How do I configure Squid Proxy located at a different location to route internet traffic?Fast EC2 micro AMI which can enable graphical remote logon?Squid 2.7.STABLE3-4.1 as a transparent proxy on Ubuntu Server 9.04Accessing Squid Proxy over internetUbuntu 9.10 and Squid 2.7 Transparent Proxy TCP_DENIEDHow do I setup squid to do just reverse proxyVPN client blocked through squid serverSquid2 on Debian 6 - No connection to the proxyTwo transparent gateway using squid return 403Squid Forward Proxy on CloudflareHTTPS Content Filtering without de-crypting traffic using squid?how to allow externall network to use my squid
A curve pass via points at TiKz
Word for being out at night during curfew
How can a Lich look like a human without magic?
Why doesn't Rocket Lab use a solid stage?
Who was this character from the Tomb of Annihilation adventure before they became a monster?
Exclude loop* snap devices from lsblk output?
How could a Lich maintain the appearance of being alive without magic?
On what legal basis did the UK remove the 'European Union' from its passport?
Early arrival in Australia, early hotel check in not available
How are one-time password generators like Google Authenticator different from having two passwords?
Reaction of borax with NaOH
Can 'sudo apt-get remove [write]' destroy my Ubuntu?
Setting the major mode of a new buffer interactively
What's the word for the soldier salute?
What is the best way for a skeleton to impersonate human without using magic?
What happens if a creature that would fight isn't on the battlefield anymore?
How does Howard Stark know this?
What does the expression "right on the tip of my tongue" mean?
Why does the Earth follow an elliptical trajectory rather than a parabolic one?
How to make a language evolve quickly?
How did Thanos not realise this had happened at the end of Endgame?
On studying Computer Science vs. Software Engineering to become a proficient coder
Can the sorting of a list be verified without comparing neighbors?
Does kinetic energy warp spacetime?
How do I configure Squid Proxy located at a different location to route internet traffic?
Fast EC2 micro AMI which can enable graphical remote logon?Squid 2.7.STABLE3-4.1 as a transparent proxy on Ubuntu Server 9.04Accessing Squid Proxy over internetUbuntu 9.10 and Squid 2.7 Transparent Proxy TCP_DENIEDHow do I setup squid to do just reverse proxyVPN client blocked through squid serverSquid2 on Debian 6 - No connection to the proxyTwo transparent gateway using squid return 403Squid Forward Proxy on CloudflareHTTPS Content Filtering without de-crypting traffic using squid?how to allow externall network to use my squid
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
I have a Linux box (Ubuntu 9.10) at a different location. I installed squid proxy and tried using that IP and port (opened 3128 at that location) in Firefox. I can't get it to work.
My current scenario :
- The current location ISP's IP is 72.87.54.XX
- Each machine in the network has the IP range 192.168.0.0/104
In /etc/squid/squid.conf : how would I configure this part in acl :
acl internal_network src 192.168.0.0/104
http_access allow internal_network
Where would I put the actual IP 72.87.54.XX in the squid.conf file to be allowed for internet traffic at the remote location?
ubuntu proxy squid access-control-list
asked Jan 4 '12 at 17:43
ThinkCodeThinkCode
151110
add a comment |
I have a Linux box (Ubuntu 9.10) at a different location. I installed squid proxy and tried using that IP and port (opened 3128 at that location) in Firefox. I can't get it to work.
My current scenario :
- The current location ISP's IP is 72.87.54.XX
- Each machine in the network has the IP range 192.168.0.0/104
In /etc/squid/squid.conf : how would I configure this part in acl :
acl internal_network src 192.168.0.0/104
http_access allow internal_network
Where would I put the actual IP 72.87.54.XX in the squid.conf file to be allowed for internet traffic at the remote location?
ubuntu proxy squid access-control-list
asked Jan 4 '12 at 17:43
ThinkCodeThinkCode
151110
1
Define 'doesn't work'. Do you get squid access denied pages or what? If you do a tcpdump on the squid box do you see the incoming requests for port 3128? What do you see in the squid cache/access logs?
– Zoredache
Jan 4 '12 at 21:19
1
BTW You know that Ubuntu 9.10 is no longer supported right? You should seriously consider updating, so you can receive security patches.
– Zoredache
Jan 4 '12 at 21:23
Yeah, we will have to place an update request for the latest version of Ubuntu. Checked the logs, I see the IP from the remote location where a test machine was used to check Squid. It worked at the remote location but not from my location. I don't get a Squid denied access page either.
– ThinkCode
Jan 4 '12 at 22:40
192.168.0.0/104 isn't a valid IPv4 address range as there are only 32 bits in the address (rather than the 104+ implied by your netmask). Is that a typo?
– Pak
Aug 9 '17 at 11:48
add a comment |
I have a Linux box (Ubuntu 9.10) at a different location. I installed squid proxy and tried using that IP and port (opened 3128 at that location) in Firefox. I can't get it to work.
My current scenario :
- The current location ISP's IP is 72.87.54.XX
- Each machine in the network has the IP range 192.168.0.0/104
In /etc/squid/squid.conf : how would I configure this part in acl :
acl internal_network src 192.168.0.0/104
http_access allow internal_network
Where would I put the actual IP 72.87.54.XX in the squid.conf file to be allowed for internet traffic at the remote location?
ubuntu proxy squid access-control-list
asked Jan 4 '12 at 17:43
ThinkCodeThinkCode
151110
I have a Linux box (Ubuntu 9.10) at a different location. I installed squid proxy and tried using that IP and port (opened 3128 at that location) in Firefox. I can't get it to work.
My current scenario :
- The current location ISP's IP is 72.87.54.XX
- Each machine in the network has the IP range 192.168.0.0/104
In /etc/squid/squid.conf : how would I configure this part in acl :
acl internal_network src 192.168.0.0/104
http_access allow internal_network
Where would I put the actual IP 72.87.54.XX in the squid.conf file to be allowed for internet traffic at the remote location?
ubuntu proxy squid access-control-list
ubuntu proxy squid access-control-list
asked Jan 4 '12 at 17:43
ThinkCodeThinkCode
151110
asked Jan 4 '12 at 17:43
ThinkCodeThinkCode
151110
asked Jan 4 '12 at 17:43
ThinkCodeThinkCode
151110
asked Jan 4 '12 at 17:43
ThinkCodeThinkCode
151110
asked Jan 4 '12 at 17:43
ThinkCodeThinkCode
151110
151110
1
Define 'doesn't work'. Do you get squid access denied pages or what? If you do a tcpdump on the squid box do you see the incoming requests for port 3128? What do you see in the squid cache/access logs?
– Zoredache
Jan 4 '12 at 21:19
1
BTW You know that Ubuntu 9.10 is no longer supported right? You should seriously consider updating, so you can receive security patches.
– Zoredache
Jan 4 '12 at 21:23
Yeah, we will have to place an update request for the latest version of Ubuntu. Checked the logs, I see the IP from the remote location where a test machine was used to check Squid. It worked at the remote location but not from my location. I don't get a Squid denied access page either.
– ThinkCode
Jan 4 '12 at 22:40
192.168.0.0/104 isn't a valid IPv4 address range as there are only 32 bits in the address (rather than the 104+ implied by your netmask). Is that a typo?
– Pak
Aug 9 '17 at 11:48
add a comment |
1
Define 'doesn't work'. Do you get squid access denied pages or what? If you do a tcpdump on the squid box do you see the incoming requests for port 3128? What do you see in the squid cache/access logs?
– Zoredache
Jan 4 '12 at 21:19
1
BTW You know that Ubuntu 9.10 is no longer supported right? You should seriously consider updating, so you can receive security patches.
– Zoredache
Jan 4 '12 at 21:23
Yeah, we will have to place an update request for the latest version of Ubuntu. Checked the logs, I see the IP from the remote location where a test machine was used to check Squid. It worked at the remote location but not from my location. I don't get a Squid denied access page either.
– ThinkCode
Jan 4 '12 at 22:40
192.168.0.0/104 isn't a valid IPv4 address range as there are only 32 bits in the address (rather than the 104+ implied by your netmask). Is that a typo?
– Pak
Aug 9 '17 at 11:48
1
1
Define 'doesn't work'. Do you get squid access denied pages or what? If you do a tcpdump on the squid box do you see the incoming requests for port 3128? What do you see in the squid cache/access logs?
– Zoredache
Jan 4 '12 at 21:19
Define 'doesn't work'. Do you get squid access denied pages or what? If you do a tcpdump on the squid box do you see the incoming requests for port 3128? What do you see in the squid cache/access logs?
– Zoredache
Jan 4 '12 at 21:19
1
1
BTW You know that Ubuntu 9.10 is no longer supported right? You should seriously consider updating, so you can receive security patches.
– Zoredache
Jan 4 '12 at 21:23
BTW You know that Ubuntu 9.10 is no longer supported right? You should seriously consider updating, so you can receive security patches.
– Zoredache
Jan 4 '12 at 21:23
Yeah, we will have to place an update request for the latest version of Ubuntu. Checked the logs, I see the IP from the remote location where a test machine was used to check Squid. It worked at the remote location but not from my location. I don't get a Squid denied access page either.
– ThinkCode
Jan 4 '12 at 22:40
Yeah, we will have to place an update request for the latest version of Ubuntu. Checked the logs, I see the IP from the remote location where a test machine was used to check Squid. It worked at the remote location but not from my location. I don't get a Squid denied access page either.
– ThinkCode
Jan 4 '12 at 22:40
192.168.0.0/104 isn't a valid IPv4 address range as there are only 32 bits in the address (rather than the 104+ implied by your netmask). Is that a typo?
– Pak
Aug 9 '17 at 11:48
192.168.0.0/104 isn't a valid IPv4 address range as there are only 32 bits in the address (rather than the 104+ implied by your netmask). Is that a typo?
– Pak
Aug 9 '17 at 11:48
add a comment |
1 Answer
1
active
oldest
votes
You will want an extra couple of lines like this:
acl office_network src 72.87.54.0/104
http_access allow office_network
The name "office_network" is arbitrary and should match whatever makes sense for what the IP addresses are used for.
The /104 is not what I'm used to seeing. This is normally /24 which represents an IPv4 netmask covering the first three octets and leaving the last one free.
answered Jan 4 '12 at 17:51
LadadadadaLadadadada
22.1k54881
Actually, on reading your question again, I'm not sure which of the IP addresses is the Squid server and which is your office. Could you clarify?
– Ladadadada
Jan 4 '12 at 17:52
Squid server has a different IP like 31.101.xx.xx port 3128 open. My office : Comcast's IP is 72.87.54.xx. I thought 72.87.54.0/104 is supposed to be the range. 24 makes sense. Will try...
– ThinkCode
Jan 4 '12 at 17:54
This didn't work either :( I am kinda lost on the config file!
– ThinkCode
Jan 4 '12 at 18:06
Does your firewall allow inbound connections from 72.87.54.0/24 on port 3128?
– Exsisto
Jan 14 '16 at 9:04
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f346600%2fhow-do-i-configure-squid-proxy-located-at-a-different-location-to-route-internet%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
You will want an extra couple of lines like this:
acl office_network src 72.87.54.0/104
http_access allow office_network
The name "office_network" is arbitrary and should match whatever makes sense for what the IP addresses are used for.
The /104 is not what I'm used to seeing. This is normally /24 which represents an IPv4 netmask covering the first three octets and leaving the last one free.
answered Jan 4 '12 at 17:51
LadadadadaLadadadada
22.1k54881
Actually, on reading your question again, I'm not sure which of the IP addresses is the Squid server and which is your office. Could you clarify?
– Ladadadada
Jan 4 '12 at 17:52
Squid server has a different IP like 31.101.xx.xx port 3128 open. My office : Comcast's IP is 72.87.54.xx. I thought 72.87.54.0/104 is supposed to be the range. 24 makes sense. Will try...
– ThinkCode
Jan 4 '12 at 17:54
This didn't work either :( I am kinda lost on the config file!
– ThinkCode
Jan 4 '12 at 18:06
Does your firewall allow inbound connections from 72.87.54.0/24 on port 3128?
– Exsisto
Jan 14 '16 at 9:04
add a comment |
You will want an extra couple of lines like this:
acl office_network src 72.87.54.0/104
http_access allow office_network
The name "office_network" is arbitrary and should match whatever makes sense for what the IP addresses are used for.
The /104 is not what I'm used to seeing. This is normally /24 which represents an IPv4 netmask covering the first three octets and leaving the last one free.
answered Jan 4 '12 at 17:51
LadadadadaLadadadada
22.1k54881
Actually, on reading your question again, I'm not sure which of the IP addresses is the Squid server and which is your office. Could you clarify?
– Ladadadada
Jan 4 '12 at 17:52
Squid server has a different IP like 31.101.xx.xx port 3128 open. My office : Comcast's IP is 72.87.54.xx. I thought 72.87.54.0/104 is supposed to be the range. 24 makes sense. Will try...
– ThinkCode
Jan 4 '12 at 17:54
This didn't work either :( I am kinda lost on the config file!
– ThinkCode
Jan 4 '12 at 18:06
Does your firewall allow inbound connections from 72.87.54.0/24 on port 3128?
– Exsisto
Jan 14 '16 at 9:04
add a comment |
You will want an extra couple of lines like this:
acl office_network src 72.87.54.0/104
http_access allow office_network
The name "office_network" is arbitrary and should match whatever makes sense for what the IP addresses are used for.
The /104 is not what I'm used to seeing. This is normally /24 which represents an IPv4 netmask covering the first three octets and leaving the last one free.
answered Jan 4 '12 at 17:51
LadadadadaLadadadada
22.1k54881
You will want an extra couple of lines like this:
acl office_network src 72.87.54.0/104
http_access allow office_network
The name "office_network" is arbitrary and should match whatever makes sense for what the IP addresses are used for.
The /104 is not what I'm used to seeing. This is normally /24 which represents an IPv4 netmask covering the first three octets and leaving the last one free.
answered Jan 4 '12 at 17:51
LadadadadaLadadadada
22.1k54881
answered Jan 4 '12 at 17:51
LadadadadaLadadadada
22.1k54881
answered Jan 4 '12 at 17:51
LadadadadaLadadadada
22.1k54881
answered Jan 4 '12 at 17:51
LadadadadaLadadadada
22.1k54881
22.1k54881
Actually, on reading your question again, I'm not sure which of the IP addresses is the Squid server and which is your office. Could you clarify?
– Ladadadada
Jan 4 '12 at 17:52
Squid server has a different IP like 31.101.xx.xx port 3128 open. My office : Comcast's IP is 72.87.54.xx. I thought 72.87.54.0/104 is supposed to be the range. 24 makes sense. Will try...
– ThinkCode
Jan 4 '12 at 17:54
This didn't work either :( I am kinda lost on the config file!
– ThinkCode
Jan 4 '12 at 18:06
Does your firewall allow inbound connections from 72.87.54.0/24 on port 3128?
– Exsisto
Jan 14 '16 at 9:04
add a comment |
Actually, on reading your question again, I'm not sure which of the IP addresses is the Squid server and which is your office. Could you clarify?
– Ladadadada
Jan 4 '12 at 17:52
Squid server has a different IP like 31.101.xx.xx port 3128 open. My office : Comcast's IP is 72.87.54.xx. I thought 72.87.54.0/104 is supposed to be the range. 24 makes sense. Will try...
– ThinkCode
Jan 4 '12 at 17:54
This didn't work either :( I am kinda lost on the config file!
– ThinkCode
Jan 4 '12 at 18:06
Does your firewall allow inbound connections from 72.87.54.0/24 on port 3128?
– Exsisto
Jan 14 '16 at 9:04
Actually, on reading your question again, I'm not sure which of the IP addresses is the Squid server and which is your office. Could you clarify?
– Ladadadada
Jan 4 '12 at 17:52
Actually, on reading your question again, I'm not sure which of the IP addresses is the Squid server and which is your office. Could you clarify?
– Ladadadada
Jan 4 '12 at 17:52
Squid server has a different IP like 31.101.xx.xx port 3128 open. My office : Comcast's IP is 72.87.54.xx. I thought 72.87.54.0/104 is supposed to be the range. 24 makes sense. Will try...
– ThinkCode
Jan 4 '12 at 17:54
Squid server has a different IP like 31.101.xx.xx port 3128 open. My office : Comcast's IP is 72.87.54.xx. I thought 72.87.54.0/104 is supposed to be the range. 24 makes sense. Will try...
– ThinkCode
Jan 4 '12 at 17:54
This didn't work either :( I am kinda lost on the config file!
– ThinkCode
Jan 4 '12 at 18:06
This didn't work either :( I am kinda lost on the config file!
– ThinkCode
Jan 4 '12 at 18:06
Does your firewall allow inbound connections from 72.87.54.0/24 on port 3128?
– Exsisto
Jan 14 '16 at 9:04
Does your firewall allow inbound connections from 72.87.54.0/24 on port 3128?
– Exsisto
Jan 14 '16 at 9:04
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f346600%2fhow-do-i-configure-squid-proxy-located-at-a-different-location-to-route-internet%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1
Define 'doesn't work'. Do you get squid access denied pages or what? If you do a tcpdump on the squid box do you see the incoming requests for port 3128? What do you see in the squid cache/access logs?
– Zoredache
Jan 4 '12 at 21:19
1
BTW You know that Ubuntu 9.10 is no longer supported right? You should seriously consider updating, so you can receive security patches.
– Zoredache
Jan 4 '12 at 21:23
Yeah, we will have to place an update request for the latest version of Ubuntu. Checked the logs, I see the IP from the remote location where a test machine was used to check Squid. It worked at the remote location but not from my location. I don't get a Squid denied access page either.
– ThinkCode
Jan 4 '12 at 22:40
192.168.0.0/104 isn't a valid IPv4 address range as there are only 32 bits in the address (rather than the 104+ implied by your netmask). Is that a typo?
– Pak
Aug 9 '17 at 11:48