Dave Coventry wrote:
Hi Amos.

I feel I'm getting there, albeit slowly...

I can ping www.google.com from the client Laptop.

but I'm getting this error in Firefox:
ERROR
The requested URL could not be retrieved
While trying to retrieve the URL: http://www.google.com/search?
The following error was encountered:
    * Unable to forward this request at this time.
This request could not be forwarded to the origin server or to any
parent caches. The most likely cause for this error is that:
    * The cache administrator does not allow this cache to make direct
connections to origin servers, and

Did you read that error page carefully? or the first lines of my previous post?

squid.conf seems to have a line
  never_direct deny all

or something to that effect for your laptop.

    * All configured parent caches are currently unreachable.
Your cache administrator is webmaster.

Generated Thu, 10 Jan 2008 12:55:03 GMT by Base (squid/2.6.STABLE14)

My /var/logs/squid/access.log is as follows:

[EMAIL PROTECTED]:/home/dave# cat /var/log/squid/access.log
192.168.60.199 - - [10/Jan/2008:10:26:02 +0200] "GET
http://www.cricinfo.com/ HTTP/1.1" 504 1408 TCP_MISS:ANY_PARENT
192.168.60.199 - - [10/Jan/2008:10:26:40 +0200] "GET
http://en-gb.start2.mozilla.com/firefox? HTTP/1.1" 504 1440
TCP_MISS:ANY_PARENT
122.116.116.34 - - [10/Jan/2008:12:14:08 +0200] "GET
http://www.scanproxy.com/px_judge.php? HTTP/1.0" 503 1622
TCP_MISS:NONE
192.168.60.199 - - [10/Jan/2008:14:51:17 +0200] "GET
http://content-rsa.cricinfo.com/wivzimsa/engine/current/match/298803.html?
HTTP/1.1" 503 1687 TCP_MISS:NONE
192.168.60.199 - - [10/Jan/2008:14:51:24 +0200] "GET
http://content-rsa.cricinfo.com/wivzimsa/engine/current/match/298803.html
HTTP/1.1" 503 1685 TCP_MISS:NONE
192.168.60.199 - - [10/Jan/2008:14:55:03 +0200] "GET
http://www.google.com/search? HTTP/1.1" 503 1597 TCP_MISS:NONE
192.168.60.199 - - [10/Jan/2008:14:55:20 +0200] "GET
http://www.cricinfo.com/ HTTP/1.1" 503 1587 TCP_MISS:NONE

My /var/logs/squid/cache.log is as follows:

2008/01/10 10:19:25| Starting Squid Cache version 2.6.STABLE14 for
i386-debian-linux-gnu...
2008/01/10 10:19:25| Process ID 6652
2008/01/10 10:19:25| With 1024 file descriptors available
2008/01/10 10:19:25| Using epoll for the IO loop
2008/01/10 10:19:25| DNS Socket created at 0.0.0.0, port 32782, FD 6
2008/01/10 10:19:25| Adding domain linux.lan from /etc/resolv.conf
2008/01/10 10:19:25| Adding nameserver 192.168.60.254 from /etc/resolv.conf
2008/01/10 10:19:25| User-Agent logging is disabled.
2008/01/10 10:19:25| Referer logging is disabled.
2008/01/10 10:19:25| Unlinkd pipe opened on FD 11
2008/01/10 10:19:25| Swap maxSize 102400 KB, estimated 7876 objects
2008/01/10 10:19:25| Target number of buckets: 393
2008/01/10 10:19:25| Using 8192 Store buckets
2008/01/10 10:19:25| Max Mem  size: 8192 KB
2008/01/10 10:19:25| Max Swap size: 102400 KB
2008/01/10 10:19:25| Local cache digest enabled; rebuild/rewrite every
3600/3600 sec
2008/01/10 10:19:25| Rebuilding storage in /var/spool/squid (CLEAN)
2008/01/10 10:19:25| Using Least Load store dir selection
2008/01/10 10:19:25| Set Current Directory to /var/spool/squid
2008/01/10 10:19:25| Loaded Icons.
2008/01/10 10:19:25| Accepting transparently proxied HTTP connections
at 0.0.0.0, port 3128, FD 13.
2008/01/10 10:19:25| Accepting ICP messages at 0.0.0.0, port 3130, FD 14.
2008/01/10 10:19:25| HTCP Disabled.
2008/01/10 10:19:25| WCCP Disabled.
2008/01/10 10:19:25| Ready to serve requests.
2008/01/10 10:19:25| Done reading /var/spool/squid swaplog (56 entries)
2008/01/10 10:19:25| Finished rebuilding storage from disk.
2008/01/10 10:19:25|        56 Entries scanned
2008/01/10 10:19:25|         0 Invalid entries.
2008/01/10 10:19:25|         0 With invalid flags.
2008/01/10 10:19:25|        56 Objects loaded.
2008/01/10 10:19:25|         0 Objects expired.
2008/01/10 10:19:25|         0 Objects cancelled.
2008/01/10 10:19:25|         0 Duplicate URLs purged.
2008/01/10 10:19:25|         0 Swapfile clashes avoided.
2008/01/10 10:19:25|   Took 0.3 seconds ( 207.6 objects/sec).
2008/01/10 10:19:25| Beginning Validation Procedure
2008/01/10 10:19:25|   Completed Validation Procedure
2008/01/10 10:19:25|   Validated 56 Entries
2008/01/10 10:19:25|   store_swap_size = 1920k
2008/01/10 10:19:25| Configuring Parent proxy.ua.pt/3128/3130
2008/01/10 10:19:26| storeLateRelease: released 0 objects
2008/01/10 10:22:32| TCP connection to proxy.ua.pt/3128 failed
2008/01/10 10:23:02| TCP connection to proxy.ua.pt/3128 failed
2008/01/10 10:23:10| TCP connection to proxy.ua.pt/3128 failed
2008/01/10 10:23:32| TCP connection to proxy.ua.pt/3128 failed
2008/01/10 10:23:40| TCP connection to proxy.ua.pt/3128 failed
2008/01/10 10:24:02| TCP connection to proxy.ua.pt/3128 failed
2008/01/10 10:24:10| TCP connection to proxy.ua.pt/3128 failed
2008/01/10 10:24:32| TCP connection to proxy.ua.pt/3128 failed
2008/01/10 10:24:40| TCP connection to proxy.ua.pt/3128 failed
2008/01/10 10:25:02| TCP connection to proxy.ua.pt/3128 failed
2008/01/10 10:25:02| Detected DEAD Parent: proxy.ua.pt
2008/01/10 10:25:10| TCP connection to proxy.ua.pt/3128 failed
2008/01/10 10:25:32| TCP connection to proxy.ua.pt/3128 failed
2008/01/10 10:25:40| TCP connection to proxy.ua.pt/3128 failed
2008/01/10 10:26:02| TCP connection to proxy.ua.pt/3128 failed
2008/01/10 10:26:10| TCP connection to proxy.ua.pt/3128 failed
2008/01/10 10:26:40| TCP connection to proxy.ua.pt/3128 failed
2008/01/10 12:14:08| Failed to select source for
'http://www.scanproxy.com/px_judge.php?p=3128'
2008/01/10 12:14:08|   always_direct = -1
2008/01/10 12:14:08|    never_direct = 1
2008/01/10 12:14:08|        timedout = 0
2008/01/10 14:51:17| Failed to select source for
'http://content-rsa.cricinfo.com/wivzimsa/engine/current/match/298803.html?view=live;wrappertype=mainframe'
2008/01/10 14:51:17|   always_direct = -1
2008/01/10 14:51:17|    never_direct = 1
2008/01/10 14:51:17|        timedout = 0
2008/01/10 14:51:24| Failed to select source for
'http://content-rsa.cricinfo.com/wivzimsa/engine/current/match/298803.html'
2008/01/10 14:51:24|   always_direct = -1
2008/01/10 14:51:24|    never_direct = 1
2008/01/10 14:51:24|        timedout = 0

On Jan 10, 2008 11:29 AM, Amos Jeffries wrote:
These requests are hitting squid but squid is configured to deny direct
access outbound (never_direct is 1). Probably without any peers
configured to handle non-direct access.

I think it should be as simple as taking the space out of your config
setting string:
    option domain-name              " domain.org";
I would expect the above to be attempting a DNS lookup of exactly "Base.
domain.org" and failing.


--
Please use Squid 2.6STABLE17 or 3.0STABLE1.
There are serious security advisories out on all earlier releases.

Reply via email to