<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
-----BEGIN PGP SIGNED MESSAGE----- <br>
Hash: SHA1 <br>
<br>
redirection loop can only occurs when reqwiter or NAT misconfigured.<br>
<br>
On early Squid versions to avoid loops was used:<br>
<br>
# Rewriter cycle workaround<br>
url_rewrite_access deny localhost<br>
<br>
rule.<br>
<br>
Somewhere in your configuration occurs redirector looping.<br>
<br>
But I can't see URL rewriter in your config. This is looped
configuration?<br>
<br>
23.01.2015 17:37, Odhiambo Washington пишет:<br>
<span style="white-space: pre;">> So for the past few days I have
been struggling with Squid in intercept mode on FreeBSD-10.1.<br>
><br>
> Using the same squid.conf for Squid-3.4.10 and Squid-3.5.1
and the same Firewall rules (I have tested with IPFilter and PF
and these rules work with Squid-2.7.9 on several FreeBSD boxes
that I have):<br>
><br>
> 1. Squid-3.5.1 has completely refused to play along - always
complaining about "loop detected" and hence denying all requests<br>
> 2. Squid-3.4.10 plays along, BUT has so much complaints in
cache.log as below:<br>
><br>
> 2015/01/23 13:26:43| Set Current Directory to
/usr/local/squid/logs<br>
> 2015/01/23 13:26:43| Set Current Directory to
/usr/local/squid/logs<br>
> 2015/01/23 13:26:43| Starting Squid Cache version 3.4.10 for
amd64-portbld-freebsd10.1...<br>
> 2015/01/23 13:26:43| Process ID 15770<br>
> 2015/01/23 13:26:43| Process Roles: master worker<br>
> 2015/01/23 13:26:43| With 114417 file descriptors available<br>
> 2015/01/23 13:26:43| Initializing IP Cache...<br>
> 2015/01/23 13:26:43| DNS Socket created at [::], FD 5<br>
> 2015/01/23 13:26:43| DNS Socket created at 0.0.0.0, FD 6<br>
> 2015/01/23 13:26:43| Adding domain ili.or.ug
<a class="moz-txt-link-rfc2396E" href="http://ili.or.ug"><http://ili.or.ug></a> from /etc/resolv.conf<br>
> 2015/01/23 13:26:43| Adding nameserver 127.0.0.1 from
/etc/resolv.conf<br>
> 2015/01/23 13:26:43| helperOpenServers: Starting 5/15
'ssl_crtd' processes<br>
> 2015/01/23 13:26:43| helperOpenServers: Starting 10/15
'ut-squidbooster' processes<br>
> 2015/01/23 13:26:43| Logfile: opening log
stdio:/usr/local/squid/logs/access.log<br>
> 2015/01/23 13:26:43| Local cache digest enabled;
rebuild/rewrite every 3600/3600 sec<br>
> 2015/01/23 13:26:43| Store logging disabled<br>
> 2015/01/23 13:26:43| Swap maxSize 104857600 + 131072 KB,
estimated 8076051 objects<br>
> 2015/01/23 13:26:43| Target number of buckets: 403802<br>
> 2015/01/23 13:26:43| Using 524288 Store buckets<br>
> 2015/01/23 13:26:43| Max Mem size: 131072 KB<br>
> 2015/01/23 13:26:43| Max Swap size: 104857600 KB<br>
> 2015/01/23 13:26:43| Rebuilding storage in
/usr/local/squid/cache (dirty log)<br>
> 2015/01/23 13:26:43| Using Least Load store dir selection<br>
> 2015/01/23 13:26:43| Set Current Directory to
/usr/local/squid/logs<br>
> 2015/01/23 13:26:43| Finished loading MIME types and icons.<br>
> 2015/01/23 13:26:43| HTCP Disabled.<br>
> 2015/01/23 13:26:43| Pinger socket opened on FD 45<br>
> 2015/01/23 13:26:43| Squid plugin modules loaded: 0<br>
> 2015/01/23 13:26:43| Adaptation support is off.<br>
> 2015/01/23 13:26:43| Accepting NAT intercepted HTTP Socket
connections at local=[::]:13128 remote=[::] FD 40 flags=41<br>
> 2015/01/23 13:26:43| Accepting HTTP Socket connections at
local=[::]:13127 remote=[::] FD 41 flags=9<br>
> 2015/01/23 13:26:43| Accepting NAT intercepted SSL bumped
HTTPS Socket connections at local=[::]:13129 remote=[::] FD 42
flags=41<br>
> 2015/01/23 13:26:43| Accepting ICP messages on [::]:3130<br>
> 2015/01/23 13:26:43| Sending ICP messages from [::]:3130<br>
> 2015/01/23 13:26:43| pinger: Initialising ICMP pinger ...<br>
> 2015/01/23 13:26:43| pinger: ICMP socket opened.<br>
> 2015/01/23 13:26:43| pinger: ICMPv6 socket opened<br>
> 2015/01/23 13:26:43| Store rebuilding is 50.88% complete<br>
> 2015/01/23 13:26:43| Done reading /usr/local/squid/cache
swaplog (7861 entries)<br>
> 2015/01/23 13:26:43| Finished rebuilding storage from disk.<br>
> 2015/01/23 13:26:43| 7845 Entries scanned<br>
> 2015/01/23 13:26:43| 0 Invalid entries.<br>
> 2015/01/23 13:26:43| 0 With invalid flags.<br>
> 2015/01/23 13:26:43| 7829 Objects loaded.<br>
> 2015/01/23 13:26:43| 0 Objects expired.<br>
> 2015/01/23 13:26:43| 16 Objects cancelled.<br>
> 2015/01/23 13:26:43| 0 Duplicate URLs purged.<br>
> 2015/01/23 13:26:43| 0 Swapfile clashes avoided.<br>
> 2015/01/23 13:26:43| Took 0.05 seconds (168735.72
objects/sec).<br>
> 2015/01/23 13:26:43| Beginning Validation Procedure<br>
> 2015/01/23 13:26:43| Completed Validation Procedure<br>
> 2015/01/23 13:26:43| Validated 7829 Entries<br>
> 2015/01/23 13:26:43| store_swap_size = 457188.00 KB<br>
> 2015/01/23 13:26:44| storeLateRelease: released 0 objects<br>
> 2015/01/23 13:26:47| CBDATA memory leak. cbdata=0x804ce9b78
dns_internal.cc:1131<br>
> 2015/01/23 13:26:47| CBDATA memory leak. cbdata=0x804b1d7d8
ipcache.cc:353<br>
> 2015/01/23 13:26:47| CBDATA memory leak. cbdata=0x8048b2698
Checklist.cc:45<br>
> 2015/01/23 13:26:47| CBDATA memory leak. cbdata=0x804b1d7d8
Checklist.cc:160<br>
> 2015/01/23 13:26:47| CBDATA memory leak. cbdata=0x804b1b618
helper.cc:856<br>
> 2015/01/23 13:26:47| CBDATA memory leak. cbdata=0x804b1d7d8
redirect.cc:176<br>
> 2015/01/23 13:26:47| CBDATA memory leak. cbdata=0x8049e9498
store_client.cc:337<br>
> 2015/01/23 13:26:48| CBDATA memory leak. cbdata=0x804ce9b78
ipcache.cc:353<br>
> 2015/01/23 13:26:48| CBDATA memory leak. cbdata=0x8048b27d8
Checklist.cc:45<br>
> 2015/01/23 13:26:48| CBDATA memory leak. cbdata=0x8094c8058
store_client.cc:154<br>
> 2015/01/23 13:26:48| CBDATA memory leak. cbdata=0x8049e9498
store_client.cc:337<br>
> 2015/01/23 13:26:48| CBDATA memory leak. cbdata=0x8049e9498
store_client.cc:337<br>
> 2015/01/23 13:26:48| CBDATA memory leak. cbdata=0x8094c6058
CommCalls.cc:21<br>
> 2015/01/23 13:26:48| CBDATA memory leak. cbdata=0x8094c8058
store_client.cc:154<br>
> 2015/01/23 13:26:48| CBDATA memory leak. cbdata=0x8049e9498
store_client.cc:337<br>
> 2015/01/23 13:26:48| CBDATA memory leak. cbdata=0x804ab8458
CommCalls.cc:21<br>
> 2015/01/23 13:26:48| CBDATA memory leak. cbdata=0x8094c8058
store_client.cc:154<br>
> 2015/01/23 13:26:48| CBDATA memory leak. cbdata=0x8049e9498
store_client.cc:337<br>
> 2015/01/23 13:26:48| CBDATA memory leak. cbdata=0x804b1d718
clientStream.cc:235<br>
> 2015/01/23 13:26:48| CBDATA memory leak. cbdata=0x8048b2558
Checklist.cc:320<br>
><br>
> I am running squid like:<br>
> /usr/local/sbin/squid -f /usr/local/etc/squid/squid.conf -N<br>
><br>
> I do not see any coredumps with this scenario even when I run
with -NCd1<br>
><br>
> For the time being I have opted to run squid with cache_log
set to /dev/null. Not elegant at all.<br>
><br>
> So my questions:<br>
><br>
> Is anyone else here successfully running squid (3.4.10 or
3.5.x) in intercept mode on FreeBSD 10.x using either PF or
IPFilter?<br>
><br>
> I'd really love to compare notes. Maybe that will help clear
my current brain-lock!<br>
><br>
> Technically, I have reached my /etc on this one.<br>
><br>
> My squid.conf is available at <a class="moz-txt-link-freetext" href="http://pastebin.com/L16cDmRp">http://pastebin.com/L16cDmRp</a><br>
><br>
><br>
><br>
><br>
><br>
> -- <br>
> Best regards,<br>
> Odhiambo WASHINGTON,<br>
> Nairobi,KE<br>
> +254733744121/+254722743223<br>
> "I can't hear you -- I'm using the scrambler."<br>
><br>
><br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a></span><br>
<br>
-----BEGIN PGP SIGNATURE-----
<br>
Version: GnuPG v2
<br>
<br>
iQEcBAEBAgAGBQJUwjdEAAoJENNXIZxhPexGgB0IALoQUrOwWHmn75BZxXtFynCs
<br>
KspBiPlLnCx0o/bv5mjmyeQChEeH/vAelMupIAvfF7tHnfX1No7JJ6zXuULNfkka
<br>
0rvBVpbqqP6XZwVnS8Bfqwan4za7nvt5g3Fasj0Qw/bx9n0QF9roUOsPr7QeudmM
<br>
SoKE45QXsoaznW8+ObE+oRM4108qpEDZb6IuWTAO7hFu4hyctvAw6LcAU718gu43
<br>
AW8D2RrSGQaKoE75ah+PblopkjjoQxj1ycg0lgbt5h37DiNuP7flN5VSz/vahbkg
<br>
Z27L/PWRipmblfp2fsoHWJjNBCgd8fcfbdRifPD/gMSs23de/FAGUu6liMNdaqU=
<br>
=Qy97
<br>
-----END PGP SIGNATURE-----
<br>
<br>
</body>
</html>