Re: [squid-users] Linux 2.4.18, squid 2.4.S3, IOS 12.2(5) wccp help!

your squid configuration is wrong. see how to install squid as a
transparent proxy. you forgot to add
httpd_accel_host virtual
httpd_accle_proxy on
and ...

Mahmoud Taghizadeh

On Fri, 3 May 2002, Guy Fraser wrote:

> Hi
>
> I may be blind but I can't see the problem.
>
> The problem I am having is that squid works when manualy configured but send
> errors when attempting to access a site transparently.
>
> Here is all the info I could think of :
>
> --------
>
> router version
>
> IOS (tm) 3600 Software (C3640-IS-M), Version 12.2(5), RELEASE SOFTWARE (fc1)
>
> --------
>
> related? cisco config
>
> ip wccp version 1
> ip wccp web-cache redirect-list 162
>
> interface FastEthernet0/0
> ip address 206.75.213.1 255.255.255.0
> ip route-cache same-interface
>
> interface FastEthernet1/0
> ip wccp web-cache redirect out
>
> access-list 162 permit ip host 206.75.213.195 any
> access-list 162 permit ip host 206.75.213.251 any
>
> --------
>
> #show ip wccp
> Global WCCP information:
> Router information:
> Router Identifier: 206.75.213.1
> Protocol Version: 1.0
>
> Service Identifier: web-cache
> Number of Cache Engines: 1
> Number of routers: 1
> Total Packets Redirected: 663
> Redirect access-list: 162
> Total Packets Denied Redirect: 2941914
> Total Packets Unassigned: 0
> Group access-list: -none-
> Total Messages Denied to Group: 0
> Total Authentication failures: 0
>
> --------
>
> Server versions
>
> Linux poseidon.incentre.net 2.4.18-0.4smp #1 SMP Wed Mar 13 10:19:26 EST
> 2002 i686 unknown
>
> Squid Cache: Version 2.4.STABLE3
>
> --------
>
> ip_wccp install procedure
>
> ip_wccp.o compiled with :
>
> gcc -D__KERNEL__ -I/usr/src/linux-2.4/include -Wall -Wstrict-prototypes -O2 \
> -fomit-frame-pointer -fno-strict-aliasing -pipe -fno-strength-reduce -m386 \
> -DCPU=386 -DMODULE -DMODVERSIONS -include \
> /usr/src/linux-2.4/include/linux/modversions.h -c ip_wccp.c
>
> [no errors]
>
> mv ip_wccp.o /lib/modules/2.4.18-0.4smp/kernel/net/ipv4/ip_wccp.o
>
> pico /lib/modules/2.4.18-0.4smp/modules.dep
>
> add line:
>
> /lib/modules/2.4.18-0.4smp/kernel/net/ipv4/ip_wccp.o:
>
> /sbin/modprobe ip_wccp
>
> [no errors]
>
> /sbin/depmod -a -e
>
> [no errors]
>
> --------
>
> squid.conf
>
> http_port 3128
> hierarchy_stoplist cgi-bin ?
> acl QUERY urlpath_regex cgi-bin \?
> no_cache deny QUERY
> cache_mem 512 MB
> cache_dir ufs /var/spool/squid 40731 16 256
> ftp_user poseidon@incentre.net
> acl all src 0.0.0.0/0.0.0.0
> acl manager proto cache_object
> acl localhost src 127.0.0.1/255.255.255.255
> http_access allow manager localhost
> http_access deny manager
> http_access allow all
> httpd_accel_uses_host_header on
> wccp_router 206.75.213.1
>
> --------
>
> ipchains configuration
>
> :input ACCEPT
> :forward ACCEPT
> :output ACCEPT
> -A input -s 0/0 -d 0/0 -i lo -j ACCEPT
> -A input -s 0/0 -d 206.75.213.171 80 -p tcp -y -j ACCEPT
> -A input -s 0/0 -d 0/0 80 -p tcp -j REDIRECT 3128
> -A input -s 0/0 -d 0/0 8080 -p tcp -j REDIRECT 3128
> -A input -s 206.75.213.0/24 -d 0/0 22 -p tcp -y -j ACCEPT
> -A input -s 0/0 -d 206.75.213.171 3128 -p tcp -y -j ACCEPT
> -A input -s 0/0 -d 206.75.213.171 8080 -p tcp -y -j ACCEPT
> -A input -s 0/0 -d 206.75.213.171 3130 -p udp -j ACCEPT
> -A input -s 0/0 2048 -d 0/0 2048 -p udp -j ACCEPT
> -A input -s 198.161.96.5 53 -d 0/0 -p udp -j ACCEPT
> -A input -s 204.209.46.1 53 -d 0/0 -p udp -j ACCEPT
> -A input -s 0/0 -d 0/0 137 -p udp -j REJECT
> -A input -s 0/0 -d 0/0 138 -p udp -j REJECT
> -A input -s 0/0 520 -p udp -j REJECT
> -A input -s 0/0 -d 0/0 -p tcp -y -j REJECT -l
> -A input -s 0/0 -d 0/0 -p udp -j REJECT -l
>
> --------
>
> Browser output from {http://www.apple.com/} using manual proxy connection
> works properly.
>
> Browser output from {http://www.apple.com/} using direct connection :
>
> ERROR
> The requested URL could not be retrieved
>
> While trying to retrieve the URL: /
>
> The following error was encountered:
>
> * Invalid URL
>
> Some aspect of the requested URL is incorrect. Possible problems:
>
> * Missing or incorrect access protocol (should be `http://'' or similar)
> * Missing hostname
> * Illegal double-escape in the URL-Path
> * Illegal character in hostname; underscores are not allowed
>
> Your cache administrator is root.
> Generated Fri, 03 May 2002 00:32:22 GMT by poseidon.incentre.net
> (Squid/2.4.STABLE3)
>
> --------
>
>
>
Received on Sat May 04 2002 - 02:43:18 MDT