[SOLVED]Local addresses Access Denied

[sheshman]

Hello Everyone,

I'm using zentyal community latest version as http proxy on my network (gateway is not zentyal), proxy working like a charm but on local addresses i'm getting access denied message even i set up the filters and access rules for it. For example we have an local web application on "http://192.168.1.201:8089/Uretim/BaskiRaporu.php" i edit filter as allow to 192.168.1.201 on filter rules but users who try to reach here getting access denied message, how i can fix it ?

Thanks in advance.

[jbahillo]

Have you added 8089 to Safe_ports acl ?

[sheshman]

jbahillo thanks for your response, i changed the port from 8089 to 8080 and it worked, frankly speaking i don't know why, maybe i should re-check my firewall rules again.

[toby0501]

It's not caused by a firewall rule. You need to edit your squid configuration at /usr/share/zentyal/stubs/squid/squid-external.conf.mas
Look for a list starting with acl Safe_ports port <port number>
After editing this file, restart HTTP proxy module.

[jbahillo]

Hello toby0501:

First of all thanks for contributing.

Just a brief note. Editing /usr/share/zentyal/<module>/<stub_file> is not the best idea.
Why? Because in any such module upgrade, you or whoever did this would lose changes to this template.

Instead, create /etc/zentyal/stubs/<module>, copy the stub_file to such folder and do the edit there. Zentyal will look first at this location if exists, and will never change anything here