[squid-users] TCP_DENIED/411

From: Siew Wing Loon <wlsiew@dont-contact.us>
Date: Wed, 11 May 2005 20:26:25 -0700 (PDT)

Hi all,

I am running a transparent proxy with the following
rules: -

$IPTABLES -t nat -A PREROUTING -i eth1 -s ! 10.159.2.4
-p tcp --dport 80 -j DNAT --to 10.159.2.4:3128

$IPTABLES -t nat -A POSTROUTING -o eth1 -s
10.159.2.0/24 -d 10.159.2.4 -j SNAT --to 10.159.2.1

$IPTABLES -t filter -A FORWARD -s 10.159.2.0/24 -d
10.159.2.4 -i eth1 -o eth1 -p tcp --dport 3128 -j
ACCEPT

When I try to access the trading site (example
www.domain.com), it is accessible via port 80 and 443.

But when I try to do a trading which it goes to port
81, I cant manage to do it. I get an error message in
my PC.

And, there is an error in squid access.log file as
below. What does this mean?

TCP_DENIED/411 1665 GET
http://www.domain.com/control/trading.dll? -

Regards,
WLSiew

__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
Received on Wed May 11 2005 - 21:26:27 MDT

This archive was generated by hypermail pre-2.1.9 : Wed Jun 01 2005 - 12:00:02 MDT