RE: [cobalt-users] Qube3 Open Proxy

["James Nesbitt \(IHQ Network\)" <ihq-network@xxxxxxx>]

So if you block port 3128 with a firewall (like a WatchGuard SOHO) to
protect it (which also makes sense), I wonder then how you can get it to
host webpages and use the webmail function then?

Regards,

James Nesbitt

"Only two things are infinite, the universe and human stupidity, and I'm not
sure about the former."

-----Original Message-----
From: cobalt-users-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of H.P. Noordam
Sent: Tuesday, June 03, 2003 03:04
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: Re: [cobalt-users] Qube3 Open Proxy




James Nesbitt (IHQ Network) wrote:
> I tried on mine to.
>
> The ./squid status command reported it was stopped.  So I started it with
> the ./squid start command and it succeeded.  When I did a ./squid stop
> command I got errors saying:
>
> IGNORING invalid ACL: acl Cips dst
> IGNORING invalid ACL: acl Cdomains dstdomain
> ERROR: no copy running
>
> I got the same error then when I did the ./squid status again.
>
> I didn't reboot the Qube at all.
>
> Any ideas of what is going on anyone?
>
> Regards,
>
> James Nesbitt



sorry for the double post, here is some additional info;  sun's official
advice is also to add a firewall in front of squid;

[quote]
NOTE: We highly recommend placing a firewall in front of the Qube if web
caching is going to be turned on and using it to block port 3128. By
default, port 3128 is open facing both the LAN and the internet. The
basic and adaptive firewalls on the Qube or an external firewall can be
used to block access to this port from outside the network.

[source]
http://cobalt-knowledge.sun.com/cgi-bin/kbase.cfg/php/enduser/std_adp.php?p_
sid=g3PEsLKg&p_lva=&p_refno=020410-000001&p_created=1018449392&p_sp=cF9ncmlk
c29ydD0mcF9yb3dfY250PTQmcF9zZWFyY2hfdGV4dD1zcXVpZCZwX3NlYXJjaF90eXBlPTMmcF9w
cm9kX2x2bDE9fmFueX4mcF9wcm9kX2x2bDI9fmFueX4mcF9jYXRfbHZsMT1_YW55fiZwX2NhdF9s
dmwyPX5hbnl_JnBfc29ydF9ieT1kZmx0JnBfcGFnZT0x&p_li=


if you want to try an "orignal" set of /etc/squid/* config files
instead of your own for troubleshooting you can get a qube 3 version here:

http://www.depopo.net/cobalt/configs/qube3/unmodified/squid/

the file dirlist.txt contains a listing with the correct owners of the
files.




_____________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users