Re: [squid-users] ICMP ping fails but Squid still runs

From: Luis Daniel Lucio Quiroz <luis.daniel.lucio_at_gmail.com>
Date: Mon, 1 Mar 2010 00:02:27 -0600

Le Dimanche 28 Février 2010 21:16:22, vous avez écrit :
> On Sun, 28 Feb 2010 21:05:18 -0600, Luis Daniel Lucio Quiroz
>
> <luis.daniel.lucio_at_gmail.com> wrote:
> > I'm having this
> >
> > 10/02/28 20:57:53| pinger: Initialising ICMP pinger ...
> > 2010/02/28 20:57:53| Icmp4.cc(82) Open: icmp_sock: (1) Operation not
> > permitted
> > 2010/02/28 20:57:53| pinger: Unable to start ICMP pinger.
> > 2010/02/28 20:57:53| Icmp6.cc(122) Open: icmp_sock: (1) Operation not
> > permitted
> > 2010/02/28 20:57:53| pinger: Unable to start ICMPv6 pinger.
> > 2010/02/28 20:57:53| FATAL: pinger: Unable to open any ICMP sockets.
> > 2010/02/28 20:57:54| storeLateRelease: released 0 objects
> >
> > However squid runs, the fact isthat my init.d service is failling
>
> becuase
>
> > RETVAL isnt 0
> >
> > I did set by hand
> > pinger_program /usr/lib64/squid/pinger
> > pinger_enable on
> >
> > and i'm very shure that ping has X atributes, what am I missing?
> >
> > TIA
> >
> > LD
>
> I've been struggling with this one myself. It's something about the
> privilege levels when run under Squid.
> I suspect it's the no_suid() call when starting child helpers in
> src/ipc.cc
>
> Amos

After doing
chmod 4755 /usr/lib64/squid/pinger

maks icmp pinger work, how ever icmp6 is not working

2010/02/28 23:51:00| pinger: Initialising ICMP pinger ...
2010/02/28 23:51:00| pinger: ICMP socket opened.
2010/02/28 23:51:00| pinger: ICMPv6 socket opened
2010/02/28 23:51:00| Icmp6.cc(199) SendEcho: Error sending to ICMPv6 packet to
[::ffff:ffff:7f00:1]. ERR: (101) Network is unreachable

2010/02/28 23:51:01| storeLateRelease: released 0 objects

however setting pinger_enable off still fails.
Could it be i have
eth0 without IP and tun0 with not ipv6 set?

LD
Received on Mon Mar 01 2010 - 06:02:21 MST

This archive was generated by hypermail 2.2.0 : Mon Mar 01 2010 - 12:00:07 MST