Suhaib Ahmad wrote:
> Hello,
>
> I've squid2.6 STABLE running as web-accelerator, on 'image' (having
> ip:67.107.145.109) machine with parent configured as 192.168.7.1.
> 'image' machine is also the nameserver having 'hosts' file entry:
>
> 127.0.0.1 localhost.localdomain localhost
>
> The squid-cache stops working sometime throwing 'Forward loop
> detected' warning in cache.log. Can anyone suggest the remedie.
> Thanks.
>
> ---- squid.conf ----
> http_port 80 transparent
http://wiki.squid-cache.org/SquidFaq/ReverseProxy#head-7fa129a6528d9a5c914f8dd5671668173e39e341
> cache_peer 192.168.7.1 parent 81 0 no-query originserver weight=1
> http_access allow all
Asking for abuse.
Interesting. Using the originserver tagline to cache_peer seems to
prevent some of the obvious avenues. But you should still at least
prevent CONNECT requests to ports other than 443, and any requests to
ports other than those labeled "Safe" in the default squid.conf.
> acl all src 0.0.0.0/0.0.0.0
> icp_access allow all
>
>
SNIP
Yup. Looks like a forwarding loop. Set up your accelerator properly,
and I imagine this will be resolved.
>
> Regards,
> Suhaib
Chris
Received on Thu Jun 07 2007 - 13:23:02 MDT
This archive was generated by hypermail pre-2.1.9 : Sun Jul 01 2007 - 12:00:04 MDT