[squid-users] Squid None Aborted problem

[Amos Jeffries]

On 26/02/2016 4:40 a.m., secoonder wrote:
> Amos Thank you very Much for your answer.
> The firewall rule full accept.
> """Do you have ICMP/ICMPv6 disabled on your network?"""
> i changed the line at down
> root at adana:/etc/squid3# more /etc/sysctl.conf | grep ipv6
> net.ipv6.conf.all.forwarding=1

That is a router setting. About whether the machine it is set on is a
IPv6-enabled router or not. ICMP blocking/denial is usually
iptables/ip6tables rules.


> But the result is still the same.Or a made from other place for enable
> icmpv6 ?

ICMP issues / blocking / disabled can be anywhere in the network. To
affect Squid its usually along the path somewhere between Squid and the
server its trying to get to.

Thats why I asked. The more impact it has the closer its likely to be to
your proxy, so by the sounds of it I suspected your own network first.
But it could be your ISP or anyone up the provider chain toward the
servers you are contacting.

It could also be other problems entirely. So ICMP is just something to
look into first to make sure the basic traffic controls are working.


> Amos and Antony.
> i have a suspection from these lines.
> #http_port 3129
> http_port 3128 intercept
> Do you think these lines are true _?Do you have a suggestion for these
> lines?
> cache_log is still the same
> 2016/02/25 17:53:35| ERROR: No forward-proxy ports configured.
> 2016/02/25 17:53:35| ERROR: No forward-proxy ports configured.
> 2016/02/25 17:53:35| ERROR: No forward-proxy ports configured.
> 2016/02/25 17:53:35| ERROR: No forward-proxy ports configured.
> 2016/02/25 17:53:35| ERROR: No forward-proxy ports configured.
> 2016/02/25 17:53:35| ERROR: No forward-proxy ports configured.
> 2016/02/25 17:53:36| ERROR: No forward-proxy ports configured.
> 2016/02/25 17:53:36| ERROR: No forward-proxy ports configured.
> 2016/02/25 17:53:36| ERROR: No forward-proxy ports configured.
> 2016/02/25 17:53:36| ERROR: No forward-proxy ports configured.
> 

3128 is the Squid registered port, and used for forward-proxy by
default. You made it an intercept port, and left no other port for the
forward-proxy traffic.

It is best to make a random port for intercept and leave the registered
3128 for forward-proxy traffic. The intercept port is private between
Squid and the machine NAT system, so can be any number you like which
doesn't clash with another service.

Amos