Re: [squid-users] problem with a website

From: Isaac Witmer <isaaclw_at_gmail.com>
Date: Wed, 26 May 2010 15:50:31 +0300

On Wed, May 26, 2010 at 3:24 PM, Amos Jeffries <squid3_at_treenet.co.nz> wrote:
> Isaac Witmer wrote:
>>
>> I'm getting an error when I attempt to view the website:
>> http://cpanel.byethost.com/index.php
>>
>> ERROR
>> The requested URL could not be retrieved
>> While trying to retrieve the URL: http://cpanel.byethost.com/index.php
>> The following error was encountered:
>> Access Denied.
>> Access control configuration prevents your request from being allowed
>> at this time. Please contact your service provider if you feel this is
>> incorrect.
>> Your cache administrator is webmaster.
>> Generated Wed, 26 May 2010 09:12:53 GMT by localhost (squid/3.0.STABLE8)
>>
>> I've gone through the config, but I can't figure out what's wrong.
>> This is the first and only website that I have problems. If I dodge
>> the cache, then I don't have any problem with the website, and this
>> page doesn't show up (ie: it _is_ the local cache).
>> It's also interesting that this page doesn't show the address I have
>> in the config (though the other pages have).
>>
>> authenticate_ip_ttl 2 hours
>> acl manager proto cache_object
>> acl localhost src 127.0.0.1/32
>> acl to_localhost dst 127.0.0.0/8
>> acl localnet src 10.42.43.0/255.255.255.0 # RFC1918 possible internal
>> network
>
> <snip>
>>
>> http_access allow localnet
>> http_access allow localhost
>> http_access deny all
>> http_reply_access allow localnet
>> http_reply_access allow localhost
>> http_reply_access deny all
>
> <snip>
>>
>> http_port 3128 transparent
>
> <snip>
>>
>> ... ClientIP: 41.223.57.82
>
> <snip>
>
> You are trying to access that proxy from a machine whose IP address is
> 41.223.57.82. This IP address is not listed as one of the local network IPs
> permitted to use the proxy.
>
> Amos
> --
> Please be using
>  Current Stable Squid 2.7.STABLE9 or 3.1.3
>

Do you have any idea why it would have that client IP address?:

eth0 Link encap:Ethernet HWaddr 00:0d:87:cf:d1:2c
          inet addr:10.42.43.1 Bcast:10.42.43.255 Mask:255.255.255.0
          inet6 addr: fe80::20d:87ff:fecf:d12c/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
          RX packets:771476 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2541890 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:186752689 (186.7 MB) TX bytes:3438763685 (3.4 GB)
          Interrupt:18 Base address:0xe800

lo Link encap:Local Loopback
          inet addr:127.0.0.1 Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING MTU:16436 Metric:1
          RX packets:149195 errors:0 dropped:0 overruns:0 frame:0
          TX packets:149195 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:158504638 (158.5 MB) TX bytes:158504638 (158.5 MB)

ppp0 Link encap:Point-to-Point Protocol
          inet addr:172.20.85.215 P-t-P:10.64.64.64 Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
          RX packets:9710 errors:0 dropped:0 overruns:0 frame:0
          TX packets:11831 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:3
          RX bytes:2895216 (2.8 MB) TX bytes:3073720 (3.0 MB)

Even stranger is that when I try and ping, it fails:
PING 41.223.57.82 (41.223.57.82) 56(84) bytes of data.
From 172.16.15.2 icmp_seq=1 Time to live exceeded
From 172.16.15.2 icmp_seq=2 Time to live exceeded
From 172.16.15.2 icmp_seq=3 Time to live exceeded
Received on Wed May 26 2010 - 12:50:58 MDT

This archive was generated by hypermail 2.2.0 : Wed May 26 2010 - 12:00:07 MDT