Re: [squid-users] Squid not working for me

Dave Coventry wrote:
> Hi Amos.
>
> I feel I'm getting there, albeit slowly...
>
> I can ping www.google.com from the client Laptop.
>
> but I'm getting this error in Firefox:
> ERROR
> The requested URL could not be retrieved
> While trying to retrieve the URL: http://www.google.com/search?
> The following error was encountered:
> * Unable to forward this request at this time.
> This request could not be forwarded to the origin server or to any
> parent caches. The most likely cause for this error is that:
> * The cache administrator does not allow this cache to make direct
> connections to origin servers, and

Did you read that error page carefully? or the first lines of my
previous post?

squid.conf seems to have a line
   never_direct deny all

or something to that effect for your laptop.

> * All configured parent caches are currently unreachable.
> Your cache administrator is webmaster.
>
> Generated Thu, 10 Jan 2008 12:55:03 GMT by Base (squid/2.6.STABLE14)
>
> My /var/logs/squid/access.log is as follows:
>
> root@Base:/home/dave# cat /var/log/squid/access.log
> 192.168.60.199 - - [10/Jan/2008:10:26:02 +0200] "GET
> http://www.cricinfo.com/ HTTP/1.1" 504 1408 TCP_MISS:ANY_PARENT
> 192.168.60.199 - - [10/Jan/2008:10:26:40 +0200] "GET
> http://en-gb.start2.mozilla.com/firefox? HTTP/1.1" 504 1440
> TCP_MISS:ANY_PARENT
> 122.116.116.34 - - [10/Jan/2008:12:14:08 +0200] "GET
> http://www.scanproxy.com/px_judge.php? HTTP/1.0" 503 1622
> TCP_MISS:NONE
> 192.168.60.199 - - [10/Jan/2008:14:51:17 +0200] "GET
> http://content-rsa.cricinfo.com/wivzimsa/engine/current/match/298803.html?
> HTTP/1.1" 503 1687 TCP_MISS:NONE
> 192.168.60.199 - - [10/Jan/2008:14:51:24 +0200] "GET
> http://content-rsa.cricinfo.com/wivzimsa/engine/current/match/298803.html
> HTTP/1.1" 503 1685 TCP_MISS:NONE
> 192.168.60.199 - - [10/Jan/2008:14:55:03 +0200] "GET
> http://www.google.com/search? HTTP/1.1" 503 1597 TCP_MISS:NONE
> 192.168.60.199 - - [10/Jan/2008:14:55:20 +0200] "GET
> http://www.cricinfo.com/ HTTP/1.1" 503 1587 TCP_MISS:NONE
>
> My /var/logs/squid/cache.log is as follows:
>
> 2008/01/10 10:19:25| Starting Squid Cache version 2.6.STABLE14 for
> i386-debian-linux-gnu...
> 2008/01/10 10:19:25| Process ID 6652
> 2008/01/10 10:19:25| With 1024 file descriptors available
> 2008/01/10 10:19:25| Using epoll for the IO loop
> 2008/01/10 10:19:25| DNS Socket created at 0.0.0.0, port 32782, FD 6
> 2008/01/10 10:19:25| Adding domain linux.lan from /etc/resolv.conf
> 2008/01/10 10:19:25| Adding nameserver 192.168.60.254 from /etc/resolv.conf
> 2008/01/10 10:19:25| User-Agent logging is disabled.
> 2008/01/10 10:19:25| Referer logging is disabled.
> 2008/01/10 10:19:25| Unlinkd pipe opened on FD 11
> 2008/01/10 10:19:25| Swap maxSize 102400 KB, estimated 7876 objects
> 2008/01/10 10:19:25| Target number of buckets: 393
> 2008/01/10 10:19:25| Using 8192 Store buckets
> 2008/01/10 10:19:25| Max Mem size: 8192 KB
> 2008/01/10 10:19:25| Max Swap size: 102400 KB
> 2008/01/10 10:19:25| Local cache digest enabled; rebuild/rewrite every
> 3600/3600 sec
> 2008/01/10 10:19:25| Rebuilding storage in /var/spool/squid (CLEAN)
> 2008/01/10 10:19:25| Using Least Load store dir selection
> 2008/01/10 10:19:25| Set Current Directory to /var/spool/squid
> 2008/01/10 10:19:25| Loaded Icons.
> 2008/01/10 10:19:25| Accepting transparently proxied HTTP connections
> at 0.0.0.0, port 3128, FD 13.
> 2008/01/10 10:19:25| Accepting ICP messages at 0.0.0.0, port 3130, FD 14.
> 2008/01/10 10:19:25| HTCP Disabled.
> 2008/01/10 10:19:25| WCCP Disabled.
> 2008/01/10 10:19:25| Ready to serve requests.
> 2008/01/10 10:19:25| Done reading /var/spool/squid swaplog (56 entries)
> 2008/01/10 10:19:25| Finished rebuilding storage from disk.
> 2008/01/10 10:19:25| 56 Entries scanned
> 2008/01/10 10:19:25| 0 Invalid entries.
> 2008/01/10 10:19:25| 0 With invalid flags.
> 2008/01/10 10:19:25| 56 Objects loaded.
> 2008/01/10 10:19:25| 0 Objects expired.
> 2008/01/10 10:19:25| 0 Objects cancelled.
> 2008/01/10 10:19:25| 0 Duplicate URLs purged.
> 2008/01/10 10:19:25| 0 Swapfile clashes avoided.
> 2008/01/10 10:19:25| Took 0.3 seconds ( 207.6 objects/sec).
> 2008/01/10 10:19:25| Beginning Validation Procedure
> 2008/01/10 10:19:25| Completed Validation Procedure
> 2008/01/10 10:19:25| Validated 56 Entries
> 2008/01/10 10:19:25| store_swap_size = 1920k
> 2008/01/10 10:19:25| Configuring Parent proxy.ua.pt/3128/3130
> 2008/01/10 10:19:26| storeLateRelease: released 0 objects
> 2008/01/10 10:22:32| TCP connection to proxy.ua.pt/3128 failed
> 2008/01/10 10:23:02| TCP connection to proxy.ua.pt/3128 failed
> 2008/01/10 10:23:10| TCP connection to proxy.ua.pt/3128 failed
> 2008/01/10 10:23:32| TCP connection to proxy.ua.pt/3128 failed
> 2008/01/10 10:23:40| TCP connection to proxy.ua.pt/3128 failed
> 2008/01/10 10:24:02| TCP connection to proxy.ua.pt/3128 failed
> 2008/01/10 10:24:10| TCP connection to proxy.ua.pt/3128 failed
> 2008/01/10 10:24:32| TCP connection to proxy.ua.pt/3128 failed
> 2008/01/10 10:24:40| TCP connection to proxy.ua.pt/3128 failed
> 2008/01/10 10:25:02| TCP connection to proxy.ua.pt/3128 failed
> 2008/01/10 10:25:02| Detected DEAD Parent: proxy.ua.pt
> 2008/01/10 10:25:10| TCP connection to proxy.ua.pt/3128 failed
> 2008/01/10 10:25:32| TCP connection to proxy.ua.pt/3128 failed
> 2008/01/10 10:25:40| TCP connection to proxy.ua.pt/3128 failed
> 2008/01/10 10:26:02| TCP connection to proxy.ua.pt/3128 failed
> 2008/01/10 10:26:10| TCP connection to proxy.ua.pt/3128 failed
> 2008/01/10 10:26:40| TCP connection to proxy.ua.pt/3128 failed
> 2008/01/10 12:14:08| Failed to select source for
> 'http://www.scanproxy.com/px_judge.php?p=3128'
> 2008/01/10 12:14:08| always_direct = -1
> 2008/01/10 12:14:08| never_direct = 1
> 2008/01/10 12:14:08| timedout = 0
> 2008/01/10 14:51:17| Failed to select source for
> 'http://content-rsa.cricinfo.com/wivzimsa/engine/current/match/298803.html?view=live;wrappertype=mainframe'
> 2008/01/10 14:51:17| always_direct = -1
> 2008/01/10 14:51:17| never_direct = 1
> 2008/01/10 14:51:17| timedout = 0
> 2008/01/10 14:51:24| Failed to select source for
> 'http://content-rsa.cricinfo.com/wivzimsa/engine/current/match/298803.html'
> 2008/01/10 14:51:24| always_direct = -1
> 2008/01/10 14:51:24| never_direct = 1
> 2008/01/10 14:51:24| timedout = 0
>
> On Jan 10, 2008 11:29 AM, Amos Jeffries wrote:
>> These requests are hitting squid but squid is configured to deny direct
>> access outbound (never_direct is 1). Probably without any peers
>> configured to handle non-direct access.
>>
>> I think it should be as simple as taking the space out of your config
>> setting string:
>> option domain-name " domain.org";
>> I would expect the above to be attempting a DNS lookup of exactly "Base.
>> domain.org" and failing.

-- 
Please use Squid 2.6STABLE17 or 3.0STABLE1.
There are serious security advisories out on all earlier releases.