /var/spool/squid
    #####################################################################
    memory_pools on
    client_db on
    netdb_low 900
    netdb_high 1000
    wccp_version 4

    ie_refresh on
    dns_nameservers 10.11.0.3

    # Refresh Pateren Default:
    # ------------------------------------------------------------------
    # ------------------------------------------------------------------------

    negative_ttl 1 minutes
    positive_dns_ttl 24 hours
    negative_dns_ttl 1 minutes
    range_offset_limit 0 KB
    connect_timeout 2 minutes
    client_lifetime 1 day
    half_closed_clients on
    ###############################################################################

    delay_pools 1
    delay_class 1 3
    delay_parameters 1 -1/-1 -1/-1 8000/12000
    delay_access 1 allow mynet
    delay_initial_bucket_level 100
     
  2. falko

    falko Super Moderator

Share This Page