----- Original Message ----- From: Eliezer Croitoru <eliezer@xxxxxxxxxxxx> > i would say that the result can show some really nasty issue you are > having in the network level and ebtables+switch is the basic thing to check. > i will try to dump the tcp sessions on the interfaces using: > tcpdump -i any -X -s0 -n port 80 -w test.pcap > i will be happy to look into the packets to see if there is a clue in > them saying something about the "zero reply". > to make sure it's not squid issue try to install the rpm of squid 3.2 > http://pkgs.org/fedora-16/fedora-i386/squid-3.2.0.12-1.fc16.i686.rpm.html > i have tested it on fedora 15-16 and still the same result that it works > both on 3.1.X and 3.2.X. On the same fedora 15 machine, I loaded the squid-3.2.0.12 based on the link above and that seems to work better based on the limited test. Login/logout from the home internet seems OK. I looked at the configure options, and compile it myself the same program, and that seems to work too. However, since what I have previously tested, one of them was squid-3.2.0.18, and so I compile it using same configure options, and it did NOT work, ie my logon to yahoo mail using internet explorer 8 hang until timeout and browser gets zero sized reply. Using firefox seems OK. And I also have captured the test.pcap which I will send in a separate mail to you directly instead of mail list as it will be rejected by maillist. The configure options are included inline below :- ./configure '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' \ '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' \ '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib' \ '--libexecdir=/usr/libexec' '--sharedstatedir=/var/lib' \ '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--exec_prefix=/usr' \ '--libexecdir=/usr/lib/squid' '--localstatedir=/var' \ '--datadir=/usr/share/squid' '--sysconfdir=/etc/squid' \ '--with-logdir=$(localstatedir)/log/squid' \ '--with-pidfile=$(localstatedir)/run/squid.pid' \ '--disable-dependency-tracking' '--enable-arp-acl' \ '--enable-follow-x-forwarded-for' '--enable-auth' \ '--enable-auth-basic=DB,LDAP,MSNT,MSNT-multi-domain,NCSA,NIS,PAM,POP3,RADIUS,SASL,SMB,getpwnam' \ '--enable-auth-ntlm=smb_lm,fake' \ '--enable-auth-digest=file,LDAP,eDirectory' '--enable-auth-negotiate=kerberos' \ '--enable-external-acl-helpers=ip_user,ldap_group,session,unix_group,wbinfo_group' \ '--enable-cache-digests' '--enable-cachemgr-hostname=localhost' \ '--enable-delay-pools' '--enable-epoll' '--enable-icap-client' \ '--enable-ident-lookups' '--with-large-files' '--enable-linux-netfilter' \ '--enable-referer-log' '--enable-removal-policies=heap,lru' '--enable-snmp' \ '--enable-ssl' '--enable-storeio=aufs,diskd,ufs' '--enable-useragent-log' \ '--enable-wccpv2' '--enable-esi' '--with-aio' '--with-default-user=squid' \ '--with-filedescriptors=16384' '--with-dl' '--with-openssl' '--with-pthreads' The test is very repeated, ie when I 'make install' from squid-3.2.0.12 it works but not squid-3.2.018.