Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I create an instance using the ubuntu AMI 12.04 server 64bit and install squid3.

The only changed to the /etc/squid3/squid.conf file was:

acl localhost src ::1


acl localhost src ::1 MY_IP_ADDRESS

and I can't use the squid from MY_IP_ADDRESS. Any idea what the problem is? What other thing I must change? I can connect using telnet to the 3128 port perfectly and when I type some garbage and type ENTER squid reply some HTML and log the following:

1336796623.133 0 MY_IP_ADDRESS NONE/400 4016 NONE error:invalid-request - NONE/- text/html

so no firewall problem neither squid.conf syntax error.

share|improve this question
What happens when you try and used the proxy, what messages do you get back. Anything in the squid logs? Anything in the server logs? Anything in the client side logs? – EightBitTony May 12 '12 at 17:29
@EightBitTony Thank Nothing in the squid log, and the browser just said that it connected in the status bar but nothing more. I change the debug_options ALL,1 per debug_options ALL,3 and in cache.log appear some messages related to the request, but nothing seem to be wrong. Is a really strange error. Would be nice if someone can try to reproduce it on EC2, that will just take 5min and will safe me hours or who know if days. I had spent about two days already in this issues and nothing works. – gsi-frank May 12 '12 at 17:54
Beside, the netstat -putan show connection active from my IP and as I already said, when I increase the debug level of the squid, he put things in cache.log that confirm me that he get the request. – gsi-frank May 12 '12 at 17:56

You need to check squid access log file and if you see a line that shows 'TCP/DENIED', you may need to make sure you really changed the right configuration file and you reloaded/restarted squid process.

share|improve this answer
Thanks. My access.log don't show anything, browser said connected but don't go far. Ubuntu default squid.conf file is prepared to allow access from localhost IPs, and I just add my IP to that list. In fact, I copied the same conf file to a virtual machine in my laptop and all work fine. cache.log don't show anything useful neither, and as I said in other comments, just show something when I change the debug level. – gsi-frank May 13 '12 at 3:05
@frankabel: Are you sure you configured the proxy server in your browser in the correct way? You can try also to run a packet capture to see what is going on. – Khaled May 13 '12 at 7:17
Yes, I'm sure, as I said, my cache.log put some messages after raise the debug level from 1 to 3, but nothing that I can understand. Other guys at test and all is fine, so as they said, seem to be a ISP problem, I will test using tunnels and write here. I think that can be important know that some ISP are blocking outside squid connections in a sophisticate way, cos as I said, port 3128 is open and my browser connected and squid sent realize of the connection. Thanks again. – gsi-frank May 13 '12 at 13:43

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.