Can't run squid with leased line (2)

From: Ertan Kucukoglu <ertank@dont-contact.us>
Date: Wed, 12 Apr 2000 21:26:55 +0300

Hello,

I'm using squid2.3S1 on a FreeBSD 4.0. Box have two NICs. One NIC have real
ip (195.33.200.146) and the other have private ip (192.168.1.128).

195.33.200.146 is connected directly to a router. And 192.168.1.128 is
connected to a local HUB. With my box I use a small firewall (you can find
the details below) and NAT. NAT is because I couldn't run squid.

I can surf on internet with lynx on FreeBSD machine. Squid is running normal
(can find dns servers, can send access denied pages to restricted clients
etc.) If I try to connect from an allowed client, client just connects to
squid and little after that browser says me "document contains no
information".

Before my previous posts (subject "Can't run squid with leased line") I
posted my squid configuration and related files. And I think they're OK.
Nobody replied about wrong settings. Just I get DNS issues. So, below I'm
sending my ipfw and NAT settings.

My ipfw configuration is as follows:
ipfw -f flush
# natd below is 8668 numbered port.
ipfw add divert natd all from any to any via xl1
ipfw add 100 pass all from any to any via lo0
ipfw add 200 deny all from any to 127.0.0.0/8
ipfw add 65000 pass all from any to any

And my natd.conf looks like:
redirect_port tcp 192.168.1.128:25 25
redirect_port tcp 192.168.1.128:110: 110
redirect_port tcp 192.168.1.128:80 80
redirect_port tcp 192.168.1.128:8080 8080
redirect_port tcp 192.168.1.128:21 21
redirect_port tcp 192.168.1.128:23 23
redirect_port tcp 192.168.1.128:143 143
# I tried with below line and without it both doesn't work.
redirect_port tcp 192.168.1.128:3128 3128

I don't think (but of course not sure) this is a DNS problem. I can surf the
net with lynx. Also, if I setup client computer's gateway options they can
surf, too. If I use squid with ip numbers instead of domain names on a proxy
enabled client there is no problem. I can connect to the site with squid.

Until now I just can't figureout what the problem is. I can surf with lynx
etc., but can't surf with squid. I look at the logs. There is no line about
my domain name requests, but IP requests are served very good.

What can I try else? What can I do to use squid with domain names as usual
way?

Best Regards,

--
Ertan Kucukoglu
ertank@ozlerplastik.com
Received on Wed Apr 12 2000 - 12:32:54 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:52:55 MST