Re: [squid-users] Forwarding loop detected.

Suhaib Ahmad wrote:
> Hello,
>
> I've squid2.6 STABLE running as web-accelerator, on 'image' (having
> ip:67.107.145.109) machine with parent configured as 192.168.7.1.
> 'image' machine is also the nameserver having 'hosts' file entry:
>
> 127.0.0.1 localhost.localdomain localhost
>
> The squid-cache stops working sometime throwing 'Forward loop
> detected' warning in cache.log. Can anyone suggest the remedie.
> Thanks.
>
> ---- squid.conf ----
> http_port 80 transparent

http://wiki.squid-cache.org/SquidFaq/ReverseProxy#head-7fa129a6528d9a5c914f8dd5671668173e39e341

> cache_peer 192.168.7.1 parent 81 0 no-query originserver weight=1
> http_access allow all

Asking for abuse.

Interesting. Using the originserver tagline to cache_peer seems to
prevent some of the obvious avenues. But you should still at least
prevent CONNECT requests to ports other than 443, and any requests to
ports other than those labeled "Safe" in the default squid.conf.

> acl all src 0.0.0.0/0.0.0.0
> icp_access allow all
>
>

SNIP

Yup. Looks like a forwarding loop. Set up your accelerator properly,
and I imagine this will be resolved.
>
> Regards,
> Suhaib

Chris
Received on Thu Jun 07 2007 - 13:23:02 MDT