[squid-users] Re: IpIntercept.cc(137) NetfilterInterception: NF getsockopt(SO_ORIGINAL_DST) failed on FD 4125: (2) No such file or directory

From: Omid Kosari <omidkosari_at_yahoo.com>
Date: Sun, 13 Oct 2013 01:49:56 -0700 (PDT)

Amos Jeffries-2 wrote
> This is how you do the exact same thing with only Squid instead of using
> jesred:
>
> acl domains_to_redirect dstdomain
> "/etc/squid3/to_redirect_program.acl"
> acl netshar_regex url_regex "/etc/squid3/netshar_regex.acl"
> deny_info 302:http://www.netshahr.com/website-unavailable/
> netshar_regex
> adapted_http_access deny domains_to_redirect redirect_regex
>
> /etc/squid3/netshar_regex.acl contiains the regex patterns being checked
> by jesred:
>
> ^http://(.+\.||)server.cn/
> ^http://cpe.management/
> ^http://wpad.domain.name/
> ^http://isatap.home/
> ^http://(.+\.||)scorecardresearch.com/

You are my hero . thanks .
except the 302: everything works . i removed it . no problem with 307 .

Just one problem . the hickup still occurs . also new log appears in
cache.log

and after average 3~4 hours squid crashes

about 45 min after squid auto restart , i see abnormal "Largest file desc
currently in use" . the most value i remember is about ~10000

File descriptor usage for squid:
        Maximum number of file descriptors: 32768
        Largest file desc currently in use: 18882
        Number of file desc currently in use: 7156

--
View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/IpIntercept-cc-137-NetfilterInterception-NF-getsockopt-SO-ORIGINAL-DST-failed-on-FD-4125-2-No-such-fy-tp4662558p4662618.html
Sent from the Squid - Users mailing list archive at Nabble.com.
Received on Sun Oct 13 2013 - 08:50:41 MDT

This archive was generated by hypermail 2.2.0 : Sun Oct 13 2013 - 12:00:05 MDT