[SQU] Can I do this?

From: tom <tallison@dont-contact.us>
Date: Mon, 27 Nov 2000 21:06:42 -0500

I am beginning to wonder if I can even do this:

I have a Linux gateway with two network cards. It is running
named and squid.
some details:
eth0 123.123.123.123 Internet connection
eth1 192.168.0.1 Local LAN
Named has a configuration for all the IP addresses as follows:
123.123.123.123 == janus.domain.net
192.168.0.1 == gandolf.domain.net
with CNAMES of www==janus so that my www.domain.net resolves to
123.123.123.123

Now, when squid starts up, the gethostname function gives it
gandolf (192.168.0.1).

My internal connections are 192.168.0.100 & 192.168.0.200 with one
of them being the web server that I'm trying to proxy and the
other just a workstation.

My internal web browsers are proxied to 192.168.0.1:8080

>From the squid Docs I should be able to do the following:
http_port 80 8080
httpd_accel_name 192.168.0.200 (I'm not using the domain name -
good/bad?)
httpd_accel_port 80

I have the acl set to the defaults plus:
192.168.0.0/24 == allow as source
123.123.123.123:80 == allow as destination
192.168.0.200:80 == allow as destination
0/0 (all) is set to deny.

_with_proxy is on.
_host_header is also on.

Now, I can get out with no problem

But I can't get to my own web site www.domain.net. I can't get
there from internal or external IP's.
I can get to 192.168.0.200 from internal, through the cache with
no problems.

I probably have a forward loop. But I can't find enough
information on how they manifest themselves, how to block them, or
how to diagnos them (other then grepping for "forwarding loop")

Here's the last "Forwarding loop detected for:
GET / HTTP / 1.0
If-Modified-Since: Tue, 21 Nov 2000 11:12:36 GMT; length=2673
User-Agent: Mozilla/4.73[en] (X11; U; Linux 2.2.16 i686)
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg,
image/png, */*
Accept-Encoding: gzip
Accept-Language: en
Accept Charset: iso8859-1, *, utf-8
Via 1.0 gandolf.domain.net:8080 (Squid/2.3.STABLE4)
X-Forwarded-For: 192.168.0.100
Host: www.domain.net
Cache-Control: max-age=259200
Connection: keep-alive
...
gandolf.domain.net:8080 is the proxy address for my browser
192.168.0.100 is the IP address for the browser/client that I'm
coming from
www.domain.net is the address that I requested from my browser.

If I grep Via ./cache.log the only entry I get is for
gandolf.domain.net:8080.
But the real killer is that I get Access Denied, yet according to
cache.log I get:
The request GET http://www.domain.net:80/ is ALLOWED, because it
matched ...

And then cache.log ends with no date to process ((11) Resource
temporarily unavailable). yet, it's running..

So, is it possible to configure squid such that I can proxy my
browsers on port 8080 and serve webpages on port 80 through
another computer which is also on port 80? I can't find anything
in the docs that does this successfully.

help?

--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html
Received on Mon Nov 27 2000 - 19:07:01 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:56:37 MST