Re: [squid-users] Problem with ipcacheParse

[Mark Elsen]

 Hello,

 Since this morning, I have many problem with my proxies (2.5.STABLE6).

 Just for info, my company has stric rules regarding Intra and Inernet IP
 resolution : from inside it's not possible to get IP from Outside. So my
 Proxies know everything in the Intranet but they are not able to resolv
 Internet IPs.

 After many tests, I think it was DNS problem So I changed my Resolv.conf
 file to another one. My problem looks fix. But now I have a lot of :
 ipcacheParse: No Address records in response to '...'   

 ... :  could be www.yahoo.com, www.wikipedia.org,

 Is it possible that my Proxies do not try to resolve those name ?

On the contrary, they can no longer resolve these names...

 Or are there another way to stop those messages ?


 - Check whether the configured resolvers in /etc/resolv.conf; can
resolve internet hostnames.
Check them out manually; there are tools for that.

M.

RE: [squid-users] Problem with ipcacheParse

[Gix, Lilian \(CI/OSR\) *]

Thanks for your help .

No, I can't resolve Internet names. (this is normal)
The only goal of me proxies is to separate Intranet from internet.

Internet flow is forward to another proxy. (and the mane resolution for it 
works fine) 


Gix Lilian


-Original Message-
From: Mark Elsen [mailto:[EMAIL PROTECTED] 
Sent: Mittwoch, 29. März 2006 17:03
To: Gix, Lilian (CI/OSR) *
Cc: squid-users@squid-cache.org
Subject: Re: [squid-users] Problem with ipcacheParse

 Hello,

 Since this morning, I have many problem with my proxies (2.5.STABLE6).

 Just for info, my company has stric rules regarding Intra and Inernet 
 IP resolution : from inside it's not possible to get IP from Outside. 
 So my Proxies know everything in the Intranet but they are not able to 
 resolv Internet IPs.

 After many tests, I think it was DNS problem So I changed my 
 Resolv.conf file to another one. My problem looks fix. But now I have a lot 
 of :
 ipcacheParse: No Address records in response to '...'   

 ... :  could be www.yahoo.com, www.wikipedia.org,

 Is it possible that my Proxies do not try to resolve those name ?

On the contrary, they can no longer resolve these names...

 Or are there another way to stop those messages ?


 - Check whether the configured resolvers in /etc/resolv.conf; can resolve 
internet hostnames.
Check them out manually; there are tools for that.

M.

RE: [squid-users] Problem with ipcacheParse

[Gix, Lilian \(CI/OSR\) *]

 Hello,

In fact my original problem is: 

if I use the first DNS, Squid run fine 10-15 minutes then it restart,
I can see nothing in Cache.log:


2006/03/29 17:14:16| WARNING: Disk space over limit: 105540 KB  102400
KB
2006/03/29 17:25:44| Starting Squid Cache version 2.5.STABLE6 for
i386-debian-linux-gnu...
2006/03/29 17:25:44| Process ID 1115
2006/03/29 17:25:44| With 4096 file descriptors available
2006/03/29 17:25:44| DNS Socket created at 0.0.0.0, port 32774, FD 5
2006/03/29 17:25:44| Adding nameserver 193.108.217.69 from
/etc/resolv.conf
2006/03/29 17:25:44| Adding nameserver 193.108.217.70 from
/etc/resolv.conf
2006/03/29 17:25:44| User-Agent logging is disabled.
2006/03/29 17:25:44| Referer logging is disabled.
2006/03/29 17:25:44| Unlinkd pipe opened on FD 10
2006/03/29 17:25:44| Swap maxSize 102400 KB, estimated 7876 objects
2006/03/29 17:25:44| Target number of buckets: 393
2006/03/29 17:25:44| Using 8192 Store buckets
2006/03/29 17:25:44| Max Mem  size: 102400 KB
2006/03/29 17:25:44| Max Swap size: 102400 KB
2006/03/29 17:25:44| Local cache digest enabled; rebuild/rewrite every
3600/3600 sec
2006/03/29 17:25:44| Store logging disabled
2006/03/29 17:25:44| Rebuilding storage in /cache (DIRTY)
2006/03/29 17:25:44| Using Least Load store dir selection
2006/03/29 17:25:44| Set Current Directory to /cache_log/
2006/03/29 17:25:44| Loaded Icons.
2006/03/29 17:25:44| Accepting HTTP connections at 0.0.0.0, port 8080,
FD 11.
2006/03/29 17:25:44| Accepting ICP messages at 0.0.0.0, port 3130, FD
12.
2006/03/29 17:25:44| HTCP Disabled.
2006/03/29 17:25:44| WCCP Disabled.
2006/03/29 17:25:44| Ready to serve requests.
2006/03/29 17:25:44| Configuring Parent rb-proxy-ip.company.com/8080/0
2006/03/29 17:25:44| Store rebuilding is 30.1% complete
2006/03/29 17:25:45| WARNING: newer swaplog entry for dirno 0, fileno
0001
...
2006/03/29 17:25:45| WARNING: newer swaplog entry for dirno 0, fileno
010F
2006/03/29 17:25:45| Done reading /cache swaplog (13998 entries)
2006/03/29 17:25:45| Finished rebuilding storage from disk.
2006/03/29 17:25:45| 11780 Entries scanned
2006/03/29 17:25:45| 0 Invalid entries.
2006/03/29 17:25:45| 0 With invalid flags.
2006/03/29 17:25:45| 11431 Objects loaded.
2006/03/29 17:25:45| 0 Objects expired.
2006/03/29 17:25:45| 2 Objects cancelled.
2006/03/29 17:25:45|   501 Duplicate URLs purged.
2006/03/29 17:25:45|   347 Swapfile clashes avoided.
2006/03/29 17:25:45|   Took 0.7 seconds (17536.2 objects/sec).
2006/03/29 17:25:45| Beginning Validation Procedure
2006/03/29 17:25:45|   Completed Validation Procedure
2006/03/29 17:25:45|   Validated 10930 Entries
2006/03/29 17:25:45|   store_swap_size = 105976k
2006/03/29 17:25:45| storeLateRelease: released 0 objects
2006/03/29 17:25:45| WARNING: Disk space over limit: 105000 KB  102400
KB

2006/03/29 17:28:54| Starting Squid Cache version 2.5.STABLE6 for
i386-debian-linux-gnu...
2006/03/29 17:28:54| Process ID 1118
2006/03/29 17:28:54| With 4096 file descriptors available
2006/03/29 17:28:54| DNS Socket created at 0.0.0.0, port 32774, FD 5
2006/03/29 17:28:54| Adding nameserver x.x.217.69 from /etc/resolv.conf
2006/03/29 17:28:54| Adding nameserver x.x.217.70 from /etc/resolv.conf
2006/03/29 17:28:54| User-Agent logging is disabled.
2006/03/29 17:28:54| Referer logging is disabled.
2006/03/29 17:28:54| Unlinkd pipe opened on FD 10
2006/03/29 17:28:54| Swap maxSize 102400 KB, estimated 7876 objects
2006/03/29 17:28:54| Target number of buckets: 393
2006/03/29 17:28:54| Using 8192 Store buckets
2006/03/29 17:28:54| Max Mem  size: 102400 KB
2006/03/29 17:28:54| Max Swap size: 102400 KB
2006/03/29 17:28:54| Local cache digest enabled; rebuild/rewrite every
3600/3600 sec
2006/03/29 17:28:54| Store logging disabled
2006/03/29 17:28:54| Rebuilding storage in /cache (DIRTY)
2006/03/29 17:28:54| Using Least Load store dir selection
2006/03/29 17:28:54| Set Current Directory to /cache_log/
2006/03/29 17:28:54| Loaded Icons.
2006/03/29 17:28:54| Accepting HTTP connections at 0.0.0.0, port 8080,
FD 11.
2006/03/29 17:28:54| Accepting ICP messages at 0.0.0.0, port 3130, FD
12.
2006/03/29 17:28:54| HTCP Disabled.
2006/03/29 17:28:54| WCCP Disabled.
2006/03/29 17:28:54| Ready to serve requests.
2006/03/29 17:28:54| Configuring Parent rb-proxy-ip.company.com/8080/0
2006/03/29 17:28:54| Store rebuilding is 31.5% complete
2006/03/29 17:28:54| Done reading /cache swaplog (13390 entries)
2006/03/29 17:28:54| Finished rebuilding storage from disk.
2006/03/29 17:28:54| 11453 Entries scanned
2006/03/29 17:28:54| 0 Invalid entries.
2006/03/29 17:28:54| 0 With invalid flags.
2006/03/29 17:28:54| 11433 Objects loaded.
2006/03/29 17:28:54| 0 Objects expired.
2006/03/29 17:28:54| 0 Objects cancelled.
2006/03/29 17:28:54|   501 Duplicate URLs purged.
2006/03/29 17:28:54|20 Swapfile clashes avoided.
2006/03/29 17:28:54|   Took 0.6 seconds (17620.4 objects/sec).

RE: [squid-users] Problem with ipcacheParse

[Henrik Nordstrom]

ons 2006-03-29 klockan 17:07 +0200 skrev Gix, Lilian (CI/OSR) *:
 Thanks for your help .
 
 No, I can't resolve Internet names. (this is normal)
 The only goal of me proxies is to separate Intranet from internet.

Make sure you use never_direct to tell your internal Squid that it is
not connected to the Internet, and always_direct giving it the domain
names that are internal..

Regards
Henrik


signature.asc
Description: Detta är en digitalt signerad	meddelandedel

RE: [squid-users] Problem with ipcacheParse

[Gix, Lilian \(CI/OSR\) *]

Hi,

Thanks  
For your help.

Here is my config regarding this :

always_direct allow Company1_Sites
always_direct allow Company2_Sites
always_direct allow Intern
always_direct deny all

never_direct allow all



Gix Lilian
CI/OSA - Application Services

-Original Message-
From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] 
Sent: Donnerstag, 30. März 2006 00:26
To: Gix, Lilian (CI/OSR) *
Cc: squid-users@squid-cache.org
Subject: RE: [squid-users] Problem with ipcacheParse

ons 2006-03-29 klockan 17:07 +0200 skrev Gix, Lilian (CI/OSR) *:
 Thanks for your help .
 
 No, I can't resolve Internet names. (this is normal) The only goal of 
 me proxies is to separate Intranet from internet.

Make sure you use never_direct to tell your internal Squid that it is not 
connected to the Internet, and always_direct giving it the domain names that 
are internal..

Regards
Henrik

RE: [squid-users] Problem with ipcacheParse

[Henrik Nordstrom]

tor 2006-03-30 klockan 07:43 +0200 skrev Gix, Lilian (CI/OSR) *:
 Hi,
 
 Thanks  
 For your help.
 
 Here is my config regarding this :
 
 always_direct allow Company1_Sites
 always_direct allow Company2_Sites
 always_direct allow Intern

And how is the above three acls defined?

Regards
Henrik


signature.asc
Description: Detta är en digitalt signerad	meddelandedel

RE: [squid-users] Problem with ipcacheParse

[Gix, Lilian \(CI/OSR\) *]

Thaose ACL are like this :

acl Company1_Sites dstdomain /etc/squid/Company1_sites.conf 
acl Company2_Sites dstdomain /etc/squid/Company2_sites.conf 

Gix Lilian


-Original Message-
From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] 
Sent: Donnerstag, 30. März 2006 08:43
To: Gix, Lilian (CI/OSR) *
Cc: squid-users@squid-cache.org
Subject: RE: [squid-users] Problem with ipcacheParse

tor 2006-03-30 klockan 07:43 +0200 skrev Gix, Lilian (CI/OSR) *:
 Hi,
 
 Thanks
 For your help.
 
 Here is my config regarding this :
 
 always_direct allow Company1_Sites
 always_direct allow Company2_Sites
 always_direct allow Intern

And how is the above three acls defined?

Regards
Henrik