You should probably have alot of lines that looks like this
2001/04/08 11:53:04| TCP connection to proxy.isu.net.sa/8080 failed
2001/04/08 11:53:04| Failed to select source for 'http://www.msn.com/'
2001/04/08 11:53:04| always_direct = -1
2001/04/08 11:53:04| never_direct = 1
Which results in the "cannot forward" message your clients see.
But as Henrik has pointed out you might run into an OS limit like file
descriptors, which should be echoed in cache.log, do a grep -i warn
WARNING! Your cache is running out of filedescriptors
If that shows up then thats your first problem :) but to my experience you
do not get the cannot forward message, squid is just performing badly
because of this limitation, ie slow browsing.
( If you have snmp compiled in you can easily check how many is used and
how many is free )
Your cache_peer line should have no-query to not send any ICP packets to
KACST ( this is a prerequisite from them also ).
/Khaled Daham, w.arts
Mail: khaled@w-arts.com
Cell: +46-70-6785492, +966-54491462
FreeBSD: The Power to Serve! http://www.FreeBSD.org/
Received on Sun Apr 08 2001 - 15:08:19 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:59:12 MST