[squid-users] Squid versions and FreeBSD-10.1 headache

Yuri Voinov yvoinov at gmail.com
Fri Jan 23 12:47:02 UTC 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
Once more. You CANNOT have neither web-server nor other service with
listening port 80 on the same host as transparent Squid proxy. This is
one and only reason you have looping.

Look. On my transparent 3.4.11 (which was early 2.7) IPFilter redirects
80 port to proxy. My web server on the same host listens only 8080, 8088
and 8888 ports. No one service except NAT is using 80 port.

And finally I have no looping 4 years.

Obvious, is it?

23.01.2015 18:42, Odhiambo Washington ?????:
>
>
> On 23 January 2015 at 15:17, Yuri Voinov <yvoinov at gmail.com
<mailto:yvoinov at gmail.com>> wrote:
>
>
>     -----BEGIN PGP SIGNED MESSAGE-----
>     Hash: SHA1
>     
>     Here is it.
>
>     There is your loop reason.
>
>
> root at mail:/usr/src # svn
> Type 'svn help' for usage.
> root at mail:/usr/src # sockstat -l | grep 80
> www      httpd      55941 3  tcp6   *:80                  *:*
> www      httpd      55941 4  tcp4   *:80                  *:*
> www      httpd      55941 5  tcp6   *:8080                *:*
> www      httpd      55941 6  tcp4   *:8080                *:*
> www      httpd      69148 3  tcp6   *:80                  *:*
> www      httpd      69148 4  tcp4   *:80                  *:*
> www      httpd      69148 5  tcp6   *:8080                *:*
> www      httpd      69148 6  tcp4   *:8080                *:*
> www      httpd      69145 3  tcp6   *:80                  *:*
> www      httpd      69145 4  tcp4   *:80                  *:*
> www      httpd      69145 5  tcp6   *:8080                *:*
> www      httpd      69145 6  tcp4   *:8080                *:*
> www      httpd      69142 3  tcp6   *:80                  *:*
> www      httpd      69142 4  tcp4   *:80                  *:*
> www      httpd      69142 5  tcp6   *:8080                *:*
> www      httpd      69142 6  tcp4   *:8080                *:*
> www      httpd      11049 3  tcp6   *:80                  *:*
> www      httpd      11049 4  tcp4   *:80                  *:*
> www      httpd      11049 5  tcp6   *:8080                *:*
> www      httpd      11049 6  tcp4   *:8080                *:*
> www      httpd      11044 3  tcp6   *:80                  *:*
> www      httpd      11044 4  tcp4   *:80                  *:*
> www      httpd      11044 5  tcp6   *:8080                *:*
> www      httpd      11044 6  tcp4   *:8080                *:*
> www      httpd      993   3  tcp6   *:80                  *:*
> www      httpd      993   4  tcp4   *:80                  *:*
> www      httpd      993   5  tcp6   *:8080                *:*
> www      httpd      993   6  tcp4   *:8080                *:*
> www      httpd      991   3  tcp6   *:80                  *:*
> www      httpd      991   4  tcp4   *:80                  *:*
> www      httpd      991   5  tcp6   *:8080                *:*
> www      httpd      991   6  tcp4   *:8080                *:*
> www      httpd      990   3  tcp6   *:80                  *:*
> www      httpd      990   4  tcp4   *:80                  *:*
> www      httpd      990   5  tcp6   *:8080                *:*
> www      httpd      990   6  tcp4   *:8080                *:*
> www      httpd      989   3  tcp6   *:80                  *:*
> www      httpd      989   4  tcp4   *:80                  *:*
> www      httpd      989   5  tcp6   *:8080                *:*
> www      httpd      989   6  tcp4   *:8080                *:*
> root     httpd      912   3  tcp6   *:80                  *:*
> root     httpd      912   4  tcp4   *:80                  *:*
> root     httpd      912   5  tcp6   *:8080                *:*
> root     httpd      912   6  tcp4   *:8080                *:*
> root at mail:/usr/src # /usr/local/etc/rc.d/apache24 stop
> Stopping apache24.
> Waiting for PIDS: 912.
> root at mail:/usr/src # sockstat -l | grep 80
> root at mail:/usr/src #
>
> Here is an attempt to address the problem based on your observation:
>
> 1. I killed the httpd so that there is nothing listening on port 80.
> 2. Started squid-3.5.1 and cache log was clean. However access is
DENIED to all requests so no one can browse!
>
> Seems we're headed somewhere.
> However, I have other servers running squid-2.7.9 and there is a
webserver on the same machine (gateway) and they play along nicely!
>
>
>
>
>
>
>
> --
> Best regards,
> Odhiambo WASHINGTON,
> Nairobi,KE
> +254733744121/+254722743223
> "I can't hear you -- I'm using the scrambler."

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBAgAGBQJUwkLFAAoJENNXIZxhPexGjuMIAIay48OKf1zy1MShsK5cC+di
EjbEupjWlzjzEZ3jthg7drnNdnHvR2iXUtBujNzs7ed1iQUxspaOtUQRgqNTHufs
rgYk+e7yK9Iz33p3T9jNzK9HIJMLNgjcFolI3eTrdMBlj6ujra0L1CDrYnz1ZFEz
/4FrHSwHcEeiCVdnj74nDYFxR29uhCrYjehtsnNDKkmipXhjiFzriORYNT0t3j7D
q6HiVDiSJyNtdKYuOXRnmFMfYMQlCj2iQZsWfNmFAaMmxmaRjvHH81UBB45hjMUw
t5C8YCI/wcyrLJ3BqrXiQZjZawbWhvfI449mGG/uSocq5QGqK2qtQsCKrSgf4cw=
=+rLY
-----END PGP SIGNATURE-----

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20150123/ff758856/attachment.html>


More information about the squid-users mailing list