Either your Squid is not built with support for transparent proxying on
Linux (most likely), or your method of redirecting the traffic to the
Squid server is bad, hiding the intendeded destination from Squid (less
likely).
To be used as transparent proxy on Linux-2.4 Squid must be compiled with
--enable-linux-netfilter.
Regards
Henrik
jubaco30 wrote:
>
> Hi all,
>
> recently i upgraded my squid box, before i had squid2.4 stable with
> redhat 6.2 kernel 2.2.18. Now we have squid2.4 stable 6 with redhat7.3
> kernel 2.4.18-4 (transparent proxy). The problem is as follows:
>
> one of my users have an http client , this client tries to connect to
> an http server and download a file, the following is what the http
> client sends to the server:
>
> POST /cgi-win/cenint.exe HTTP/1.0
> User-Agent: CENITI/1.0 (compatible; MSIE 5.0; Windows 98; DigExt)
> Content-type: application/x-www-form-urlencoded
> Content-length: 47
>
> pais=ID&dist=XXX&pass=XXX++++&accion=Full
>
> but then squid returns the following error:
>
> HTTP/1.0 503 Service Unavailable
> Server: Squid/2.4.STABLE6
> Mime-Version: 1.0
> Date: Thu, 06 Jun 2002 16:11:36 GMT
> Content-Type: text/html
> Content-Length: 772
> Expires: Thu, 06 Jun 2002 16:11:36 GMT
> X-Squid-Error: ERR_CONNECT_FAIL 111
> X-Cache: MISS from SQUIDSERVERNAME
> Connection: close
>
> <HTML><HEAD>
> <TITLE>ERROR: The requested URL could not be retrieved</TITLE>
> </HEAD><BODY>
> <H1>ERROR</H1>
> <H2>The requested URL could not be retrieved</H2>
> <HR>
> <P>
> While trying to retrieve the URL:
> <A HREF="http://SQUID_SERVER_IP/cgi-
> win/cenint.exe">http://SQUID_SERVER_IP/cgi-win/cenint.exe</A>
> <P>
> The following error was encountered:
> <UL>
> <LI>
> <STRONG>
> Connection Failed
> </STRONG>
> </UL>
>
> <P>
> The system returned:
> <PRE><I> (111) Connection refused</I></PRE>
>
> the problem is that squid changes the HTTP server IP with squid server
> IP (see "While trying to retrieve ... part")
>
> then, a tried connect but sending a host header additionaly as follows:
>
> POST /cgi-win/cenint.exe HTTP/1.0
> User-Agent: CENITI/1.0 (compatible; MSIE 5.0; Windows 98; DigExt)
> Content-type: application/x-www-form-urlencoded
> Content-length: 47
> HOST: http_server.com (the http server FQDN)
>
> pais=ID&dist=XXX&pass=XXX++++&accion=Full
>
> then it worked!!, the problem is that the http client works well
> without squid .
>
> Can anybody help me please!
>
> thanks
>
> ___________________________________________________________________
> Consigue tu e-mail gratuito CORREO.TERRA.COM.GT
> Haz click en http://www.terra.com.gt/correo/
Received on Thu Jun 06 2002 - 17:40:59 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:08:29 MST