Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm trying to configure Squid3 proxy server that any IP address on the internet can access, but default settings horrible and whatever I do it keeps giving TCP_DENIED/403

What's the minimum config that enables me:

  • Any IP address can access
  • All out ports are accessible
  • SSL + CONNECT enabled

I'll then start implementing further features, however right now I keep getting this error in all configurations I've tried.

share|improve this question
5  
This sounds like a Really Bad Idea. And I'm having a lot of difficulty coming up with a scenario where we might do this in a professional environment. –  Michael Hampton Jun 10 '13 at 17:29
    
Does ServerFault require that all questions relate to a professional environment? –  Paul Gear Jun 14 '13 at 0:24
    
@PaulGear serverfault.com/help/on-topic - so, yes. –  Nathan C Jun 16 '13 at 22:23
    
Fair enough. That reduces the likelihood that this is on-topic. ;-) –  Paul Gear Jun 17 '13 at 6:53
1  
@MichaelHampton "Professionals" can't run proxy businesses now? –  TheLQ Jun 17 '13 at 17:16

2 Answers 2

up vote 3 down vote accepted
+100

Although a Really Bad Idea™, just add acl all src all to the top of your ACL list.

Again, this is not a good idea whatsoever.

share|improve this answer

Like the other posters, i'm going to call this a bad idea until proven otherwise (although i can think of a couple of good reasons to do it).

Instead of the acl suggested by Nathan C i'd suggest:

  • http_access allow all (instead of http_access deny all, which is the default)
  • acl Safe_ports port 1-65535 (instead of the Safe_ports entries in the default config)
  • acl SSL_ports port 1-65535 (instead of the SSL_ports entries in the default config)
  • If you're trying to create an anonymised service, set forwarded_for off and via off.

Again, do you really want to do this?

share|improve this answer
    
well, he is dr evil.. –  NickW Jun 18 '13 at 9:48

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.