6

I'm trying to configure Squid3 proxy server that any IP address on the internet can access, but default settings horrible and whatever I do it keeps giving TCP_DENIED/403

What's the minimum config that enables me:

  • Any IP address can access
  • All out ports are accessible
  • SSL + CONNECT enabled

I'll then start implementing further features, however right now I keep getting this error in all configurations I've tried.

Improve this question
7
  • 5
    This sounds like a Really Bad Idea. And I'm having a lot of difficulty coming up with a scenario where we might do this in a professional environment.
    – Michael Hampton
    Jun 10, 2013 at 17:29
  • 2
    Does ServerFault require that all questions relate to a professional environment?
    – Paul Gear
    Jun 14, 2013 at 0:24
  • @PaulGear serverfault.com/help/on-topic - so, yes.
    – Nathan C
    Jun 16, 2013 at 22:23
  • Fair enough. That reduces the likelihood that this is on-topic. ;-)
    – Paul Gear
    Jun 17, 2013 at 6:53
  • 2
    @MichaelHampton "Professionals" can't run proxy businesses now?
    – TheLQ
    Jun 17, 2013 at 17:16

2 Answers 2

Reset to default
9
+100

Although a Really Bad Idea™, just add acl all src all to the top of your ACL list.

Again, this is not a good idea whatsoever.

Improve this answer
7

Like the other posters, i'm going to call this a bad idea until proven otherwise (although i can think of a couple of good reasons to do it).

Instead of the acl suggested by Nathan C i'd suggest:

  • http_access allow all (instead of http_access deny all, which is the default)
  • acl Safe_ports port 1-65535 (instead of the Safe_ports entries in the default config)
  • acl SSL_ports port 1-65535 (instead of the SSL_ports entries in the default config)
  • If you're trying to create an anonymised service, set forwarded_for off and via off.

Again, do you really want to do this?

Improve this answer
1
  • 4
    well, he is dr evil..
    – NickW
    Jun 18, 2013 at 9:48

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .