[squid-users] Linux 2.4.18, squid 2.4.S3, IOS 12.2(5) wccp help!

From: Guy Fraser <guy@dont-contact.us>
Date: Fri, 03 May 2002 17:20:44 -0600

Hi

I may be blind but I can't see the problem.

The problem I am having is that squid works when manualy configured but send
errors when attempting to access a site transparently.

Here is all the info I could think of :

--------

router version

IOS (tm) 3600 Software (C3640-IS-M), Version 12.2(5), RELEASE SOFTWARE (fc1)

--------

related? cisco config

ip wccp version 1
ip wccp web-cache redirect-list 162

interface FastEthernet0/0
  ip address 206.75.213.1 255.255.255.0
  ip route-cache same-interface

interface FastEthernet1/0
  ip wccp web-cache redirect out

access-list 162 permit ip host 206.75.213.195 any
access-list 162 permit ip host 206.75.213.251 any

--------

#show ip wccp
Global WCCP information:
     Router information:
  Router Identifier: 206.75.213.1
  Protocol Version: 1.0

     Service Identifier: web-cache
  Number of Cache Engines: 1
  Number of routers: 1
  Total Packets Redirected: 663
  Redirect access-list: 162
  Total Packets Denied Redirect: 2941914
  Total Packets Unassigned: 0
  Group access-list: -none-
  Total Messages Denied to Group: 0
  Total Authentication failures: 0

--------

Server versions

Linux poseidon.incentre.net 2.4.18-0.4smp #1 SMP Wed Mar 13 10:19:26 EST
2002 i686 unknown

Squid Cache: Version 2.4.STABLE3

--------

ip_wccp install procedure

ip_wccp.o compiled with :

gcc -D__KERNEL__ -I/usr/src/linux-2.4/include -Wall -Wstrict-prototypes -O2 \
-fomit-frame-pointer -fno-strict-aliasing -pipe -fno-strength-reduce -m386 \
-DCPU=386 -DMODULE -DMODVERSIONS -include \
/usr/src/linux-2.4/include/linux/modversions.h -c ip_wccp.c

[no errors]

mv ip_wccp.o /lib/modules/2.4.18-0.4smp/kernel/net/ipv4/ip_wccp.o

pico /lib/modules/2.4.18-0.4smp/modules.dep

add line:

/lib/modules/2.4.18-0.4smp/kernel/net/ipv4/ip_wccp.o:

/sbin/modprobe ip_wccp

[no errors]

/sbin/depmod -a -e

[no errors]

--------

squid.conf

http_port 3128
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 512 MB
cache_dir ufs /var/spool/squid 40731 16 256
ftp_user poseidon@incentre.net
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
http_access allow manager localhost
http_access deny manager
http_access allow all
httpd_accel_uses_host_header on
wccp_router 206.75.213.1

--------

ipchains configuration

:input ACCEPT
:forward ACCEPT
:output ACCEPT
-A input -s 0/0 -d 0/0 -i lo -j ACCEPT
-A input -s 0/0 -d 206.75.213.171 80 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 80 -p tcp -j REDIRECT 3128
-A input -s 0/0 -d 0/0 8080 -p tcp -j REDIRECT 3128
-A input -s 206.75.213.0/24 -d 0/0 22 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 206.75.213.171 3128 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 206.75.213.171 8080 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 206.75.213.171 3130 -p udp -j ACCEPT
-A input -s 0/0 2048 -d 0/0 2048 -p udp -j ACCEPT
-A input -s 198.161.96.5 53 -d 0/0 -p udp -j ACCEPT
-A input -s 204.209.46.1 53 -d 0/0 -p udp -j ACCEPT
-A input -s 0/0 -d 0/0 137 -p udp -j REJECT
-A input -s 0/0 -d 0/0 138 -p udp -j REJECT
-A input -s 0/0 520 -p udp -j REJECT
-A input -s 0/0 -d 0/0 -p tcp -y -j REJECT -l
-A input -s 0/0 -d 0/0 -p udp -j REJECT -l

--------

Browser output from {http://www.apple.com/} using manual proxy connection
works properly.

Browser output from {http://www.apple.com/} using direct connection :

ERROR
The requested URL could not be retrieved

While trying to retrieve the URL: /

The following error was encountered:

     * Invalid URL

Some aspect of the requested URL is incorrect. Possible problems:

     * Missing or incorrect access protocol (should be `http://'' or similar)
     * Missing hostname
     * Illegal double-escape in the URL-Path
     * Illegal character in hostname; underscores are not allowed

Your cache administrator is root.
Generated Fri, 03 May 2002 00:32:22 GMT by poseidon.incentre.net
(Squid/2.4.STABLE3)

--------
Received on Fri May 03 2002 - 17:20:46 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:07:54 MST