Re: [squid-users] 2.4S1 gets frequent Connection Failed errors

I believe ECN can cause the same symptons.

ECN is a new extension to TCP/IP that makes use of some previsouly
reserved header bits - with the result that many firewalls will drop or
deny the packets.

Rob

----- Original Message -----
From: "Drenning Bruce" <bdrenni@catholicrelief.org>
To: "'Henrik Nordstrom'" <hno@hem.passagen.se>
Cc: <squid-users@squid-cache.org>
Sent: Thursday, May 17, 2001 9:36 PM
Subject: RE: [squid-users] 2.4S1 gets frequent Connection Failed errors

I am inside a firewall. It's not a network problem. If I return to the
same
page via my production cache server (2.3S1) it works. It's very specific
scripts that aren't working. Yahoo's login page. the weather channel
weather
search. Reproducible every time.

It must be something different in the squid.conf of my 2.4S1. I
configured
it the same as my 2.3. maybe that's my problem, but I can't see where.
Here
are what I believe to be the relevant lines:

cache_peer 1.2.3.4 parent 8080 0 no-query default

acl DomainUsers proxy_auth REQUIRED
http_access allow DomainUsers
http_access deny all
never_direct allow CONNECT

As I said, this is the same in both the 2.3S1 and 2.4S1 squid.conf
files.
Perhaps it shouldn't be.

-----Original Message-----
From: Henrik Nordstrom [mailto:hno@hem.passagen.se]
Sent: Wednesday, May 16, 2001 5:57 PM
To: Drenning Bruce
Cc: squid-users@squid-cache.org
Subject: Re: [squid-users] 2.4S1 gets frequent Connection Failed errors

Drenning Bruce wrote:
¨
> g to get 2.4S1 working on a new server running RH 7.1. My problem
> is I'm getting frequent "connection failed, system returned (101)
network
> unreachable errors". Most of the pages that experience this seem to be
> scripts. I tried commenting out "hierarchy_stoplist cgi-bin ?"
because,
> initially, I would get the error on any URL containing "?". This
resovled
> some but not all.

Are you inside a firewall where you must use a parent to reach the
Internet? If so, make sure you use never_direct.

If not the error probably speeks the truth. This error is returend by
the OS to Squid when the OS could not find a way to the requested host,
either due to local network problems or remote network problems..

--
Henrik Nordstrom
Squid hacker