Hi all,
I have a box with fairly restrictive firewall.
I see that the box blocks connections of squid to the requested sites when squid tries to reach/send ICMP to them:
2018/08/07 16:51:57| Error sending to ICMP packet to 213.133.127.247. ERR: (1) Operation not permitted
2018/08/07 16:51:59| Error sending to ICMP packet to 194.55.30.166. ERR: (1) Operation not permitted
2018/08/07 16:52:00| Error sending to ICMP packet to 93.184.220.29. ERR: (1) Operation not permitted
2018/08/07 16:52:00| Error sending to ICMP packet to 72.21.202.25. ERR: (1) Operation not permitted
2018/08/07 16:52:02| Error sending to ICMP packet to 54.182.206.90. ERR: (1) Operation not permitted
2018/08/07 16:52:18| Error sending to ICMP packet to 54.239.220.40. ERR: (1) Operation not permitted
2018/08/07 16:52:18| Error sending to ICMP packet to 62.38.6.83. ERR: (1) Operation not permitted
2018/08/07 16:52:20| Error sending to ICMP packet to 13.32.16.243. ERR: (1) Operation not permitted
2018/08/07 16:51:59| Error sending to ICMP packet to 194.55.30.166. ERR: (1) Operation not permitted
2018/08/07 16:52:00| Error sending to ICMP packet to 93.184.220.29. ERR: (1) Operation not permitted
2018/08/07 16:52:00| Error sending to ICMP packet to 72.21.202.25. ERR: (1) Operation not permitted
2018/08/07 16:52:02| Error sending to ICMP packet to 54.182.206.90. ERR: (1) Operation not permitted
2018/08/07 16:52:18| Error sending to ICMP packet to 54.239.220.40. ERR: (1) Operation not permitted
2018/08/07 16:52:18| Error sending to ICMP packet to 62.38.6.83. ERR: (1) Operation not permitted
2018/08/07 16:52:20| Error sending to ICMP packet to 13.32.16.243. ERR: (1) Operation not permitted
Anyone knows why squid is sending ICMP? Is this needed?
I am running 3.5.23 in tproxy mode with SSL splicing.
Thanx,
Alex
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
