Modify

Ticket #638 (closed defect: invalid)

Opened 6 years ago

Last modified 6 months ago

Cannot access cPanel based websites

Reported by: priyend@… Owned by: juruen@…
Milestone: Component: squid
Severity: normal Keywords:
Cc:

Description

Hi

I having been using Ebox 0.9.1 and have enabled the http proxy. It is set up as transparent with a global policy to allow all. Also content filtering is disabled.

I can go to all websites including https sites with no problems except cPanel based sites. For example the following site does not work

 http://demo.cpanel.net:2086/login/?user=demo&pass=demo

Password and username are both "demo".

I always get connection falied with "(110) Connection timed out" when using squid.

However if I skip the proxy and connect directly all works well.

It does not matter whether I use Mozilla Firefox (which is my default browser) or IE. The response from squid is the same.

I have a feeling that the proxy does not work when the port is set to a non standard port such as ":2086" in the link above.

I have not set up any interfaces as external but have set up the default gateway to my DSL router on the eBox machine. The eth0 interface has a static address assigned to it as well. DNS functions are provided by the router.

Can someone help getting links such as the one above to work?

Best regards Priyend

Attachments

Change History

comment:1 Changed 6 years ago by juruen@…

  • Status changed from new to closed
  • Resolution set to invalid

As you point out, the issue has to do with the port 2086. The http proxy only deals with 80 and 443.

To be able to access that port you will have to add a rule in the firewall to allow connections to port 2086.

comment:2 follow-up: ↓ 3 Changed 6 years ago by juruen@…

By the way, I recommend you use two interfaces one external and the other one internal. Otherwise you can experience some problems with the network services which rely on that configuration.

comment:3 in reply to: ↑ 2 Changed 6 years ago by priyend@…

  • billable changed from 1 to 0

Replying to juruen@warp.es:

By the way, I recommend you use two interfaces one external and the other one internal. Otherwise you can experience some problems with the network services which rely on that configuration.

Hi

I only have one network card which connects to the router. This is attached to the eBox machine. The other computer is a notebook that has a wireless card connected to the network via the router.

Here in South Africa the internet charges are through the roof. Absurd as it sounds, we paid almost $70USD for 3GB of traffic on a 384Kb line. My intention is to let squid do the cacheing and that way I can save money. Also the speedup is tremendous.

I have set up a simple firewall rule under Firewall->Packet Filter->Configure Rules. I set a rule to allow tcp on any source port and any destination port.

Still I cannot access the cPanel link with port :2086?

By the way I also set UDP rule to allow any source and destination and any ports with no change.

Since the normal ports are working, I am assuming that it is not necessary to set the eBox NIC as external. Is this correct?

Best regards Priyend

comment:4 Changed 6 months ago by zen

I always get connection falied with "(110) Connection timed out" when using squid.

However if I skip the proxy and connect directly all works well.

It does not matter whether I use Mozilla Firefox (which is my default browser) or IE. The response from squid is the same.

I have a feeling that the proxy does not work when the port is set to a non standard port such as ":2086" in the link above.

I have not set up any interfaces as external but have set up the default gateway to my DSL router on the eBox machine. The eth0 interface has a static address assigned to it as well. DNS functions are provided by the router.

Can someone help getting links such as the one above to work?

As you point out, the issue has to do with the port 2086. The  roof replacement cost http proxy only deals with 80 and 443.

To be able to access that port you will have to add a rule in the firewall to allow connections to port 2086.

View

Add a comment

Modify Ticket

Change Properties
<Author field>
Action
as closed
The resolution will be deleted. Next status will be 'reopened'
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.