Re: [squid-users] ICMP ping fails but Squid still runs

Luis Daniel Lucio Quiroz wrote:
> Le Dimanche 28 Février 2010 21:16:22, vous avez écrit :
>> On Sun, 28 Feb 2010 21:05:18 -0600, Luis Daniel Lucio Quiroz
>>
>> <luis.daniel.lucio_at_gmail.com> wrote:
>>> I'm having this
>>>
>>> 10/02/28 20:57:53| pinger: Initialising ICMP pinger ...
>>> 2010/02/28 20:57:53| Icmp4.cc(82) Open: icmp_sock: (1) Operation not
>>> permitted
>>> 2010/02/28 20:57:53| pinger: Unable to start ICMP pinger.
>>> 2010/02/28 20:57:53| Icmp6.cc(122) Open: icmp_sock: (1) Operation not
>>> permitted
>>> 2010/02/28 20:57:53| pinger: Unable to start ICMPv6 pinger.
>>> 2010/02/28 20:57:53| FATAL: pinger: Unable to open any ICMP sockets.
>>> 2010/02/28 20:57:54| storeLateRelease: released 0 objects
>>>
>>> However squid runs, the fact isthat my init.d service is failling
>> becuase
>>
>>> RETVAL isnt 0
>>>
>>> I did set by hand
>>> pinger_program /usr/lib64/squid/pinger
>>> pinger_enable on
>>>
>>> and i'm very shure that ping has X atributes, what am I missing?
>>>
>>> TIA
>>>
>>> LD
>> I've been struggling with this one myself. It's something about the
>> privilege levels when run under Squid.
>> I suspect it's the no_suid() call when starting child helpers in
>> src/ipc.cc
>>
>> Amos
>
>
> After doing
> chmod 4755 /usr/lib64/squid/pinger
>
> maks icmp pinger work, how ever icmp6 is not working
>
> 2010/02/28 23:51:00| pinger: Initialising ICMP pinger ...
> 2010/02/28 23:51:00| pinger: ICMP socket opened.
> 2010/02/28 23:51:00| pinger: ICMPv6 socket opened
> 2010/02/28 23:51:00| Icmp6.cc(199) SendEcho: Error sending to ICMPv6 packet to
> [::ffff:ffff:7f00:1]. ERR: (101) Network is unreachable
>
> 2010/02/28 23:51:01| storeLateRelease: released 0 objects
>
>
> however setting pinger_enable off still fails.
> Could it be i have
> eth0 without IP and tun0 with not ipv6 set?
>
> LD

Another affect of the IPv4 mapping regression Henrik caught earlier
today. There are several patches for it listed at
http://www.squid-cache.org/Versions/v3/HEAD/changesets/.

I should be able to do a bit of maintenance in a few hours and get a
smaller set of patches into 3.1 for tomorrows snapshot.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE7 or 3.0.STABLE24
   Current Beta Squid 3.1.0.17