[H-GEN] Squid + transparent proxy problems

Harry Phillips harry at tux.com.au
Thu Nov 16 05:20:00 EST 2006


I am running Ubuntu on my server, recently I did an on-line upgrade to 
the latest, Edgy.

During that upgrade squid version 2.6.1-3ubuntu1 was installed. I 
customised the default squid.conf but the transparent proxying doesn't 
work. If I set the proxy manually to server:3128 squid works fine.

The iptables rule to do the transparent proxying has not changed:
$IPTABLES -t nat -A PREROUTING -i $INT_IF -p tcp --dport 80 -j REDIRECT 
--to-port 3128

The error I am getting in the access.log is:
192.168.1.98 TCP_DENIED/400 0 HEAD error:invalid-request - NONE/- ext/html

I researched that error and all of the answers said to ensure the 
squid.conf had the following lines:
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

The problem is that when I try and start squid with those lines it comes 
up with an error for all of them:
parseConfigFile: line xx unrecognized: 'httpd_accel_xxx option'

Does anyone have any ideas on why squid is not working the way it used 
to? Is it a Ubuntu specific issue?

My squid.conf without the commented lines looks like this:
----------------------------
http_port 3128

hierarchy_stoplist cgi-bin ?

acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY

acl apache rep_header Server ^Apache
broken_vary_encoding allow apache

cache_mem 32 MB

access_log /var/log/squid/access.log squid


refresh_pattern ^ftp:		1440	20%	10080
refresh_pattern ^gopher:	1440	0%	1440
refresh_pattern .		0	20%	4320

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563	# https, snews
acl SSL_ports port 873		# rsync
acl Safe_ports port 80		# http
acl Safe_ports port 21		# ftp
acl Safe_ports port 443 563	# https, snews
acl Safe_ports port 70		# gopher
acl Safe_ports port 210		# wais
acl Safe_ports port 1025-65535	# unregistered ports
acl Safe_ports port 280		# http-mgmt
acl Safe_ports port 488		# gss-http
acl Safe_ports port 591		# filemaker
acl Safe_ports port 777		# multiling http
acl Safe_ports port 631		# cups
acl Safe_ports port 873		# rsync
acl Safe_ports port 901		# SWAT
acl purge method PURGE
acl CONNECT method CONNECT

http_access allow manager localhost
http_access deny manager

http_access allow purge localhost
http_access deny purge

http_access deny !Safe_ports

http_access deny CONNECT !SSL_ports

acl our_networks src 192.168.1.0/24
http_access allow our_networks
http_access allow localhost

http_access deny all

http_reply_access allow all

icp_access allow all

coredump_dir /var/spool/squid
----------------------------


-- 
Regards,
Harry Phillips





More information about the General mailing list