GoFuckYourself.com - Adult Webmaster Forum

GoFuckYourself.com - Adult Webmaster Forum (https://gfy.com/index.php)
-   Fucking Around & Business Discussion (https://gfy.com/forumdisplay.php?f=26)
-   -   disabling auth for squid?? (https://gfy.com/showthread.php?t=924659)

xxweekxx 08-29-2009 06:44 PM

disabling auth for squid??
 
ok some guy setup squid but he is sleeping now. i want to disable the AUTH and make it not ask for username/password, cuz im getting this shitty error:

D

ClientIP: myip here
ServerIP:

HTTP Request:
CONNECT / HTTP/1.0
Authorization: Basic cHJveHltYW46YWJjMTIz
Proxy-Authorization: Basic cHJveHltYW46YWJjMTIz

instead of the page its supposed to open.. so i telneted and im looking at the squid.conf file. how do i disable authentication completely?

GrouchyAdmin 08-29-2009 06:48 PM

Sounds like his authenticate_program is fucked up.

Here's how.
Code:

acl all src 0/0
http_access allow all

I've done my 3 good deeds for the day; back to prickmode.

xxweekxx 08-29-2009 07:04 PM

thanks grouchy. but that didnt work

GrouchyAdmin 08-29-2009 07:06 PM

You're gonna have to take off the rest of the ACLs. I have no idea how your config is setup.

xxweekxx 08-29-2009 07:24 PM

i removed the acls, did squid restart.. still asking for password

GrouchyAdmin 08-29-2009 07:28 PM

*noncommital shrug* - can't say much without seeing the config.

Your best course of action is to page/wake your normal admin - it shits me when people completely break stuff and it takes me hours to fix when if they called me I could have done what they wanted in minutes. ;)

Put the old file back and ask them to disable auth for ya.

xxweekxx 08-29-2009 07:45 PM

got it working.. i had to stop it and start it over.. i owe you 3 balboas(panama beer)

one more dude.lol

I disabled auth, im afraid people IP,port scannin can hit my stuff..

is there a way i can make it so IPS I enable are apple to connect to that squid port?

im afraid my stuff will be a public proxy by tomorrow.. is there like an easy line i can add.

GrouchyAdmin 08-29-2009 07:47 PM

Yes

Change the ACLs. The below is for a single IP (yours). Find it at ipchicken.com.

Code:

acl all src 0/0
acl me src my.ip.addr.here/32
http_access allow me
http_access deny all


xxweekxx 08-29-2009 07:55 PM

can i do more than 1 ip.. like

acl me src my.ip.addr.here/32
acl me src my.ip.addr.here2/32
acl me src my.ip.addr.here3/32

dude you seriously rock

GrouchyAdmin 08-29-2009 07:57 PM

Yeah, but it'd be easier to do the whole CIDR subnet

acl me 4.2.2.1/24 would allow 4.2.2.1-4.2.2.254.

xxweekxx 08-29-2009 08:00 PM

Quote:

Originally Posted by GrouchyAdmin (Post 16252715)
Yeah, but it'd be easier to do the whole CIDR subnet

acl me 4.2.2.1/24 would allow 4.2.2.1-4.2.2.254.

problem is im using different ips in different servers.

i have one IP in 66.

another ip in 72.x

so no way :(

GrouchyAdmin 08-29-2009 08:03 PM

Then, yeah, that's fine. You can have multiple /32 ACLs

I'd suggest you relabel them though:

Code:

acl all src 0/0
acl home src my.ip.addr.here/32
acl office src my.ip.addr.here/32
acl server src my.ip.addr.here/32
http_access allow home
http_access allow office
http_access allow server
http_access deny all

Makes dealing with it a lot easier.

Reason why it didn't take w/o a reload was it was probably still getting a HIT (cache hit); restarting it invalidated the cache. Some startup scripts will do this for a reload, some don't.

xxweekxx 08-29-2009 08:05 PM

haha yeah it works now =) i feel safer..

no login/pass, and i enable only my iPS, plus im using a very high port.. :)

dude i owe you one.. whenever you come down here to panama or you come to NY when im here ill buy you some beer and if you want i can get you a colombian whore =)

thanks man.. really..cheers

GrouchyAdmin 08-29-2009 08:07 PM

Hahaha - not sure when I'll be in either Panama or NY; Beer costs more in NY though. I remember it being like $0.75/bottle in Bocas. I may be a whore but I don't work that cheap! ;)

xxweekxx 08-29-2009 08:19 PM

lol well yeah beer is cheap in panama.... well a whore is like 80$-$100 . so not that cheap... fake tits/ass for the win.lmao..


All times are GMT -7. The time now is 01:20 PM.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2025, vBulletin Solutions, Inc.
©2000-, AI Media Network Inc123