[squid-users] Fwd: squid intercept config

[Antony Stone]

On Friday 06 March 2015 at 14:03:28 (EU time), Monah Baki wrote:

> Hi All,
> 
> As an addition to my yesterday's issue,
> 
> Tail -f cache.log, I am getting the following:
> 
> 015/03/06 13:54:02| WARNING: Forwarding loop detected for:

> Any ideas?

Is your NAT rule catching the HTTP requests from the proxy itself (as well as 
the requests from the clients) and sending *everything* to the proxy 
(including the requests the proxy is trying to make out to the Internet)?

I'm not an expert on Cisco or BSD, but it does strike me that your rule:

rdr pass inet proto tcp from 10.0.0.0/8 to any port 80 -> 10.0.0.24 port 3129

looks like it will match requests from the proxy's address 10.0.0.24 as well 
as all the clients...

Try adding an exception in before the NAT rule, saying "traffic from 10.0.0.24 
should not be NATted".


Regards,


Antony.

-- 
"Once you have a panic, things tend to become rather undefined."

 - murble

                                                   Please reply to the list;
                                                         please *don't* CC me.