[squid-users] squid 2.7 TPROXY not working

[Amos Jeffries]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 22/10/2014 7:00 p.m., saleh madi wrote:
> Hello Amos,
> 
> I have install squid 3.4.8 and the same problem squid not works
> with tproxy. When I try to open website form client browser I see
> this error:
> 
> ########################################################### ERROR
> 
> The requested URL could not be retrieved
> 
> The following error was encountered while trying to retrieve the
> URL: http://www.sat1.de/
> 
> Connection to 4.26.247.126 failed.
> 
> The system returned: (110) Connection timed out
> 
> The remote host or network may be down. Please try the request
> again.
> 
> Your cache administrator is webmaster.
> 
> 
> Generated Tue, 21 Oct 2014 21:49:29 GMT by cache01 (squid/3.4.8)
> 
> ########################################################################
>
> 
Note: When I manually set proxy in my browser and everything works fine
and when I use redirect with nat everything works fine.
> 
> Please find the attached file for cache logs. Hope you can find the
> problem in the log file.
> 
> Thank you and Best Regards, Saleh
> 

TPROXY is receiving the traffic just fine, the problem is starting on
the outgoing side.

Please check your config file for "via off" and remove it to verify if
you are having a forwarding loop issue.

To fix forwarding loop check your router handling of packets coming
out of Squid. With TPROXY they will look *completely* identical to
packets coming directly from the client machine. Only MAC address or
interface name based routing rules will work correctly.

Amos
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)

iQEcBAEBAgAGBQJUR5ZnAAoJELJo5wb/XPRjX9YIAMb1VjzOntTgcWFPyVvRDgQU
p7y9mOA8OnS4bQr6Ln2LPS/F4xB0oPMwUfs5EFdUKzZ+HKV+LwVwPzK0RepImV4O
l5714SXSOGGh8WC7oAAKyF7cUARiD1bZDAUu1lS+gceDj64Dh/xqoEXLSJG1GS5B
TnMGVeUXOEuCsZtWJKBCWLo5lU8+rMqBn+r4RV8Ymt+69zcyYdCz4s9F898I3alA
e7yHxSLOIyJT0HdBHYSJLZdrFVW72A1BX9yHToVFxn3XshqeBHsCBFqba8UTIx2E
F8+YIt1UTUOrC2t0U2VkRM5/f4e6r+ghnBqI+AfRDzFBoul0YtKJ0rudHto30uk=
=en+V
-----END PGP SIGNATURE-----