Hi, After adding the below option always_direct allow all I get a different error The following error was encountered: * Connection to 172.27.1.10 Failed The system returned: (111) Connection refused The remote host or network may be down. Please try the request again. Your cache administrator is root. Regards, Mario -----Original Message----- From: Amos Jeffries [mailto:squid3@xxxxxxxxxxxxx] Sent: Wednesday, August 20, 2008 10:14 AM To: Chris Robertson Cc: squid-users@xxxxxxxxxxxxxxx Subject: Re: Reverse Proxy Chris Robertson wrote: > Mario Almeida wrote: >> Hi All, >> >> Below is the setting I have done to test a reverse proxy >> >> http_port 3128 accel defaultsite=xyz.example.com vhost >> >> cache_peer 172.27.1.10 parent 8080 0 no-query originserver name=server1 >> acl server1_acl dstdomain www.xyz.example.com xyz.example.com >> cache_peer_access server1 allow server1_acl >> cache_peer_access server1 deny all >> >> But could not get it done >> Bellow is the error message what I get >> >> >> ERROR >> The requested URL could not be retrieved >> >> While trying to retrieve the URL: http:// xyz.example.com / >> >> The following error was encountered: >> >> * Unable to forward this request at this time. >> This request could not be forwarded to the origin server or to any parent >> caches. The most likely cause for this error is that: >> >> * The cache administrator does not allow this cache to make direct >> connections to origin servers, and >> > > This seems unlikely given the cache_peer_access line, so... > >> * All configured parent caches are currently unreachable. > > This is far more likely the issue at hand. Check your cache.log for any > clues. Verify you have the right IP and port for your parent server, > and that there are no firewall rules preventing access. Try using wget > or Lynx on your Squid server to grab a page off the origin server. > >> Your cache administrator is root. >> >> >> >> Regards, >> Remy >> > > Chris There is also a weird side-case rarely seen with dstdomain thst needs checking here. Mario: does it work if you change the ACL line to: acl server1_acl dstdomain .xyz.example.com If not, check your config for lines mentioning always_direct or never_direct, and the network linkage between test proxy and web server as mentioned by Chris. Amos -- Please use Squid 2.7.STABLE4 or 3.0.STABLE8