[squid-users] forward loop

2012-02-02 Thread Mustafa Raji
hi please i have a forward loop warning in my cache.log what is the cause of it i check the internet and find the cause is using peer squid configuration and the two cache server has the same visible_hostname but i never used the peer in my configuration i have one cache server with intercept con

Re: [squid-users] forward loop

2012-02-02 Thread Pieter De Wit
Hi Mustafa, Can you please post your squid.conf ? (Remove all comments and passwords etc) Cheers, Pieter On 2/02/2012 23:04, Mustafa Raji wrote: hi please i have a forward loop warning in my cache.log what is the cause of it i check the internet and find the cause is using peer squid config

Re: [squid-users] forward loop

2012-02-03 Thread Mustafa Raji
mustafa.r...@yahoo.com cachemgr_passwd x all thank you with my best regards --- On Thu, 2/2/12, Pieter De Wit wrote: > From: Pieter De Wit > Subject: Re: [squid-users] forward loop > To: squid-users@squid-cache.org > Date: Thursday, February 2, 2012, 10:08 AM > Hi Mustafa, >

Re: [squid-users] forward loop

2012-02-04 Thread Pieter De Wit
From: Pieter De Wit Subject: Re: [squid-users] forward loop To: squid-users@squid-cache.org Date: Thursday, February 2, 2012, 10:08 AM Hi Mustafa, Can you please post your squid.conf ? (Remove all comments and passwords etc) Cheers, Pieter On 2/02/2012 23:04, Mustafa Raji wrote: hi please i h

Re: [squid-users] forward loop

2012-02-04 Thread Amos Jeffries
On 4/02/2012 8:02 p.m., Mustafa Raji wrote: hi Pieter this is my configuration file, #define access list for network acl my_network src 192.168.12.0/24 acl my_network src 192.168.7.0/24 acl my_network src 192.168.40.0/24 acl my_network src 10.10.10.0/24 #allow http access for the network http_a

Re: [squid-users] forward loop

2012-02-04 Thread Amos Jeffries
On 5/02/2012 12:25 a.m., Mustafa Raji wrote: dear Amos this is my iptables rule the same as i read in the link that you told me about it defintilly the problem is in the iptables rule, my machine ip address is 192.168.40.2 iptables rule is iptables -t nat -A PREROUTING -s 192.168.40.2 -p tcp --d

[squid-users] Forward loop detected: what does this mean?

2011-05-19 Thread Boniforti Flavio
Hello everybody. I ran out of space on my squid log directory because cache.log grew very fast filled by "forward loop detected" messages. I'm using my squid as a transparent proxy. What does that forward loop mean and how could it happen? I've noticed that the originating IP was from a PC I had

Re: [squid-users] Forward loop detected: what does this mean?

2011-05-19 Thread Amos Jeffries
On 20/05/11 00:24, Boniforti Flavio wrote: Hello everybody. I ran out of space on my squid log directory because cache.log grew very fast filled by "forward loop detected" messages. I'm using my squid as a transparent proxy. What does that forward loop mean Your squid is sending requests out

RE: [squid-users] Forward loop detected: what does this mean?

2011-05-19 Thread Boniforti Flavio
Hello Amos... > > What does that forward loop mean > > Your squid is sending requests out which subsequently arrive > back to it. OK. > > and how could it happen? I've noticed > > Most likely your NAT rules are broken. Packets leaving Squid > MUST NOT be sent back to Squids listening port.

Re: [squid-users] Forward loop detected: what does this mean?

2011-05-19 Thread Amos Jeffries
On 20/05/11 03:01, Boniforti Flavio wrote: Hello Amos... What does that forward loop mean Your squid is sending requests out which subsequently arrive back to it. OK. and how could it happen? I've noticed Most likely your NAT rules are broken. Packets leaving Squid MUST NOT be sent back

RE: [squid-users] Forward loop detected: what does this mean?

2011-05-20 Thread Boniforti Flavio
Hello again Amos, you're precious debugger of my situation! :-) > > What you see there are some services redirected to my > internal servers > > and the rule for intercepting web traffic... > > Okay. Looks okay. The use of "eth0" replaces a specific Squid bypass. > Squid will be using the Int

Re: [squid-users] Forward loop detected: what does this mean?

2011-05-20 Thread Amos Jeffries
On 20/05/11 19:06, Boniforti Flavio wrote: Hello again Amos, you're precious debugger of my situation! :-) What you see there are some services redirected to my internal servers and the rule for intercepting web traffic... Okay. Looks okay. The use of "eth0" replaces a specific Squid bypass

RE: [squid-users] Forward loop detected: what does this mean?

2011-05-20 Thread Boniforti Flavio
Hy Amos... [cut] > .. or in this case, it appears, some security penetration > testing software. Somehow installed on a users PC. > > > Here you can find trace: http://www.sendspace.com/file/ij5qpe > > > > Sorry, that seems to be a summary packet log. Just confirms Sorry, I just took over y

Re: [squid-users] Forward loop detected: what does this mean?

2011-05-20 Thread Amos Jeffries
On 21/05/11 00:36, Boniforti Flavio wrote: Hy Amos... [cut] .. or in this case, it appears, some security penetration testing software. Somehow installed on a users PC. Here you can find trace: http://www.sendspace.com/file/ij5qpe Sorry, that seems to be a summary packet log. Just confirm

RE: [squid-users] Forward loop detected: what does this mean?

2011-05-20 Thread Boniforti Flavio
Alright Amos! > > Well, maybe! But that's weird behaviour... why should my > "protection > > suite" scan my whole subnet on port 80? > > From the (marketing) docs that particular McAfee component > is designed for admins to do network wide security with. > Active scans are one way to do thin