Re: forwarding loop

Article View: bit.listserv.openbsd-pf

Article #249

Back to bit.listserv.openbsd-pf Previous Next

#249

From: Leslie Jensen
Date: Tue, 15 Jan 2013 11:35

32 lines
2200 bytes


2013-01-15 11:10, Daniel Hartmeier skrev:
> Wait, the squid server is on a separate host, on the $int_if side of the
> firewall (the same side the clients are on)?
>
> Then transparent proxying would require "reflection", and doesn't work, see
> http://www.openbsd.org/faq/pf/rdr.html#reflect
>
> If squid is seeing TCP_MISS errors, that probably means the clients are
> using the proxy explicitely (not transparently), and the rdr is not
> being used at all...
>
> This worked for the past years how?
>
> Daniel
>

Yes! This machine has been in service since Freebsd 7.2.

That's why I'm totally lost and ask for advise.

It's one machine with two nic's functioning as a gateway running pf and 
squid as proxy.

The problems showed themselves when squid updated to version 3.2.

Any help to clarify the situation is appreciated.

Thanks

/Leslie

Technical Details

Message-ID: <50F53466.1010803@eskk.nu>

Path:

arc1-ca.pugleaf.net!o9ni8334wio.1!nntp.google.com!feeder1.cambriumusenet.nl!feed.tweaknews.nl!193.141.40.65.MISMATCH!npeer.de.kpn-eurorings.net!npeer-ng0.de.kpn-eurorings.net!border2.nntp.ams2.giganews.com!border4.nntp.ams.giganews.com!border2.nntp.ams.giganews.com!nntp.giganews.com!news.nobody.at!news.glorb.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn

References:

<50F10ACD.9090605@eskk.nu> <20130114095023.GC8895@insomnia.benzedrine.cx> <50F42B02.70405@eskk.nu> <20130115101033.GA2410@insomnia.benzedrine.cx>

Show Full Headers

Complete Article Headers

X-Google-Thread: bffa70e3,65dda175aebfa248
X-Google-Attributes: gidbffa70e3,public,usenet
X-Google-NewGroupId: yes
X-Google-Language: ENGLISH,ASCII-7-bit
X-Received: by 10.180.79.69 with SMTP id h5mr1448038wix.6.1358653626169;
        Sat, 19 Jan 2013 19:47:06 -0800 (PST)
Path: arc1-ca.pugleaf.net!o9ni8334wio.1!nntp.google.com!feeder1.cambriumusenet.nl!feed.tweaknews.nl!193.141.40.65.MISMATCH!npeer.de.kpn-eurorings.net!npeer-ng0.de.kpn-eurorings.net!border2.nntp.ams2.giganews.com!border4.nntp.ams.giganews.com!border2.nntp.ams.giganews.com!nntp.giganews.com!news.nobody.at!news.glorb.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn
From: leslie@eskk.nu (Leslie Jensen)
Newsgroups: bit.listserv.openbsd-pf
Subject: Re: forwarding loop
Date: 15 Jan 2013 03:35:39 -0800
Organization: None
Lines: 32
Message-ID: <50F53466.1010803@eskk.nu>
References: <50F10ACD.9090605@eskk.nu> <20130114095023.GC8895@insomnia.benzedrine.cx> <50F42B02.70405@eskk.nu> <20130115101033.GA2410@insomnia.benzedrine.cx>
NNTP-Posting-Host: bljbsd01.no-ip.org
Mime-Version: 1.0
NNTP-Posting-Date: 15 Jan 2013 11:35:39 GMT
X-Received-Bytes: 1562
Bytes: 1740
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Reply to Parent Message