Re: [squid-users] TCP_DENIED:NONE and Forwarding loop

Hi Paul,

Paul Bertain wrote:
> Hi All,
>
> I am having a problem with our Squid hierarchy. I am getting TCP_DENIED
> in the access.log and the cache.log shows a forwarding loop detected.
> Here is the access.log entry:
>
> 192.168.1.81 - - [03/Sep/2007:14:01:06 -0500] "GET
> http://web.example.com/customers/mba HTTP/1.0" 403 1469 TCP_DENIED:NONE
> 208.106.5.39 - - [03/Sep/2007:14:01:06 -0500] "GET
> http://web.example.com/customers/mba HTTP/1.1" 403 1570 TCP_MISS:DIRECT
>
> And here is the cache.log entries:
>
> 2007/09/03 13:58:50| parseHttpRequest: NF getsockopt(SO_ORIGINAL_DST)
> failed: (92) Protocol not available
> 2007/09/03 14:00:20| parseHttpRequest: NF getsockopt(SO_ORIGINAL_DST)
> failed: (92) Protocol not available
> 2007/09/03 14:01:06| WARNING: Forwarding loop detected for:
> Client: 192.168.1.81 http_port: 192.168.1 1.81:80
> GET http://web.example.com/customers/mba HTTP/1.0
> Accept: */*
> Accept-Language: en
> Accept-Encoding: gzip, deflate
> User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en)
> AppleWebKit/419.3 (KHTML, like Gecko) Safari/419.3
> Host: web.accelerint.com
> Via: 1.1 squid-1.example .com:80 (squid/2.5.STABLE14)
> X-Forwarded-For: 208.106.5.39
> Cache-Control: max-age=259200
> Connection: keep-alive
>
> I think our Squid parent is not responding so Squid goes direct to
> source. Is there a way to ensure that Squid will not go to origin even
> if the parent does not respond? We do DNS load-balancing so when the
> Squid tries to go direct to source, I think that is where our loop begins.

Are you running Squid in transparent mode?

Can you show us the output of: squid -v

You can try to use the following directive:

prefer_direct off

In my opinion, this situation usually occurs if your parent squid cache
has some kind of a relationship (possibly sibling) parameter to your
squid cache in it's squid.conf.

Posting your squid.conf might help.

Thanking you...

>
> Thanks,
> Paul
>
>
>
>
>
>
>

-- 
With best regards and good wishes,
Yours sincerely,
Tek Bahadur Limbu
System Administrator
(TAG/TDG Group)
Jwl Systems Department
Worldlink Communications Pvt. Ltd.
Jawalakhel, Nepal
http://www.wlink.com.np