[squid-users] ERROR: No forward-proxy ports configured.

From: Nick Urbanik <nicku_at_nicku.org>
Date: Wed, 29 Feb 2012 22:00:27 +1100

Dear Folks,

After a yum upgrade to this Fedora 16 box a few days ago, I now have
squid-3.2.0.15-1.fc16.x86_64, and now have this message appearing in
my /var/log/squid/cache.log:
ERROR: No forward-proxy ports configured.

I changed these lines:

http_port 192.168.0.1:3128 transparent
http_port 127.0.0.1:3128 transparent
to
http_port 192.168.0.1:3128 intercept
http_port 127.0.0.1:3128 intercept
but still no joy. Here is my configuration:

$ sudo grep -v '^ *$' /etc/squid/squid.conf | grep -v '^ *#'
acl home src 192.168.0.0/24
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow home
http_access allow localhost
http_access deny all
http_port 192.168.0.1:3128 intercept
http_port 127.0.0.1:3128 intercept
hierarchy_stoplist cgi-bin ?
cache_mem 48 MB
cache_replacement_policy heap LFUDA
cache_dir diskd /var/spool/squid 10000 160 2560
maximum_object_size 409600 KB
access_log /var/log/squid/access.log squid
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern (cgi-bin|\?) 0 0% 0
refresh_pattern . 0 20% 4320
visible_hostname www3.nicku.org
icp_port 3130
coredump_dir /var/spool/squid
max_filedesc 4096

The system has been working for a couple of years till a few days
ago.

The machine is set up with two network interfaces, one to the internal
network on 192.168.0.1, the other on the Internet. There are iptables
rules using redirects.

I would be grateful if someone could point me in the right direction.

Is there any further information I should provide?

-- 
Nick Urbanik             http://nicku.org           nicku@nicku.org
GPG: 7FFA CDC7 5A77 0558 DC7A 790A 16DF EC5B BB9D 2C24 ID: BB9D2C24
Received on Wed Feb 29 2012 - 11:00:41 MST

This archive was generated by hypermail 2.2.0 : Wed Feb 29 2012 - 12:00:06 MST