[AuckLUG] Help with Squid (As a transparent proxy) and Debian...

[Daniel Pittman]

Chris Hodgetts <chris at archnetnz.com> writes:

>> > httpd_accel_host virtual
>> > httpd_accel_port 80
>> > httpd_accel_with_proxy on
>> > httpd_accel_uses_host_header on
>> 
>> Those are the correct settings, which I am using for my transparent
>> 2.5.10 squid on at least one site; a quick check of the 2.6
>> configuration file shows they are still good there...
>> 
>> Can you post the specific error messages, perhaps, which might help
>> understand what the problem is -- because those lines /are/ valid in the
>> default Debian/stable squid system. :)
>
> With those lines in I get this:
>
> caitlin:/etc/squid# /etc/init.d/squid restart
> Restarting Squid HTTP proxy: squid2006/07/17 20:45:53| parseConfigFile:
> line 2533 unrecognized: 'httpd_accel_host v irtual'
> 2006/07/17 20:45:53| parseConfigFile: line 2534 unrecognized:
> 'httpd_accel_port 80'
> 2006/07/17 20:45:53| parseConfigFile: line 2535 unrecognized:
> 'httpd_accel_with_proxy on'
> 2006/07/17 20:45:53| parseConfigFile: line 2536 unrecognized:
> 'httpd_accel_uses_host_header on'
> .
> caitlin:/etc/squid#

I presume the extra space in the first error is a cut and paste issue,
rather than anything else.

The error you reported in another message...

> 1153129051.821     72 192.168.100.12 TCP_DENIED/400 1732 GET
> error:invalid-request - NONE/- text/html

...supports that, too.  That would be an error caused by the virtual
host acceleration stuff not working.

> Without those lines, it starts OK.. 

Crazy.  You are sure this is the squid package from Debian 3.1, right?

I ask that because I do have a system running right now, on exactly that
platform, with exactly those lines -- and it works!


I would almost guess that you have a locally compiled (and broken)
version of Squid installed or something.

My suggestion at this point would be to forcibly reinstall the Debian
version:


 ] apt-get install --reinstall squid/stable squid-common/stable 

That should force the system to install a good version of the packages
direct from the Debian repositories.  

Hopefully that will fix the problem with enabling the transparent proxy
support and, consequently, allow you to make progress.

> And I can specify my browser to use it as an HTTP proxy and it appears
> to work correctly, however I think I need contrack in my kernel, which I
> do not have............

The kernel contrack module will be needed for transparent proxy support,
but that will not help until the squid issue is resolved.

In any case it should be automatically loaded when needed. :)

Regards,
        Daniel
-- 
Digital Infrastructure Solutions -- making IT simple, stable and secure
Phone: 0401 155 707        email: contact at digital-infrastructure.com.au
http://digital-infrastructure.com.au/