Dave Coventry wrote:
Hi Amos. I feel I'm getting there, albeit slowly... I can ping www.google.com from the client Laptop. but I'm getting this error in Firefox: ERROR The requested URL could not be retrieved While trying to retrieve the URL: http://www.google.com/search? The following error was encountered: * Unable to forward this request at this time. This request could not be forwarded to the origin server or to any parent caches. The most likely cause for this error is that: * The cache administrator does not allow this cache to make direct connections to origin servers, and
Did you read that error page carefully? or the first lines of my previous post?
squid.conf seems to have a line never_direct deny all or something to that effect for your laptop.
* All configured parent caches are currently unreachable. Your cache administrator is webmaster. Generated Thu, 10 Jan 2008 12:55:03 GMT by Base (squid/2.6.STABLE14) My /var/logs/squid/access.log is as follows: root@Base:/home/dave# cat /var/log/squid/access.log 192.168.60.199 - - [10/Jan/2008:10:26:02 +0200] "GET http://www.cricinfo.com/ HTTP/1.1" 504 1408 TCP_MISS:ANY_PARENT 192.168.60.199 - - [10/Jan/2008:10:26:40 +0200] "GET http://en-gb.start2.mozilla.com/firefox? HTTP/1.1" 504 1440 TCP_MISS:ANY_PARENT 122.116.116.34 - - [10/Jan/2008:12:14:08 +0200] "GET http://www.scanproxy.com/px_judge.php? HTTP/1.0" 503 1622 TCP_MISS:NONE 192.168.60.199 - - [10/Jan/2008:14:51:17 +0200] "GET http://content-rsa.cricinfo.com/wivzimsa/engine/current/match/298803.html? HTTP/1.1" 503 1687 TCP_MISS:NONE 192.168.60.199 - - [10/Jan/2008:14:51:24 +0200] "GET http://content-rsa.cricinfo.com/wivzimsa/engine/current/match/298803.html HTTP/1.1" 503 1685 TCP_MISS:NONE 192.168.60.199 - - [10/Jan/2008:14:55:03 +0200] "GET http://www.google.com/search? HTTP/1.1" 503 1597 TCP_MISS:NONE 192.168.60.199 - - [10/Jan/2008:14:55:20 +0200] "GET http://www.cricinfo.com/ HTTP/1.1" 503 1587 TCP_MISS:NONE My /var/logs/squid/cache.log is as follows: 2008/01/10 10:19:25| Starting Squid Cache version 2.6.STABLE14 for i386-debian-linux-gnu... 2008/01/10 10:19:25| Process ID 6652 2008/01/10 10:19:25| With 1024 file descriptors available 2008/01/10 10:19:25| Using epoll for the IO loop 2008/01/10 10:19:25| DNS Socket created at 0.0.0.0, port 32782, FD 6 2008/01/10 10:19:25| Adding domain linux.lan from /etc/resolv.conf 2008/01/10 10:19:25| Adding nameserver 192.168.60.254 from /etc/resolv.conf 2008/01/10 10:19:25| User-Agent logging is disabled. 2008/01/10 10:19:25| Referer logging is disabled. 2008/01/10 10:19:25| Unlinkd pipe opened on FD 11 2008/01/10 10:19:25| Swap maxSize 102400 KB, estimated 7876 objects 2008/01/10 10:19:25| Target number of buckets: 393 2008/01/10 10:19:25| Using 8192 Store buckets 2008/01/10 10:19:25| Max Mem size: 8192 KB 2008/01/10 10:19:25| Max Swap size: 102400 KB 2008/01/10 10:19:25| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec 2008/01/10 10:19:25| Rebuilding storage in /var/spool/squid (CLEAN) 2008/01/10 10:19:25| Using Least Load store dir selection 2008/01/10 10:19:25| Set Current Directory to /var/spool/squid 2008/01/10 10:19:25| Loaded Icons. 2008/01/10 10:19:25| Accepting transparently proxied HTTP connections at 0.0.0.0, port 3128, FD 13. 2008/01/10 10:19:25| Accepting ICP messages at 0.0.0.0, port 3130, FD 14. 2008/01/10 10:19:25| HTCP Disabled. 2008/01/10 10:19:25| WCCP Disabled. 2008/01/10 10:19:25| Ready to serve requests. 2008/01/10 10:19:25| Done reading /var/spool/squid swaplog (56 entries) 2008/01/10 10:19:25| Finished rebuilding storage from disk. 2008/01/10 10:19:25| 56 Entries scanned 2008/01/10 10:19:25| 0 Invalid entries. 2008/01/10 10:19:25| 0 With invalid flags. 2008/01/10 10:19:25| 56 Objects loaded. 2008/01/10 10:19:25| 0 Objects expired. 2008/01/10 10:19:25| 0 Objects cancelled. 2008/01/10 10:19:25| 0 Duplicate URLs purged. 2008/01/10 10:19:25| 0 Swapfile clashes avoided. 2008/01/10 10:19:25| Took 0.3 seconds ( 207.6 objects/sec). 2008/01/10 10:19:25| Beginning Validation Procedure 2008/01/10 10:19:25| Completed Validation Procedure 2008/01/10 10:19:25| Validated 56 Entries 2008/01/10 10:19:25| store_swap_size = 1920k 2008/01/10 10:19:25| Configuring Parent proxy.ua.pt/3128/3130 2008/01/10 10:19:26| storeLateRelease: released 0 objects 2008/01/10 10:22:32| TCP connection to proxy.ua.pt/3128 failed 2008/01/10 10:23:02| TCP connection to proxy.ua.pt/3128 failed 2008/01/10 10:23:10| TCP connection to proxy.ua.pt/3128 failed 2008/01/10 10:23:32| TCP connection to proxy.ua.pt/3128 failed 2008/01/10 10:23:40| TCP connection to proxy.ua.pt/3128 failed 2008/01/10 10:24:02| TCP connection to proxy.ua.pt/3128 failed 2008/01/10 10:24:10| TCP connection to proxy.ua.pt/3128 failed 2008/01/10 10:24:32| TCP connection to proxy.ua.pt/3128 failed 2008/01/10 10:24:40| TCP connection to proxy.ua.pt/3128 failed 2008/01/10 10:25:02| TCP connection to proxy.ua.pt/3128 failed 2008/01/10 10:25:02| Detected DEAD Parent: proxy.ua.pt 2008/01/10 10:25:10| TCP connection to proxy.ua.pt/3128 failed 2008/01/10 10:25:32| TCP connection to proxy.ua.pt/3128 failed 2008/01/10 10:25:40| TCP connection to proxy.ua.pt/3128 failed 2008/01/10 10:26:02| TCP connection to proxy.ua.pt/3128 failed 2008/01/10 10:26:10| TCP connection to proxy.ua.pt/3128 failed 2008/01/10 10:26:40| TCP connection to proxy.ua.pt/3128 failed 2008/01/10 12:14:08| Failed to select source for 'http://www.scanproxy.com/px_judge.php?p=3128' 2008/01/10 12:14:08| always_direct = -1 2008/01/10 12:14:08| never_direct = 1 2008/01/10 12:14:08| timedout = 0 2008/01/10 14:51:17| Failed to select source for 'http://content-rsa.cricinfo.com/wivzimsa/engine/current/match/298803.html?view=live;wrappertype=mainframe' 2008/01/10 14:51:17| always_direct = -1 2008/01/10 14:51:17| never_direct = 1 2008/01/10 14:51:17| timedout = 0 2008/01/10 14:51:24| Failed to select source for 'http://content-rsa.cricinfo.com/wivzimsa/engine/current/match/298803.html' 2008/01/10 14:51:24| always_direct = -1 2008/01/10 14:51:24| never_direct = 1 2008/01/10 14:51:24| timedout = 0 On Jan 10, 2008 11:29 AM, Amos Jeffries wrote:These requests are hitting squid but squid is configured to deny direct access outbound (never_direct is 1). Probably without any peers configured to handle non-direct access. I think it should be as simple as taking the space out of your config setting string: option domain-name " domain.org"; I would expect the above to be attempting a DNS lookup of exactly "Base. domain.org" and failing.
-- Please use Squid 2.6STABLE17 or 3.0STABLE1. There are serious security advisories out on all earlier releases.
