squid配置请教！

3300

squid.conf文件如下
http_port 3128
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 32 MB
cache_swap_low 80
cache_swap_high 95
cache_access_log /usr/local/squid/logs/access.log
cache_dir ufs /usr/local/squid/cache 100 16 256
cache_log /usr/local/squid/logs/cache.log
cache_store_log none
error_directory /usr/local/etc/squid/errors/Simplify_Chinese
icon_directory /usr/local/etc/squid/icons
logfile_rotate 10
auth_param basic program /usr/local/sbin/ncsa_auth /usr/local/etc/squid/passwd
auth_param basic children 5
auth_param basic realm 请输入你的用户名和密码
auth_param basic credentialsttl 2 hours
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern .               0       20%     4320

acl password proxy_auth REQUIRED
acl all src 0/0
acl Manager proto cache_object
acl Localhost src 127.0.0.1/32
acl Safe_ports port 80 21 443 563 70 210 280 488 591 777 1025-65535
acl SSL_ports port 443 563 1630
acl CONNECT method CONNECT
acl MyNetwork src 192.168.0.0/24

http_access allow Manager Localhost
http_access deny Manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

http_access allow password
http_access deny all
http_reply_access allow all
icp_access allow all



客户端ie设置好后可以正常使用，qq也正常，但网易的popo却不能登陆，请教各位是什么原因？
freebsd6.2
squid2.6

HonestQiao

popo的代理怎么设置的？

3300

使用http代理 地址和端口都没问题
如果将配置文件中的
http_access allow password
改为
http_access allow MyNetwork
就可以了

出错时access.log的日志
1184818895.175 5543635 192.168.0.3 TCP_MISS/200 6163 CONNECT 220.181.28.225:443 - DIRECT/220.181.28.225 -
1184818897.902      1 192.168.0.3 TCP_DENIED/407 2055 CONNECT lbs.popo.163.com:443 - NONE/- text/html
1184818897.911      0 192.168.0.3 TCP_DENIED/407 2049 CONNECT 220.181.28.225:443 - NONE/- text/html
1184818900.195 5518671 192.168.0.3 TCP_MISS/200 2690 CONNECT 220.181.28.234:443 - DIRECT/220.181.28.234 -
1184818902.309      0 192.168.20.3 TCP_DENIED/407 2055 CONNECT lbs.popo.163.com:443 - NONE/- text/html
1184818902.372      7 192.168.0.3 TCP_DENIED/407 2049 CONNECT 220.181.28.234:443 - NONE/- text/html

[ 本帖最后由 3300 于 2007-7-19 12:26 编辑 ]

jinl

很显然，是popo里面的代理设置有问题，不能支持你的口令认证方式，当你改成http_access allow MyNetwork,按照地址认证的时候就正常了。

sillyfool

sorry, 发错了