Re: [squid-users] Transparent Proxy weirdness

For what it's worth, I've tried rebuilding Squid (STABLE2) again,
nothing has changed. The build flags I used:

--enable-ssl --datadir=/usr/local/share/squid --localstatedir=/var/squid
--enable-pf-transparent --prefix=/usr/local --sysconfdir=/etc

Made sure that /dev/pf was g+rw for squid:squid, built the cache, and
started squid with the following config file (see below). The
access.log reports:

1051739938.863 8477 192.168.0.42 TCP_MISS/503 1390 GET
http://www.osnews.com:3128/ - NONE/- text/html

*sigh*

[/etc/squid.conf]
http_port 127.0.0.1:3128
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl our_networks src 192.168.0.0/24
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl Safe_ports port 80 # http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access allow our_networks
http_access deny to_localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny all
coredump_dir /var/squid/cache
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
cache_effective_user squid
cache_effective_group squid

-- 
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net