disabling auth for squid??

[xxweekxx]

ok some guy setup squid but he is sleeping now. i want to disable the AUTH and make it not ask for username/password, cuz im getting this shitty error:

D

ClientIP: myip here
ServerIP:

HTTP Request:
CONNECT / HTTP/1.0
Authorization: Basic cHJveHltYW46YWJjMTIz
Proxy-Authorization: Basic cHJveHltYW46YWJjMTIz

instead of the page its supposed to open.. so i telneted and im looking at the squid.conf file. how do i disable authentication completely?

[GrouchyAdmin]

Sounds like his authenticate_program is fucked up.

Here's how.

acl all src 0/0
http_access allow all

I've done my 3 good deeds for the day; back to prickmode.

[xxweekxx]

thanks grouchy. but that didnt work

[GrouchyAdmin]

You're gonna have to take off the rest of the ACLs. I have no idea how your config is setup.

[xxweekxx]

i removed the acls, did squid restart.. still asking for password

[GrouchyAdmin]

*noncommital shrug* - can't say much without seeing the config.

Your best course of action is to page/wake your normal admin - it shits me when people completely break stuff and it takes me hours to fix when if they called me I could have done what they wanted in minutes. ;)

Put the old file back and ask them to disable auth for ya.

[xxweekxx]

got it working.. i had to stop it and start it over.. i owe you 3 balboas(panama beer)

one more dude.lol

I disabled auth, im afraid people IP,port scannin can hit my stuff..

is there a way i can make it so IPS I enable are apple to connect to that squid port?

im afraid my stuff will be a public proxy by tomorrow.. is there like an easy line i can add.

[GrouchyAdmin]

Yes

Change the ACLs. The below is for a single IP (yours). Find it at ipchicken.com.

acl all src 0/0
acl me src my.ip.addr.here/32
http_access allow me
http_access deny all

[xxweekxx]

can i do more than 1 ip.. like

acl me src my.ip.addr.here/32
acl me src my.ip.addr.here2/32
acl me src my.ip.addr.here3/32

dude you seriously rock

[GrouchyAdmin]

Yeah, but it'd be easier to do the whole CIDR subnet

acl me 4.2.2.1/24 would allow 4.2.2.1-4.2.2.254.

[xxweekxx]

Yeah, but it'd be easier to do the whole CIDR subnet

acl me 4.2.2.1/24 would allow 4.2.2.1-4.2.2.254.

problem is im using different ips in different servers.

i have one IP in 66.

another ip in 72.x

so no way

[GrouchyAdmin]

Then, yeah, that's fine. You can have multiple /32 ACLs

I'd suggest you relabel them though:

acl all src 0/0
acl home src my.ip.addr.here/32
acl office src my.ip.addr.here/32
acl server src my.ip.addr.here/32
http_access allow home
http_access allow office
http_access allow server
http_access deny all

Makes dealing with it a lot easier.

Reason why it didn't take w/o a reload was it was probably still getting a HIT (cache hit); restarting it invalidated the cache. Some startup scripts will do this for a reload, some don't.

[xxweekxx]

haha yeah it works now =) i feel safer..

no login/pass, and i enable only my iPS, plus im using a very high port..

dude i owe you one.. whenever you come down here to panama or you come to NY when im here ill buy you some beer and if you want i can get you a colombian whore =)

thanks man.. really..cheers

[GrouchyAdmin]

Hahaha - not sure when I'll be in either Panama or NY; Beer costs more in NY though. I remember it being like $0.75/bottle in Bocas. I may be a whore but I don't work that cheap! ;)

[xxweekxx]

lol well yeah beer is cheap in panama.... well a whore is like 80$-$100 . so not that cheap... fake tits/ass for the win.lmao..