[squid-users] intercept problem squid 3.1.18

From: jeffrey j donovan <donovan_at_beth.k12.pa.us>
Date: Sat, 31 Dec 2011 16:00:33 -0500

greetings, Im stuck and im not sure what part I should re-do.

I have an xserve running 10.6.8

I have clients routing through the system just fine with ipfw. they can access the internet via a NAT on the otherside of the squid.

compiled squid 3.1.18
Squid Cache: Version 3.1.18
configure options: '--enable-icmp' '--enable-delay-pools' '--disable-htcp' '--enable-ipfw-transparent' '--enable-snmp' '--enable-underscores' '--enable-basic-auth-helpers=NCSA,LDAP' --with-squid=/usr/local/squid-3.1.18 --enable-ltdl-convenience

squid starts

squid3:sbin root# ./squid -d1X
squid3:sbin root# 2011/12/31 15:44:18| Starting Squid Cache version 3.1.18 for i686-apple-darwin10.8.0...
2011/12/31 15:44:18| Process ID 23009
2011/12/31 15:44:18| With 1024 file descriptors available
2011/12/31 15:44:18| Initializing IP Cache...
2011/12/31 15:44:18| DNS Socket created at [::], FD 6
2011/12/31 15:44:18| DNS Socket created at 0.0.0.0, FD 7
2011/12/31 15:44:18| Adding nameserver 10.135.1.21 from /etc/resolv.conf
2011/12/31 15:44:18| Adding nameserver 10.135.1.3 from /etc/resolv.conf
2011/12/31 15:44:18| Adding nameserver 10.135.1.2 from /etc/resolv.conf
2011/12/31 15:44:18| Unlinkd pipe opened on FD 12
2011/12/31 15:44:18| Store logging disabled
2011/12/31 15:44:18| Swap maxSize 0 + 262144 KB, estimated 20164 objects
2011/12/31 15:44:18| Target number of buckets: 1008
2011/12/31 15:44:18| Using 8192 Store buckets
2011/12/31 15:44:18| Max Mem size: 262144 KB
2011/12/31 15:44:18| Max Swap size: 0 KB
2011/12/31 15:44:18| Using Least Load store dir selection
2011/12/31 15:44:18| Current Directory is /usr/local/squid/sbin
2011/12/31 15:44:18| Loaded Icons.
2011/12/31 15:44:18| Accepting intercepted HTTP connections at 10.10.60.55:3128, FD 13.
2011/12/31 15:44:18| HTCP Disabled.
2011/12/31 15:44:18| Squid plugin modules loaded: 0
2011/12/31 15:44:18| Ready to serve requests.
2011/12/31 15:44:19| storeLateRelease: released 0 objects

I add the intercept command to ipfw;
$cmd 500 fwd 10.10.60.55,3128 tcp from 10.160.0.0/16 to any dst-port 80 in recv en1

I can see the packets being fwd' to squid

00500 5 240 fwd 10.10.60.55,3128 tcp from 10.160.0.0/16 to any dst-port 80 in recv en1
00500 111 6448 fwd 10.10.60.55,3128 tcp from 10.160.0.0/16 to any dst-port 80 in recv en1
00500 117 6832 fwd 10.10.60.55,3128 tcp from 10.160.0.0/16 to any dst-port 80 in recv en1
00500 122 7088 fwd 10.10.60.55,3128 tcp from 10.160.0.0/16 to any dst-port 80 in recv en1

nothing shows up in my access.log, squid never gets the hit.

So,.. I think it's compiled correctly, but im not sure if I should re-compile this version or try another. Or maybe try with other options.
Anyone know any fancy lsof or greps i can use to find out whats happening ?

any suggestions ? - this same setup worked under 3.1.11 with osx 10.5

-j
Received on Sat Dec 31 2011 - 21:00:42 MST

This archive was generated by hypermail 2.2.0 : Sun Jan 01 2012 - 12:00:03 MST