+Eliezer Thanks, Ganesh J On Tue, Jul 8, 2014 at 11:46 PM, Info OoDoO <info@xxxxxxxxxxx> wrote: > Sorry for the other mail chain. it was opened accidentally yesterday. > > Thanks for the response. > > please find the required data below. > > http://pastebin.com/Abs3QmMe --> cache.log > > http://pastebin.com/eS94BHHu --> TCP Dump. > > I was able to see the site logged in access.log with http code 504, > Gateway Timed Out. so i thought the packets are sent to squid. > > For your kind attention, i have not installed Squid 3.1.10 from YUM. I > have Compiled and installed from the source with the following > options. > > http://pastebin.com/jFhzd3qj > > > Thanks, > Ganesh J > > > > On Tue, Jul 8, 2014 at 10:44 PM, Nyamul Hassan <nyamul@xxxxxxxxx> wrote: >> Ok. Good so far. I saw you opened another email about this. Please >> keep related discussions in one single thread. We had similar TProxy >> issues around 7-8 days ago. From your emails, it seems you are >> running CentOS 6.5, just like we are. The difference is that you are >> using Squid 3.1 which is available in CentOS yum. We installed the >> same on our CentOS, and confirmed that Squid 3.1 is working with >> TProxy. So, I think this is a routing / iptables issue. >> >> In that email, you mentioned that Squid is receiving the packets? How >> are you determining this? >> >> Also, can you enable: >> debug_options ALL,1 89,9 17,3 >> in your squid.conf? This will print a bunch of debug messages in >> cache.log when you try to browse through proxy. >> >> Also, before you start browsing, run this command: >> tcpdump -n -nn -e -i any dst port 80 >> That should allow you to see some packet header data. >> >> Now, try to browse from client, and pastebin the output of both >> cache.log & tcpdump. >> >> Regards >> HASSAN >> >> >> On Tue, Jul 8, 2014 at 4:54 PM, Info OoDoO <info@xxxxxxxxxxx> wrote: >>> Thanks Hassan, >>> Yes I have the following settings done. >>> >>> Please see the details in the pastebin >>> >>> http://pastebin.com/YzKDSV7J --> Find Results. >>> >>> http://pastebin.com/XhZYiDxm -->sysctl.conf >>> >>> Thanks, >>> Ganesh J >>> >>> >>> On Tue, Jul 8, 2014 at 2:29 PM, Nyamul Hassan <nyamul@xxxxxxxxx> wrote: >>>> tcpdump shows traffic flowing both ways, which is good. We also need >>>> to have the following settings: >>>> >>>> # sysctl.conf >>>> net.ipv4.ip_forward = 1 >>>> net.ipv4.conf.default.rp_filter = 0 >>>> net.ipv4.conf.all.rp_filter = 0 >>>> net.ipv4.conf.eth0.rp_filter = 0 >>>> net.ipv4.conf.eth1.rp_filter = 0 >>>> >>>> The last two lines are for my specific system where I have two NICs. >>>> Feel free to modify on your own. After changing the file running >>>> "sysctl -p" usually works. To check if it did, please run the >>>> following commands: >>>> >>>> find /proc/sys/net/ipv4/ -iname rp_filter >>>> find /proc/sys/net/ipv4/ -iname rp_filter -exec cat {} + >>>> >>>> The first shows all the rp_filter in your system. >>>> The second shows if they are indeed set to 0 as needed. >>>> >>>> Please do a pastebin for both sysctl.conf and the outputs of the find commands. >>>> >>>> Regards >>>> HASSAN >>>> >>>> >>>> On Tue, Jul 8, 2014 at 2:34 PM, Info OoDoO <info@xxxxxxxxxxx> wrote: >>>>> Thanks Hassan, >>>>> >>>>> I have covered all the steps except the WCCP Configuration, Coz i dont >>>>> use WCCP Router. I tried discovering for Routing loop and was unable >>>>> to find any, Could you please help me How to Find a Routing loop. >>>>> >>>>> Here is my Squid Conf and my TCPdump sample. >>>>> >>>>> http://pastebin.com/aJskfywx --> TCPdump >>>>> http://pastebin.com/b9u24rEC --> Squid Conf >>>>> >>>>> Thanks, >>>>> Ganesh J >>>>> >>>>> >>>>> On Tue, Jul 8, 2014 at 2:55 AM, Nyamul Hassan <nyamul@xxxxxxxxx> wrote: >>>>>> Did you check the possibility of a routing loop as described in the >>>>>> troubleshooting section of the TProxy wiki page? In fact, can you >>>>>> check that you have covered all the steps mentioned in that section? >>>>>> >>>>>> Regards >>>>>> HASSAN >>>>>> >>>>>> On Tue, Jul 8, 2014 at 2:37 AM, Info OoDoO <info@xxxxxxxxxxx> wrote: >>>>>>> Thanks Hassan, >>>>>>> >>>>>>> Now the request are passing through Squid but Failing with "110 >>>>>>> Connection Timed Out" Error. >>>>>>> >>>>>>> When I use transparent Mode its working fine. Any Idea..!! >>>>>>> >>>>>>> Thanks, >>>>>>> Ganesh J >>>>>>> Thanks, >>>>>>> OodoO Fiber, >>>>>>> +91 8940808080 >>>>>>> www.oodoo.co.in >>>>>>> >>>>>>> >>>>>>> On Tue, Jul 8, 2014 at 1:16 AM, Nyamul Hassan <nyamul@xxxxxxxxx> wrote: >>>>>>>> Hi Ganesh, >>>>>>>> >>>>>>>> In your "basic data" pastebin, seems like the "ip rule" and "ip route" >>>>>>>> rules are missing. >>>>>>>> >>>>>>>> Please see if running the following commands helps the situation: >>>>>>>> * echo 100 squidtproxy >> /etc/iproute2/rt_tables >>>>>>>> * ip rule add fwmark 1 lookup 100 >>>>>>>> * ip route add local default dev lo table 100 >>>>>>>> >>>>>>>> Regards >>>>>>>> HASSAN >>>>>>>> >>>>>>>> >>>>>>>> On Tue, Jul 8, 2014 at 1:15 AM, Nyamul Hassan <nyamul@xxxxxxxxx> wrote: >>>>>>>>> Can you also pastebin your squid.conf? >>>>>>>>> >>>>>>>>> Regards >>>>>>>>> HASSAN >>>>>>>>> >>>>>>>>> On Tue, Jul 8, 2014 at 12:53 AM, collect oodoo <collect@xxxxxxxxxxx> wrote: >>>>>>>>>> I have configured squid with the options in the below paste .. >>>>>>>>>> http://pastebin.com/jFhzd3qj >>>>>>>>>> I packets are being forwarded from the cache box to internet and i'm >>>>>>>>>> able to see the Client Public address instaed of squid Box Public >>>>>>>>>> Address.. >>>>>>>>>> the Issue here is the requests are not being forwarded by or through Squid.. >>>>>>>>>> I'm unable to view any log for the request on access.log. >>>>>>>>>> If i use the same squid in transparent mode then I'm able to view the >>>>>>>>>> requests forwarded and logged on access.log but it shows Squid Box >>>>>>>>>> Public IP address. >>>>>>>>>> Can some body Help me on this.. >>>>>>>>>> My basic Data of Machine is >>>>>>>>>> >>>>>>>>>> http://pastebin.com/TdnhnJtx >>>>>>>>>> >>>>>>>>>> Thanks, >>>>>>>>>> Ganesh J