[gf100]

Правильно я проверил??? »

Да.
Так и смотрится, по логам...

[youko]

ок, Всем Спасибо. Тема закрыта!

[lcnet]

народ помогите плиз
у меня открытый фаер с заворачиванием на сквид

конфиг:
00050 divert 8668 ip4 from any to any via em1
00055 fwd 172.21.0.1,3128 tcp from 172.21.0.0/16 to any dst-port 80,8080,443 via em0
00100 allow ip from any to any via lo0
00200 deny ip from any to 127.0.0.0/8
00300 deny ip from 127.0.0.0/8 to any
65000 allow ip from any to any

em0 -смотрит в локалку

конфиг SQUID'а:

acl manager proto cache_object
acl porn url_regex "/usr/local/etc/squid/conf/porn"
acl zapret url_regex "/usr/local/etc/squid/conf/zapret"
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32
#acl localnet src 10.0.0.0/8 # RFC1918 possible internal network
#acl localnet src 172.16.0.0/16 # RFC1918 possible internal network
#acl localnet src 192.168.0.0/24 # RFC1918 possible internal network
acl localnet src 172.21.0.0/24 # RFC1918 possible internal network
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access deny zapret all
http_access deny porn all
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localnet
http_access deny all
icp_access allow localnet
icp_access deny all
htcp_access allow localnet
htcp_access deny all
http_port 172.21.0.1:3128 transparent
hierarchy_stoplist cgi-bin ?
access_log /usr/local/etc/squid/logs/access.log squid
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern (cgi-bin|\?) 0 0% 0
refresh_pattern . 0 20% 4320
icp_port 3130
visible_hostname FRYA
error_directory /usr/local/etc/squid/errors/Russian-1251
coredump_dir /usr/local/squid/cache
dns_nameservers 192.168.82.201 192.168.82.200


cat /usr/local/etc/squid/logs/access.log

1274376361.909 13 172.21.0.2 TCP_DENIED/403 1225 GET http://ya.ru/ - NONE/- text/html

в чем затык?

[gf100]

lcnet, ошибка появляется в любом случае? - прокси прописан/нет в браузере?

Если поменять правило "http_access deny all" на разрешающее результат изменится?