[prev in list] [next in list] [prev in thread] [next in thread] 

List:       squid-users
Subject:    Re: [squid-users] intercept problem squid 3.1.18
From:       jeffrey j donovan <donovan () beth ! k12 ! pa ! us>
Date:       2011-12-31 22:21:33
Message-ID: 0E080BEA-8A62-45B5-9431-AB9C71CDCAE6 () beth ! k12 ! pa ! us
[Download RAW message or body]


On Dec 31, 2011, at 4:00 PM, jeffrey j donovan wrote:

> greetings, Im stuck and im not sure what part I should re-do.
> 
> I have an xserve running 10.6.8
> 
> I have clients routing through the system just fine with ipfw. they can access the \
> internet via a NAT on the otherside of the squid. 
> compiled squid 3.1.18
> Squid Cache: Version 3.1.18
> configure options:  '--enable-icmp' '--enable-delay-pools' '--disable-htcp' \
> '--enable-ipfw-transparent' '--enable-snmp' '--enable-underscores' \
> '--enable-basic-auth-helpers=NCSA,LDAP' --with-squid=/usr/local/squid-3.1.18 \
> --enable-ltdl-convenience 
> squid starts
> 
> 
> squid3:sbin root# ./squid -d1X
> squid3:sbin root# 2011/12/31 15:44:18| Starting Squid Cache version 3.1.18 for \
> i686-apple-darwin10.8.0... snip
> I can see the packets being fwd' to squid
> 
> 00500  5   240 fwd 10.10.60.55,3128 tcp from 10.160.0.0/16 to any dst-port 80 in \
> recv en1 00500   111     6448 fwd 10.10.60.55,3128 tcp from 10.160.0.0/16 to any \
> dst-port 80 in recv en1 00500   117     6832 fwd 10.10.60.55,3128 tcp from \
> 10.160.0.0/16 to any dst-port 80 in recv en1 00500   122     7088 fwd \
> 10.10.60.55,3128 tcp from 10.160.0.0/16 to any dst-port 80 in recv en1 
> 
> nothing shows up in my access.log, squid never gets the hit. 
> 
> So,.. I think it's compiled correctly, but im not sure if I should re-compile this \
> version or try another. Or maybe try with other options.  Anyone know any fancy \
> lsof or greps i can use to find out whats happening ? 
> any suggestions ? - this same setup worked under 3.1.11 with osx 10.5
> 
> -j


okay I got squid to take a hit.
The system is not operating in intercept mode. I just connected to it with my client. \
I had to specify the proxy settings in the system or browser. it appears it is not \
working in intercept mode.

here is my relevant squid.conf

http_port 10.10.60.55:3128 intercept


result when squid starts;
2011/12/31 15:44:18| Accepting  intercepted HTTP connections at 10.10.60.55:3128, FD \
13.


here is a question. -- Whats the best version of squid, If I only want the intercept \
and redirect feature. 2.7 or 3.1.x? on my traditional cache proxy systems, 3.1.+ is \
the way to go, but intercept does not require (in my case) cache and authentication. \
                Is 3.1.18 where I should stay is what im asking.
-j=


[prev in list] [next in list] [prev in thread] [next in thread]