> -----Original Message----- > From: Henrik Nordstrom [mailto:hno@xxxxxxxxxxxxxxx] > Sent: Friday, 3 June 2005 1:24 AM > To: Frank Hamersley > Cc: 'Squid-Users (E-mail)' > Subject: RE: [squid-users] Abridged URL gives weird squid error on > STABLE10? > > On Thu, 2 Jun 2005, Frank Hamersley wrote: > > > Config #1 - iptables DNAT port 80 to 3128 - FAILED!! > > ------------------------------------------------------------------ > > 1116851967.015 0 10.1.1.96 TCP_DENIED/400 1539 GET > > /firefox?client=firefox-a&rls=org.mozilla:en-US:official - > NONE/- text/html > > 1116851967.135 5 10.1.1.96 TCP_DENIED/400 1443 GET > /favicon.ico - > > NONE/- text/html > > ------------------------------------------------------------------ > > This looks very much like an attempt in using transparent interception > without configuring the required settings in squid.conf. > > Regards > Henrik Thanks for the tip Henrik - I had mistakenly assumed that the "out of the shrink wrap" config was transparent proxy oriented. Silly moi! Curiously I am sure it did function "correctly" for nearly 24 hours before I got the phone call from the better half saying that the net was a mill pond! I remain convinced this was the case because when I installed and tested it the evening before every thing seemed OK. I had verified with SNMP from MRTG (this was the purpose of the exercise) to see some cache hits etc but am wondering now if I was looking at the right thing - BTW it was about 1:00 AM so after factoring that in - who knows what I saw! Regardless, it works now. Perhaps the only thing I can see as a potential improvement to a great package would be for Squid to complain politely if squid.conf looks untouched by human hands! Given this is an open source product when time allows I will look at producing the "patch" myself although I not going to hold my breath! Cheers, Frank.
