+ Responder ao Tópico



  1. #1

    Padrão liberar porta para poder conectar por https

    Caros,
    estou tentando conectar no meu apache usando a porta 443 (SSL), mas nao estou tendo exito. Fui ver se a porta estava liberada para conexões usando o comando nmpa -sS ip_da_maquina:

    Starting nmap 3.81 ( http://www.insecure.org/nmap/ ) at 2005-11-16 22:23 BRST
    NET: Registered protocol family 17
    Interesting ports on astra.infojf.com.br (192.168.1.15):
    (The 1654 ports scanned but not shown below are in state: closed)
    PORT STATE SERVICE
    22/tcp open ssh
    53/tcp open domain
    80/tcp open http
    111/tcp open rpcbind
    113/tcp open auth
    139/tcp open netbios-ssn
    445/tcp open microsoft-ds
    977/tcp open unknown
    10000/tcp open snet-sensor-mgmt

    Nmap finished: 1 IP address (1 host up) scanned in 0.660 seconds

    Não tenho firewall configurado na minha maquina, como faço para liberrar a porta 443.
    Estou tendo dificuldades em conectar usando https, e por causa dessa porta estar fechada?

  2. #2
    lelinho
    Visitante

    Padrão Re: liberar porta para poder conectar por https

    estou tentando fazer a mesma coisa...

    ERROR
    The requested URL could not be retrieved

    --------------------------------------------------------------------------------

    While trying to retrieve the URL: login.live.com:443

    The following error was encountered:

    Access Denied.
    Access control configuration prevents your request from being allowed a

    olha meu squid.conf

    #Recommended minimum configuration:
    acl all src 0.0.0.0/0.0.0.0
    acl manager proto cache_object
    acl localhost src 127.0.0.1/255.255.255.255
    acl to_localhost dst 127.0.0.0/8
    acl SSL_ports port 443 563
    acl Safe_ports port 80 # http
    acl Safe_ports port 21 # ftp
    acl Safe_ports port 443 563 # https, snews
    acl Safe_ports port 70 # gopher
    acl Safe_ports port 210 # wais
    acl Safe_ports port 1025-65535 # unregistered ports
    acl Safe_ports port 280 # http-mgmt
    acl Safe_ports port 488 # gss-http
    acl Safe_ports port 591 # filemaker
    acl Safe_ports port 777 # multiling http
    acl Safe_ports port 901 # swat
    acl purge method PURGE
    acl CONNECT method CONNECT

    acl USERS_RESTRITOS proxy_auth_regex "/etc/squid/users_restritos"
    acl USERS_LIBERADOS proxy_auth_regex "/etc/squid/users_liberados"
    acl SITES_PERMITIDOS url_regex -i "/etc/squid/site_permitido"

    # Only allow cachemgr access from localhost
    http_access allow manager localhost
    http_access deny manager
    http_access allow purge localhost
    http_access deny purge

    # Deny requests to unknown ports
    http_access deny !Safe_ports

    # Deny CONNECT to other than SSL ports
    http_access deny CONNECT !SSL_ports

    # INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS

    # And finally deny all other access to this proxy
    http_access allow localhost
    http_access allow USERS_RESTRITOS SITES_PERMITIDOS
    http_access allow USERS_LIBERADOS
    http_access deny all

    estou fazendo com o usem o squid autenticado, junto ao sarg...
    pras pessoas q deixo liberadas (http_access allow USERS_LIBERADOS) podem acessar https normal, mais as q deixo apenas com sites especificos (http_access allow USERS_RESTRITOS SITES_PERMITIDOS) nao conseguem navegar em qualquer site https sempre mensagem de erro blokeando...