RE: [squid-users] Redirect to squid with IPTABLES

From: Evan Fribourg <evan@dont-contact.us>
Date: Mon, 31 Jul 2006 11:04:33 -0700

> You could try this:
> If you did not set up the proxy in your browser (and I think
> so), you should activate "transparent proxying" in your
> squid.conf. In this case, you would redirect the traffic with
> dport 80 to <squid-host>:80, not 3128. The difference is that
> your browser does not know to use a proxy, but you are
> redirecting this foward to a proxy. Thus the proxy should
> work with transparent proxying, cause this is what you want
> squid to do.

Well, the server that I'm redirecting to already has apache on port 80, and
I don't want to put squid in front of it at this point. I just need squid
to retrieve internet requests, which is why I'm leaving it on 3128.

In the squid.conf, I put:
http_port 3128 transparent

And I get:
ERROR
The requested URL could not be retrieved

While trying to retrieve the URL: http://www.google.com

The following error was encountered:

    * Unable to forward this request at this time.

This request could not be forwarded to the origin server or to any parent
caches. The most likely cause for this error is that:

    * The cache administrator does not allow this cache to make direct
connections to origin servers, and
    * All configured parent caches are currently unreachable.

Your cache administrator is webmaster.

In the cache.log I see:
2006/07/31 10:57:07| Accepting transparently proxied HTTP connections at
0.0.0.0, port 3128, FD 11.
2006/07/31 10:57:07| Ready to serve requests.
2006/07/31 10:57:53| WARNING: transparent proxying not supported
2006/07/31 10:57:53| Failed to select source for 'http://www.google.com'
2006/07/31 10:57:53| always_direct = 0
2006/07/31 10:57:53| never_direct = 0
2006/07/31 10:57:53| timedout = 0

In access.log I see:
1154368853.534 12 <my_ip> TCP_MISS/503 1638 GET http://mail.google.com/
- NONE/- text/html

I'm assuming I'm missing something in the conf...?

Kind regards,

Evan Fribourg
Web Application Developer
Received on Mon Jul 31 2006 - 12:04:40 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Aug 01 2006 - 12:00:02 MDT