|
Hi,
first of all what error do you get at client side? Timeout? Blank Page?
I'm also running squid in an ISG setup, my squid version is Squid Cache: Version 3.1.10 on Centos 6.5
Few things to check:
1) please ensure the iptables-rules are hit correctly by issuing .f.e:
iptables -t mangle -vnL
2)if you see packets please make sure you do not have a redirect-loop, run squid in debug mode or enable logging.
an example error can be found here:
http://www.squid-cache.org/mail-archive/squid-users/201004/0538.html
3) it's enough to configure port redirection once, you can do it with iptables on the squid box (as you did below) or directly at the ISG, if you have defined a server Pool it will look like that (probably ;))
redirect server-group REDIRECT_SERVERS
server ip xx.xx.xx.xx port 80
for iptables-redirect
or
server ip xx.xx.xx.xx port 3129
for isg redirect
4) All problems I had with that setup basically were router configuration errors. If L4 redirect does not work did you try next-hop rerouting without altering the ports?
In a Cisco ISG setup make sure the squid box uses the ISG for the return traffic and can't reach the clients directly, also make sure you are capturing the right traffic and not blocking the return packets ect.
HTH,
Alex
Jaydeep Kubavat <jaykbvt@xxxxxxxxx> hat am 8. April 2015 um 13:50 geschrieben: |
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
