On 26/02/2016 4:40 a.m., secoonder wrote: > Amos Thank you very Much for your answer. > The firewall rule full accept. > """Do you have ICMP/ICMPv6 disabled on your network?""" > i changed the line at down > root@adana:/etc/squid3# more /etc/sysctl.conf | grep ipv6 > net.ipv6.conf.all.forwarding=1 That is a router setting. About whether the machine it is set on is a IPv6-enabled router or not. ICMP blocking/denial is usually iptables/ip6tables rules. > But the result is still the same.Or a made from other place for enable > icmpv6 ? ICMP issues / blocking / disabled can be anywhere in the network. To affect Squid its usually along the path somewhere between Squid and the server its trying to get to. Thats why I asked. The more impact it has the closer its likely to be to your proxy, so by the sounds of it I suspected your own network first. But it could be your ISP or anyone up the provider chain toward the servers you are contacting. It could also be other problems entirely. So ICMP is just something to look into first to make sure the basic traffic controls are working. > Amos and Antony. > i have a suspection from these lines. > #http_port 3129 > http_port 3128 intercept > Do you think these lines are true _?Do you have a suggestion for these > lines? > cache_log is still the same > 2016/02/25 17:53:35| ERROR: No forward-proxy ports configured. > 2016/02/25 17:53:35| ERROR: No forward-proxy ports configured. > 2016/02/25 17:53:35| ERROR: No forward-proxy ports configured. > 2016/02/25 17:53:35| ERROR: No forward-proxy ports configured. > 2016/02/25 17:53:35| ERROR: No forward-proxy ports configured. > 2016/02/25 17:53:35| ERROR: No forward-proxy ports configured. > 2016/02/25 17:53:36| ERROR: No forward-proxy ports configured. > 2016/02/25 17:53:36| ERROR: No forward-proxy ports configured. > 2016/02/25 17:53:36| ERROR: No forward-proxy ports configured. > 2016/02/25 17:53:36| ERROR: No forward-proxy ports configured. > 3128 is the Squid registered port, and used for forward-proxy by default. You made it an intercept port, and left no other port for the forward-proxy traffic. It is best to make a random port for intercept and leave the registered 3128 for forward-proxy traffic. The intercept port is private between Squid and the machine NAT system, so can be any number you like which doesn't clash with another service. Amos _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
