Squid refuses all websites when creating proxy server

http proxy squid http-proxy
Matt picture Matt · Nov 8, 2015 · Viewed 20.5k times · Source

so I'm trying to create a proxy server for my crawler to use, and I'm unsure about why I'm getting denied from even myself. When I go to any website in a browser, on the computer that I've installed Squid and everything on, it's giving me the following error message:

ERROR

The requested URL could not be retrieved

While trying to retrieve the URL: http://www.whatismyipaddress.com/

The following error was encountered:

Access Denied.
Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect.

Your cache administrator is webmaster. 
Generated Sun, 08 Nov 2015 04:03:13 GMT by WIN-AIUOBK0JHPA (squid/2.7.STABLE8)

I've edited my LAN settings in Internet Options to allow for a proxy server at the correct IP address (IPv4 when I run ipconfig), gave it the correct port to open up to, and I've also opened up the port in my Windows Firewall.

Below are segments of my squid.conf file:

acl SSL_ports port 443
acl Safe_ports port 80      # http
acl Safe_ports port 21      # ftp
acl Safe_ports port 443     # https
acl Safe_ports port 70      # gopher
acl Safe_ports port 210     # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280     # http-mgmt
acl Safe_ports port 488     # gss-http
acl Safe_ports port 591     # filemaker
acl Safe_ports port 777     # multiling http
acl CONNECT method CONNECT

acl localhost src 192.168.1.0/255.255.255.255 
http_access allow localhost

(skip through some commented out segments....)

http_access allow manager localhost

http_access allow localnet

As you can tell, I've stripped out a lot of unnecessary commented parts. Down lower, I have my...

http_port ####

...line.

I have no idea why I'm getting blocked out. I will be constantly refreshing, so if you need any more information or have any questions, please let me know. Thank you so much!!

Answer

Share_Improve picture Share_Improve · Nov 20, 2015

your config should somewhat look like below

http_access allow localhost 
http_access allow localnet 
# And finally deny all other access to this proxy 
http_access deny all

and remove the following line from your config

acl localhost src 192.168.1.0/255.255.255.255

localhost need not to be specified as ACL its just for accessing localhost pages. You have mixed up localhost with localnet, modify that line like below

acl localnet src 192.168.1.0/255.255.255.255

your lan clients local ip that hitting the proxy should belong to the above mentioned src range or modify the range as you require. all other requests from other ips will be denied

Related questions

squid proxy - howto allow tcp connect - getting TCP_DENIAL/400 with ERR_INVALID_DOMAIN

I'm having a device which needs to connect to an internet service on tcp:80 but the network has no direct internet access. So I'm using a squid proxy to solve this. The device allows me to enter proxyserver, port, username …

Read More
How to use HttpClientBuilder with Http proxy?

I am trying to set proxy for a request I am making using HttpClientBuilder as follows: CredentialsProvider credsProvider = new BasicCredentialsProvider(); UsernamePasswordCredentials usernamePasswordCredentials = new UsernamePasswordCredentials(proxyUser, proxyPassword); credsProvider.setCredentials(new AuthScope(proxyHost, proxyPort), usernamePasswordCredentials); builder.useSystemProperties(); builder.setProxy(new HttpHost(proxyHost, …

Read More
How do I make HttpURLConnection use a proxy?

If I do this... conn = new URL(urlString).openConnection(); System.out.println("Proxy? " + conn.usingProxy()); it prints Proxy? false The problem is, I am behind a proxy. Where does the JVM get its proxy information from on Windows? How do …

Read More