lkml.org 
[lkml]   [1999]   [Nov]   [29]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    Subjecttransparent proxy problem with Linux 2.2.13

    I'm having a weird problem with squid 2.2stable5.
    I have it set up as a transparent proxy on a 2.2.13 box.
    I'm using IP chains to redirect port 80 requests to the proxy on port
    8080.
    I have IP forwarding enabled and am using the following ipchains command

    /sbin/ipchains -A input -j REDIRECT 8080 -p tcp -s 203.37.38.0/24 -d
    0.0.0.0/0 80

    The weird thing is that it works fine for about a day then stops
    working.
    No obvious error messages in logs.
    The proxy still works if I contact it explicitly on the proxy port
    rather than using the transparent functionality.
    So networking is still working.

    I get an error message back from the squid about "connection lifetime
    exceeded". So the redirection is still working to some extent as the
    request is reaching the squid.

    I dont think its a squid problem as such as the same version works fine
    under kernel 2.0.36.
    And when the problem occurs, squid is still working.

    So it seems to be some sort of interaction between the IP redirection
    and squid.
    A reboot fixes it, but stopping and restarting squid doesnt.

    I'm trying 2.2.14pre9 at the moment to see if it fixes it.
    I notice that the changes for for 2.2.14pre mentions a transproxy fix.

    Does anyone know if that transproxy problem is likely to have these
    symptoms.
    Does anyone have any other suggestions as to what could be causing this.

    --
    Robert Cohen - Network Administrator
    Apex Internet
    robert@apex.net.au http://www.apex.net.au
    Ph (02) 6247 2000 Fax: (02) 6247 2711

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.rutgers.edu
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 13:55    [W:3.700 / U:0.096 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site