Re: [squid-users] Redirect question - using squidGuard

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Fri, 21 Aug 2009 21:52:29 +1200

Note to the list:

  We caught up on IRC and it turned out Adam only needed some ACL to
route things between two peers.

Amos

Adam Squids wrote:
> Squid is setup as a reverse proxy.
>
>
> http_port <public.ip.of.squid.box>:80 accel defaultsite=www.domainname.com
>
> cache_peer <public.ip.of.origin.web.server> parent 80 0 no-query originserver
>
> url_rewrite_program /usr/local/bin/squidGuard -c
> /usr/local/squidGuard/squidGuard.conf
>
>
> When I use "url_rewrite_program" and it is redirecting to
> 127.0.0.1:80, that's all sever-side. Isnt it?
> I guess I could run wireshark and look at the requests.
>
> The thing is that last week I got a "unable to redirect your request"
> reply but now I got an 404 error msg, because that file isn't in my
> origin server. It totally ignores my squidGuard configs.
>
>
> On 8/21/09, Amos Jeffries <squid3_at_treenet.co.nz> wrote:
>> Adam Squids wrote:
>>> hey,
>>>
>>> http://paste.lisp.org/display/85718
>>>
>>> trying to get domain.com/images/banners5/ to get redirected to my
>>> Apache listening on 127.0.0.1:80.
>>>
>>>
>>> seems like squidGuard ignores my rew rule.
>>>
>>> in my access.log I got -
>>>
>>> "access.log:1250765832.877 11 1.2.3.4 TCP_CLIENT_REFRESH_MISS/404
>>> 3095 GET
>> http://www.domain.com/images/banners5/adamCDN.php -
>>> FIRST_UP_PARENT/origin.domain.com text/html"
>>>
>>>
>>> in my store.log I got -
>>>
>>> "store.log:1250765832.878 SWAPOUT 00 000028F9
>>> BA3524A6ECC9C9757C44504E865F1418 200 1250765832
>> -1 1250865832
>>> x-squid-internal/vary -1/82 GET
>> http://127.0.0.1/images/banners5/
>>> adamCDN.php"
>>>
>>> do I need to set 127.0.0.1 80 as a "parent" cache peer or something?
>>> or as ACL ?
>>>
>>> using Squid 2.7
>>>
>>> Thanks,
>>>
>>> Adam
>>>
>> You need to have squidguard redirecting to an IP or domain name which the
>> browsers being redirected can visit. 127.0.0.1 is private IP which means
>> "me" to every machine in existence. Browsers bing told to go there will
>> attempt to connect to their own port 80.
>>
>> The to answer art 2 of your Q. Yes to run a apache on 127.0.0.1 (squid box)
>> you will need Squid setup as reverse-proxy with it as the cache_peer IP.
>> http://wiki.squid-cache.org/SquidFaq/ReverseProxy
>>
>>
>> Amos
>> --
>> Please be using
>> Current Stable Squid 2.7.STABLE6 or 3.0.STABLE18
>> Current Beta Squid 3.1.0.13
>>

-- 
Please be using
   Current Stable Squid 2.7.STABLE6 or 3.0.STABLE18
   Current Beta Squid 3.1.0.13
Received on Fri Aug 21 2009 - 09:52:37 MDT

This archive was generated by hypermail 2.2.0 : Fri Aug 21 2009 - 12:00:03 MDT