Re: [SLUG] Re: [chat] Problems with Squid 2.5.2 under Debian Woody

[Robert Collins <robertc@xxxxxxxxxxxxxxx>]

Do you have ECN turned on?

On Tue, 2003-05-06 at 17:00, mkraus@xxxxxxxxxxxxxxxxxxxxxx wrote:
> G'day...
> 
> 1052195038.292   1946 192.168.100.250 TCP_MISS/503 1502 GET
> http://www.mycareer.com.au/ - NONE/- text/html
> 
> The connection is refused...
> 
> 
> 
> Below are my firewal rules:
> 
> Please note that removing the FORWARD rules makes no difference from
> the firewall machine (on which squid resides). It does make a
> difference to the client, if I choose to connect directly rather than
> via the cache.
> 
> Also please note that other web addresses still do work.
> 
> =========================
> Chain INPUT (policy ACCEPT)
> target     prot opt source               destination
> ACCEPT     all  --  internal/24          anywhere
> ACCEPT     tcp  --  anywhere             anywhere           tcp
> dpt:smtp
> ACCEPT     icmp --  klaxon.pacific.net.au  anywhere
> ACCEPT     icmp --  nicothoe.pacific.net.au  anywhere
> ACCEPT     all  --  anywhere             anywhere           state
> RELATED,ESTABLISHED
> ACCEPT     tcp  --  anywhere             anywhere           tcp
> spt:www
> REJECT     all  --  anywhere             anywhere          
> reject-with icmp-port-unreachable
> 
> Chain FORWARD (policy ACCEPT)
> target     prot opt source               destination
> REJECT     tcp  --  anywhere             anywhere           tcp
> dpt:www reject-with icmp-port-unreachable
> REJECT     all  -- !192.168.0.0/16       anywhere          
> reject-with icmp-port-unreachable
> 
> Chain OUTPUT (policy ACCEPT)
> target     prot opt source               destination
> 
> Chain PREROUTING (policy ACCEPT)
> target     prot opt source               destination
> 
> Chain POSTROUTING (policy ACCEPT)
> target     prot opt source               destination
> SNAT       all  --  internal/24         !192.168.0.0/16    
> to:210.23.146.46
> 
> Chain OUTPUT (policy ACCEPT)
> target     prot opt source               destination
> =====
> 
> 
> TIA
> 
> Mike
> ---
> Michael S. E. Kraus
> Administration
> Capital Holdings Group (NSW) Pty Ltd
> p: (02) 9955 8000
> 
> 
> 
> scott@xxxxxxxxxxxxxxxxxxxxxx
> 
> 06/05/2003 01:29 PM
>         
>         To:      
> mkraus@xxxxxxxxxxxxxxxxxxxxxx
>         cc:      
> slug-chat@xxxxxxxxxxx,
> slug@xxxxxxxxxxx
>         Subject:      
> Re: [chat] Problems
> with Squid 2.5.2 under
> Debian Woody
> 
> 
> Whats the error?
> Does www.mycareer.com.au resolve to an IP from both your machine and
> the 
> squid server?
> does looking through /var/log/squid/access.log give any clues?
> 
> Cheers,
> 
> Scott
> 
> -- 
> Scott Ragen
> Support Manager/IT Administrator
> Roadtech Systems
> www.roadtechsystems.com.au
> PH: +61 2 9807 3516 FAX: +61 2 9808 5294
> 
> slug-chat-bounces@xxxxxxxxxxx wrote on 06-05-2003 09:37:58 AM:
> 
> > 
> > G'day all...
> > 
> > I'm having troubles connecting to certain sites using Squid. (Eg.
> > http://www.mycareer.com.au/ )
> > 
> > Any ideas?
> > 
> > More information happily provided upon request.
> > 
> > TIA
> > 
> > Mike
> > ---
> > Michael S. E. Kraus
> > Administration
> > Capital Holdings Group (NSW) Pty Ltd
> > p: (02) 9955 8000
> > 
> > 
> > 
> > 
> > 
> > -- 
> > SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
> > More Info: http://lists.slug.org.au/listinfo/slug-chat
> 
> 
> 
> 
> 
> ______________________________________________________________________
> 
> -- 
> SLUG - Sydney Linux User's Group - http://slug.org.au/
> More Info: http://lists.slug.org.au/listinfo/slug
-- 
GPG key available at: <http://users.bigpond.net.au/robertc/keys.txt>.

Attachment: signature.asc
Description: This is a digitally signed message part