<div dir="ltr"><div><a href="http://wiki.squid-cache.org/ConfigExamples/Intercept/FreeBsdPf">http://wiki.squid-cache.org/ConfigExamples/Intercept/FreeBsdPf</a><br><br></div>So something else is missing?<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Mar 6, 2015 at 8:47 AM, Yuri Voinov <span dir="ltr"><<a href="mailto:yvoinov@gmail.com" target="_blank">yvoinov@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
  
    
  
  <div bgcolor="#FFFFFF" text="#000000">
    On proxy box.<br>
    <br>
    <div>06.03.15 19:47, <a href="mailto:monahbaki@gmail.com" target="_blank">monahbaki@gmail.com</a>
      пишет:<br>
    </div><div><div class="h5">
    <blockquote type="cite">
      <div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">From squid or
        router? </div>
      <div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)"><br>
      </div>
      <div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">Thanks</div>
      <div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)"><br style="display:initial">
      </div>
      <div style="font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">Sent from my BlackBerry
        10 smartphone on the Verizon Wireless 4G LTE network.</div>
      <table style="background-color:white;border-spacing:0px" width="100%">
        <tbody>
          <tr>
            <td colspan="2" style="font-size:initial;text-align:initial;background-color:rgb(255,255,255)">
              <div style="border-style:solid none none;border-top-color:rgb(181,196,223);border-top-width:1pt;padding:3pt 0in 0in;font-family:Tahoma,'BB Alpha Sans','Slate Pro';font-size:10pt">
                <div><b>From: </b>Yuri Voinov</div>
                <div><b>Sent: </b>Friday, March 6, 2015 8:44 AM</div>
                <div><b>To: </b>Monah Baki</div>
                <div><b>Cc: </b><a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a></div>
                <div><b>Subject: </b>Re: [squid-users] Fwd: squid
                  intercept config</div>
              </div>
            </td>
          </tr>
        </tbody>
      </table>
      <br>
      <div style="background-color:rgb(255,255,255)">
        
        Ok.<br>
        <br>
        In this case this is NAT misconfiguration.<br>
        <br>
        You need to check it carefully.<br>
        <br>
        <div>06.03.15 19:43, Monah Baki пишет:<br>
        </div>
        <blockquote type="cite">
          <div dir="ltr">
            <div>No other process on 80 is on the server. I also
              confirmed from the client side if he runs "telnet <a href="http://www.openbsd.org" target="_blank">www.openbsd.org</a>
              80" on his desktop, he gets a response.<br>
              <br>
            </div>
            Thanks<br>
          </div>
          <div class="gmail_extra"><br>
            <div class="gmail_quote">On Fri, Mar 6, 2015 at 8:28 AM,
              Yuri Voinov <span dir="ltr"><<a href="mailto:yvoinov@gmail.com" target="_blank">yvoinov@gmail.com</a>></span>
              wrote:<br>
              <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
                <div bgcolor="#FFFFFF" text="#000000"> Did you have
                  another listening process on 80 port on your proxy
                  box?<br>
                  <br>
                  I.e., web-server?<br>
                  <br>
                  <div>06.03.15 19:26, Monah Baki пишет:<br>
                  </div>
                  <div>
                    <div>
                      <blockquote type="cite">
                        <div dir="ltr">
                          <div>I went and changed the <a href="http://10.0.0.0/8" target="_blank">10.0.0.0/8</a>
                            to 10.0.0.23, which is the client station we
                            are testing on, same results. Forward loop
                            detected<br>
                            <br>
                          </div>
                          Thanks<br>
                        </div>
                        <div class="gmail_extra"><br>
                          <div class="gmail_quote">On Fri, Mar 6, 2015
                            at 8:14 AM, Antony Stone <span dir="ltr"><<a href="mailto:Antony.Stone@squid.open.source.it" target="_blank">Antony.Stone@squid.open.source.it</a>></span>
                            wrote:<br>
                            <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span>On
                                Friday 06 March 2015 at 14:03:28 (EU
                                time), Monah Baki wrote:<br>
                                <br>
                                > Hi All,<br>
                                ><br>
                                > As an addition to my yesterday's
                                issue,<br>
                                ><br>
                                > Tail -f cache.log, I am getting the
                                following:<br>
                                ><br>
                                > 015/03/06 13:54:02| WARNING:
                                Forwarding loop detected for:<br>
                                <br>
                              </span>> Any ideas?<br>
                              <br>
                              Is your NAT rule catching the HTTP
                              requests from the proxy itself (as well as<br>
                              the requests from the clients) and sending
                              *everything* to the proxy<br>
                              (including the requests the proxy is
                              trying to make out to the Internet)?<br>
                              <br>
                              I'm not an expert on Cisco or BSD, but it
                              does strike me that your rule:<br>
                              <span><br>
                                rdr pass inet proto tcp from <a href="http://10.0.0.0/8" target="_blank">10.0.0.0/8</a> to any
                                port 80 -> 10.0.0.24 port 3129<br>
                                <br>
                              </span>looks like it will match requests
                              from the proxy's address 10.0.0.24 as well<br>
                              as all the clients...<br>
                              <br>
                              Try adding an exception in before the NAT
                              rule, saying "traffic from 10.0.0.24<br>
                              should not be NATted".<br>
                              <br>
                              <br>
                              Regards,<br>
                              <br>
                              <br>
                              Antony.<br>
                              <span><font color="#888888"><br>
                                  --<br>
                                  "Once you have a panic, things tend to
                                  become rather undefined."<br>
                                  <br>
                                   - murble<br>
                                  <br>
                                                                       
                                               Please reply to the list;<br>
                                                                       
                                                     please *don't* CC
                                  me.<br>
                                </font></span>
                              <div>
                                <div>_______________________________________________<br>
                                  squid-users mailing list<br>
                                  <a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br>
                                  <a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
                                </div>
                              </div>
                            </blockquote>
                          </div>
                          <br>
                        </div>
                        <br>
                        <fieldset></fieldset>
                        <br>
                        <pre>_______________________________________________
squid-users mailing list
<a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a>
<a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a>
</pre>
                      </blockquote>
                      <br>
                    </div>
                  </div>
                </div>
                <br>
                _______________________________________________<br>
                squid-users mailing list<br>
                <a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br>
                <a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
                <br>
              </blockquote>
            </div>
            <br>
          </div>
        </blockquote>
        <br>
        <br>
        </div>
    </blockquote>
    <br>
  </div></div></div>

</blockquote></div><br></div>