Squid stop working!!

[Paul Howarth]

Tim wrote:
> Guillermo Garron:
>>>> on the /var/log/messages 
>>>> it says that squid can not open the ICP port (UDP 3130)
>>>> on the
>>>> /var/log/cache.log
>>>> it says
>>>> commBind: cannot bind socket FD 13 to *:3130 (13) Permission denied
> 
> 
> Paul Howarth:
>>> This looks like an SELInux problem, like this one:
>>> http://www.redhat.com/archives/fedora-selinux-list/2006-July/msg00037.html
> 
> On Sun, 2006-07-16 at 08:28 -0400, Guillermo Garron wrote:
>> that was easy!!!
>> thanks, i had never think about SELinux, as i configured it for
>> letting squid work :) in the squid option of the 
>> systemc-config-security level -SELinux tab- so i thought that was all.
>>
>> ok, no i finally turn off SELinux :), 
> 
> I'd recommend configuring it properly, rather than disabling it.  Squid
> usually works on port 3128, and the SELinux presets for allowing Squid
> to work would be configured for it, not 3130.  That's probably why
> you're having problems.  There's two fairly simple solutions:  I think
> the easiest would be to run Squid on port 3128.  Alternatively, you
> could customise the SELinux rule for port 3130.

Squid actually uses a number of ports and this is normal behaviour; it's 
a policy bug.

> I can't offer advice on how to do the second one, I haven't studied the
> details.

I've put together a brief introduction to doing this here:
http://www.city-fan.org/tips/BuildSeLinuxPolicyModules

Comments welcome.

Note that this particular problem has already been pushed upstream and 
should be fixed in the next policy update.

Paul.