6

I'm trying to configure Squid3 proxy server that any IP address on the internet can access, but default settings horrible and whatever I do it keeps giving TCP_DENIED/403

What's the minimum config that enables me:

  • Any IP address can access
  • All out ports are accessible
  • SSL + CONNECT enabled

I'll then start implementing further features, however right now I keep getting this error in all configurations I've tried.

Improve this question
7
  • 5
    This sounds like a Really Bad Idea. And I'm having a lot of difficulty coming up with a scenario where we might do this in a professional environment.
    – Michael Hampton
    Jun 10, 2013 at 17:29
  • 2
    Does ServerFault require that all questions relate to a professional environment?
    – Paul Gear
    Jun 14, 2013 at 0:24
  • @PaulGear serverfault.com/help/on-topic - so, yes.
    – Nathan C
    Jun 16, 2013 at 22:23
  • Fair enough. That reduces the likelihood that this is on-topic. ;-)
    – Paul Gear
    Jun 17, 2013 at 6:53
  • 2
    @MichaelHampton "Professionals" can't run proxy businesses now?
    – TheLQ
    Jun 17, 2013 at 17:16

2 Answers 2

Reset to default
9
+100

Although a Really Bad Idea™, just add acl all src all to the top of your ACL list.

Again, this is not a good idea whatsoever.

Improve this answer
7

Like the other posters, i'm going to call this a bad idea until proven otherwise (although i can think of a couple of good reasons to do it).

Instead of the acl suggested by Nathan C i'd suggest:

  • http_access allow all (instead of http_access deny all, which is the default)
  • acl Safe_ports port 1-65535 (instead of the Safe_ports entries in the default config)
  • acl SSL_ports port 1-65535 (instead of the SSL_ports entries in the default config)
  • If you're trying to create an anonymised service, set forwarded_for off and via off.

Again, do you really want to do this?

Improve this answer
1
  • 4
    well, he is dr evil..
    – NickW
    Jun 18, 2013 at 9:48

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.