Re: [squid-users] Invalid Request on Squid-2.6S4

2006-11-03 Thread zulkarnain
Hi Henrik,

Now I upgrade and compile squid to 2.6Stable5. 

If squid.conf configured not to use specific ip
address on tcp_outgoing_address, there an error
messages on cache.log as shown below. How ever with
this config I'm able to browser website but unable to
spoof client ipaddress.

2006/11/04 02:25:03| tproxy
ip=192.168.1.2,0x1b9f5bcb,port=0 ERROR ASSIGN
2006/11/04 02:25:08| tproxy
ip=192.168.1.2,0x1b9f5bcb,port=0 ERROR ASSIGN
2006/11/04 02:25:12| tproxy
ip=192.168.1.3,0x1c9f5bcb,port=0 ERROR ASSIGN
2006/11/04 02:25:15| tproxy
ip=192.168.1.2,0x1c9f5bcb,port=0 ERROR ASSIGN

and If I'm using specific ip address, the error
messages as below and none can't access websites.

2006/11/04 01:05:46| commBind: Cannot bind socket FD
16 to 192.168.1.3:0: (99) Cannot assign requested
address
2006/11/04 01:05:46| commBind: Cannot bind socket FD
16 to 192.168.1.2:0: (99) Cannot assign requested
address
2006/11/04 01:05:46| commBind: Cannot bind socket FD
16 to 192.168.1.3:0: (99) Cannot assign requested
address

any help would be great. Thanks.

rgds,
Zul


--- Henrik Nordstrom <[EMAIL PROTECTED]>
wrote:

> fre 2006-11-03 klockan 01:13 -0800 skrev zulkarnain:
> 
> > http_port 3128 tproxy transparent
> 
> Ok.
> 
> > ---iptables rule
> > iptables -t tproxy -A PREROUTING -i eth1 -p tcp -m
> tcp
> > --dport 80 -j TPROXY --on-port 3128
> 
> Also looks fine.
> 
> No idea what goes wrong. Should work from what I can
> tell, but I don't
> have an environment where I can test tproxy.
> 
> Regards
> Henrik
> 



 

Low, Low, Low Rates! Check out Yahoo! Messenger's cheap PC-to-Phone call rates 
(http://voice.yahoo.com)



Re: [squid-users] Invalid Request on Squid-2.6S4

2006-11-03 Thread Henrik Nordstrom
fre 2006-11-03 klockan 01:13 -0800 skrev zulkarnain:

> http_port 3128 tproxy transparent

Ok.

> ---iptables rule
> iptables -t tproxy -A PREROUTING -i eth1 -p tcp -m tcp
> --dport 80 -j TPROXY --on-port 3128

Also looks fine.

No idea what goes wrong. Should work from what I can tell, but I don't
have an environment where I can test tproxy.

Regards
Henrik


signature.asc
Description: Detta är en digitalt signerad	meddelandedel


Re: [squid-users] Invalid Request on Squid-2.6S4

2006-11-03 Thread zulkarnain
--- Mark Elsen <[EMAIL PROTECTED]> wrote:
>  - Check the squid faq on interception , you need
> extra setting in squid.conf,
> for that , don't know them on the fly.
> 
> M.
> 

Here is my squid.conf and iptables rule

---squid.conf
http_port 3128 tproxy transparent
 
acl john src 192.168.1.2/255.255.255.255
acl mary src 192.168.1.3/255.255.255.255
 
http_access allow john
http_access allow mary
http_access deny all
 
http_reply_access allow all
icp_access allow all
miss_access allow all
 
cache_effective_user squid
cache_effective_group squid
 
tcp_outgoing_address 192.168.1.2 john
tcp_outgoing_address 192.168.1.3 mary

---iptables rule
iptables -t tproxy -A PREROUTING -i eth1 -p tcp -m tcp
--dport 80 -j TPROXY --on-port 3128

did I miss something? Thanks.

rgds,
Zul


 

Everyone is raving about the all-new Yahoo! Mail 
(http://advision.webevents.yahoo.com/mailbeta/)



Re: [squid-users] Invalid Request on Squid-2.6S4

2006-11-03 Thread Mark Elsen

Hi all,

I got this error messages after implement tproxy and
transparent interceptions on Squid-2.6.S4.

---cache.log
2006/11/01 01:05:36| clientReadRequest: FD 15
...


Which error(s) are seen in the browser ?

 M.


[squid-users] Invalid Request on Squid-2.6S4

2006-11-03 Thread zulkarnain
Hi all,
   
I got this error messages after implement tproxy and
transparent interceptions on Squid-2.6.S4.

---cache.log
2006/11/01 01:05:36| clientReadRequest: FD 15
(192.168.1.2:2327) Invalid Request
2006/11/01 01:05:36| clientReadRequest: FD 15
(192.168.1.2:2328) Invalid Request
2006/11/01 01:05:37| clientReadRequest: FD 15
(192.168.1.3:24163) Invalid Request
2006/11/01 01:05:42| clientReadRequest: FD 15
(192.168.1.3:24164) Invalid Request
 
---access.log
1162317936.603  0 192.168.1.2 TCP_DENIED/400 2512
GET error:invalid-request - NONE/- text/html
1162317936.767  0 192.168.1.2 TCP_DENIED/400 2436
POST error:invalid-request - NONE/- text/html
1162317937.452  0 192.168.1.3 TCP_DENIED/400 1875
GET error:invalid-request - NONE/- text/html
1162317942.598  0 192.168.1.3 TCP_DENIED/400 1875
GET error:invalid-request - NONE/- text/html



squid is running but none can browsing internet. Any
idea how to solve this?
   
tia,
Zul



 

We have the perfect Group for you. Check out the handy changes to Yahoo! Groups 
(http://groups.yahoo.com)