[squid-users] Squid as a proxy (Forwarding loop detected)

Amos Jeffries squid3 at treenet.co.nz
Mon Dec 28 12:03:38 UTC 2015


On 29/12/2015 12:51 a.m., Richard wrote:
> Hi,
> 
> This question has been asked many times before, but unfortunately the ones
> I checked did not seem to have a solution for me.
> 
> I am trying to setup squid as transparent proxy, but I keep getting the
> error Forwarding loop detected.
> 
> I have the following setup:
> Client [172.24.30.11] <-> Router [172.24.30.253 && 172.24.10.253 ] <->
> Squid Server [172.24.10.13]
> 
> The configuration for squid is as following:
> http_port 8080
> http_port 3129 intercept
> http_access allow all
> 
> The iptables rule on my router is as follow:

That is the problem.

NAT interception must be done *on the same machine as Squid*.

Use policy routing on the router, and NAT (or TPROXY) on the Squid machine.
<http://wiki.squid-cache.org/ConfigExamples/Intercept/IptablesPolicyRoute>

Amos



More information about the squid-users mailing list