RE: [squid-users] Cannot access google search results and other https sites through squid proxy.

From: Development Team <dev_at_hymes.name>
Date: Tue, 3 Jun 2014 11:00:26 -0700

The squid box hosts several services (squid + dansguardian) and is also my
router and firewall. Ip 192.168.0.128. I have windows and linux clients
bweb browsers, 192.168.0.8, 192.168.0.7. All machines are on a
192.168.0.0/16 LAN.

Dev
-----Original Message-----
From: Eliezer Croitoru [mailto:eliezer_at_ngtech.co.il]
Sent: Monday, June 02, 2014 8:20 PM
To: squid-users_at_squid-cache.org
Subject: Re: [squid-users] Cannot access google search results and other
https sites through squid proxy.

It seems a bit weird.
What IP address each machine has?

I noticed that you have a loop but I am not sure how the network looks and
why the loop happens.

Eliezer

On 06/03/2014 02:25 AM, Development Team wrote:
> I am astonished.
> It seems that the core of my problem was ipv6; ....
> TCP_MISS_ABORTED:
> "1401736785.584 20020 127.0.0.1 TCP_MISS_ABORTED/000 0 GET
> http://www.google.com/url? - HIER_DIRECT/2607:f8b0:400f:801::1013 -"
> (I just noticed the unexpected ip6 type address. I do not know if that
> is relevant. I will now try to disable ipv6.) ....
>
> I disabled ipv6 in /etc/sysctl.d/99-sysctl.conf and now http[s] works
> as expected for manually configured clients. Why would this be?
> No matter.
>
> Now I am going to try and restore the transparent proxy. I added the
> intercept attribute to the http_port confing, and now even without
> tweaking the firewall, I am getting "Forwarding loop detected"
> warnings. Clients get access denied pages....
>
>
Received on Tue Jun 03 2014 - 18:00:39 MDT

This archive was generated by hypermail 2.2.0 : Wed Jun 04 2014 - 12:00:06 MDT