[squid-users] Forwarding loop detected

From: Ken Morris <[email protected]>
Date: Wed, 9 Apr 2003 21:04:46 -0400

Hello:

I am trying to setup a single squid system that is running on my ET bandwidth
management server running FreeBSD. Currently when squid is turned on all I
get are access denied messages on the client PCs. I turned on debugging
(after reading some of the users guide) and noticed that I was getting
"WARNING: Forwarding loop detected" messages with each attempt to load a
website. Are the two things "Access Denied" and "WARNING: Forwarding loop
detected" messages related?

From the cache.log (with debugging on) it looks like my ACL rules (the
defaults) are working because they seem to be matching the client IP
addresses being used.

From reading the FAQ and searching the archives "WARNING: Forwarding loop
detected" messages seem to come in multiple cache server configurations while
I only have one. What else can I try to get rid of these message and get my
squid setup working?

Here is an example of a log entry that I retrieved from my squid server:

> 2003/04/09 18:02:18| The request GET
> http://www.squid-cache.org:80/Doc/FAQ/FAQ-10.html is ALLOWED, because it
> matched 'all'
> 2003/04/09 18:02:18| The request GET
> http://www.squid-cache.org:80/Doc/FAQ/FAQ-10.html is ALLOWED, because it
> matched 'all'
> 2003/04/09 18:02:18| WARNING: Forwarding loop detected for:
> GET /Doc/FAQ/FAQ-10.html HTTP/1.0
> Accept: */*
> Referer: http://www.squid-cache.org/Doc/FAQ/FAQ.html
> Accept-Language: en-us
> Accept-Encoding: gzip, deflate
> If-Modified-Since: Wed, 09 Apr 2003 19:17:37 GMT
> If-None-Match: "308f1d-6f6e-3e9471d1"
> User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
> Via: 1.1 ETR1500:3128 (Squid/2.4.STABLE7)
> X-Forwarded-For: 192.168.8.238
> Host: www.squid-cache.org
> Cache-Control: max-age=259200
> Connection: keep-alive

Here is my squid.conf file:

http_port 3128
cache_mem 12 MB
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80 21 443 563 70 210 1025-65535
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 591
acl Safe_ports port 777
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow all
icp_access allow all
miss_access allow all
cache_effective_user nobody
cache_effective_group nobody
#httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
httpd_accel_host virtual
debug_options ALL,1 33,2 28,9
visible_hostname ETR1500

Thanks in advance,
Ken
Received on Wed Apr 09 2003 - 19:03:20 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:14:53 MST