Re: [squid-users] TPROXY Squid Error.

2014-07-10 Thread Eliezer Croitoru
Well about the rules of mikrotik you already know that NAT is not the direction. In any case about the basic_data.sh script. I had a type but.. What terminal are you using?? In most color terminals you won't see the special markings. Thanks, Eliezer On 07/10/2014 03:28 AM, Info OoDoO wrote:

Re: [squid-users] TPROXY Squid Error.

2014-07-09 Thread Info OoDoO
Hi, I'm using Microtik 1100 AH X2 Router, here is my Basic Data from your latest script. http://pastebin.com/GHkD5yYx Thanks, Ganesh J On Wed, Jul 9, 2014 at 1:08 AM, Eliezer Croitoru elie...@ngtech.co.il wrote: What router are you using?? Eliezer P.S. I will be at the squid irc channel

Re: [squid-users] TPROXY Squid Error.

2014-07-09 Thread Nyamul Hassan
What are the rules in Mikrotik that you are using? What is the network diagram? How many interfaces on Mikrotik are you using for this purpose? How many NICs are there on the Squid box? Can you give an idea of your network diagram? Also, a few days ago, I also posted the rules that I am using

Re: [squid-users] TPROXY Squid Error.

2014-07-09 Thread Info OoDoO
I use two ports in Micortik Router. one for WAN and other for LAN, I have No rules setup in Router except the natting Src and Dst for private to public IP and vice versa. There are two nics in squid box. but I am using only one. The Lan From router is Connected to switch and the squid nic is

Re: [squid-users] TPROXY Squid Error.

2014-07-09 Thread Nyamul Hassan
There you go. NAT rules will not work on TProxy. You need to play with Mangle rules. The ones I am using are: /ip fir man add action=mark-routing chain=prerouting disabled=no dst-port=80 new-routing-mark=_to_squid_ passthrough=yes protocol=tcp src-address-list=_to_squid_ src-mac-address=!MAC

Re: [squid-users] TPROXY Squid Error.

2014-07-08 Thread Info OoDoO
Thanks Hassan, I have covered all the steps except the WCCP Configuration, Coz i dont use WCCP Router. I tried discovering for Routing loop and was unable to find any, Could you please help me How to Find a Routing loop. Here is my Squid Conf and my TCPdump sample. http://pastebin.com/aJskfywx

Re: [squid-users] TPROXY Squid Error.

2014-07-08 Thread Nyamul Hassan
tcpdump shows traffic flowing both ways, which is good. We also need to have the following settings: # sysctl.conf net.ipv4.ip_forward = 1 net.ipv4.conf.default.rp_filter = 0 net.ipv4.conf.all.rp_filter = 0 net.ipv4.conf.eth0.rp_filter = 0 net.ipv4.conf.eth1.rp_filter = 0 The last two lines

Re: [squid-users] TPROXY Squid Error.

2014-07-08 Thread Info OoDoO
Thanks Hassan, Yes I have the following settings done. Please see the details in the pastebin http://pastebin.com/YzKDSV7J -- Find Results. http://pastebin.com/XhZYiDxm --sysctl.conf Thanks, Ganesh J On Tue, Jul 8, 2014 at 2:29 PM, Nyamul Hassan nya...@gmail.com wrote: tcpdump shows traffic

Re: [squid-users] TPROXY Squid Error.

2014-07-08 Thread Nyamul Hassan
Ok. Good so far. I saw you opened another email about this. Please keep related discussions in one single thread. We had similar TProxy issues around 7-8 days ago. From your emails, it seems you are running CentOS 6.5, just like we are. The difference is that you are using Squid 3.1 which is

Re: [squid-users] TPROXY Squid Error.

2014-07-08 Thread Info OoDoO
Sorry for the other mail chain. it was opened accidentally yesterday. Thanks for the response. please find the required data below. http://pastebin.com/Abs3QmMe -- cache.log http://pastebin.com/eS94BHHu -- TCP Dump. I was able to see the site logged in access.log with http code 504, Gateway

Re: [squid-users] TPROXY Squid Error.

2014-07-08 Thread Info OoDoO
+Eliezer Thanks, Ganesh J On Tue, Jul 8, 2014 at 11:46 PM, Info OoDoO i...@oodoo.co.in wrote: Sorry for the other mail chain. it was opened accidentally yesterday. Thanks for the response. please find the required data below. http://pastebin.com/Abs3QmMe -- cache.log

Re: [squid-users] TPROXY Squid Error.

2014-07-08 Thread Nyamul Hassan
For your kind attention, i have not installed Squid 3.1.10 from YUM. I have Compiled and installed from the source with the following options. http://pastebin.com/jFhzd3qj Oh! If you did compile it, then can you check if you have libcap-devel installed? Regards HASSAN

Re: [squid-users] TPROXY Squid Error.

2014-07-08 Thread Info OoDoO
Yes.. it is installed.. libcap-devel.x86_64 2.16-5.5.el6 @base Thanks, Ganesh J On Tue, Jul 8, 2014 at 11:49 PM, Nyamul Hassan nya...@gmail.com wrote: For your kind attention, i have not installed Squid 3.1.10 from YUM. I have Compiled and installed from the

Re: [squid-users] TPROXY Squid Error.

2014-07-08 Thread Info OoDoO
Sorry, I installed it recently and it was not there when i compiled and configured squid from source. Thanks, Ganesh J On Tue, Jul 8, 2014 at 11:52 PM, Info OoDoO i...@oodoo.co.in wrote: Yes.. it is installed.. libcap-devel.x86_64 2.16-5.5.el6 @base Thanks,

Re: [squid-users] TPROXY Squid Error.

2014-07-08 Thread Nyamul Hassan
We were in the same problem just a few days ago. Can you recompile and check? Also, since you are compiling, then can you also try the latest stable version 3.4.6? Regards HASSAN On Wed, Jul 9, 2014 at 12:24 AM, Info OoDoO i...@oodoo.co.in wrote: Sorry, I installed it recently and it was not

Re: [squid-users] TPROXY Squid Error.

2014-07-08 Thread Info OoDoO
Configured Squid 3.4.6 again with all the options, still facing the same issue. Thanks, Ganesh J On Tue, Jul 8, 2014 at 11:55 PM, Nyamul Hassan nya...@gmail.com wrote: We were in the same problem just a few days ago. Can you recompile and check? Also, since you are compiling, then can you

Re: [squid-users] TPROXY Squid Error.

2014-07-08 Thread Eliezer Croitoru
What router are you using?? Eliezer P.S. I will be at the squid irc channel for about couple hours http://webchat.freenode.net/?channels=squid On 07/08/2014 10:19 PM, Info OoDoO wrote: Configured Squid 3.4.6 again with all the options, still facing the same issue. Thanks, Ganesh J On Tue,

[squid-users] TPROXY Squid Error.

2014-07-07 Thread collect oodoo
I have configured squid with the options in the below paste .. http://pastebin.com/jFhzd3qj I packets are being forwarded from the cache box to internet and i'm able to see the Client Public address instaed of squid Box Public Address.. the Issue here is the requests are not being forwarded by or

Re: [squid-users] TPROXY Squid Error.

2014-07-07 Thread Nyamul Hassan
Can you also pastebin your squid.conf? Regards HASSAN On Tue, Jul 8, 2014 at 12:53 AM, collect oodoo coll...@oodoo.co.in wrote: I have configured squid with the options in the below paste .. http://pastebin.com/jFhzd3qj I packets are being forwarded from the cache box to internet and i'm

Re: [squid-users] TPROXY Squid Error.

2014-07-07 Thread Nyamul Hassan
Hi Ganesh, In your basic data pastebin, seems like the ip rule and ip route rules are missing. Please see if running the following commands helps the situation: * echo 100 squidtproxy /etc/iproute2/rt_tables * ip rule add fwmark 1 lookup 100 * ip route add local default dev lo table 100

Re: [squid-users] TPROXY Squid Error.

2014-07-07 Thread Info OoDoO
Thanks Hassan, Now the request are passing through Squid but Failing with 110 Connection Timed Out Error. When I use transparent Mode its working fine. Any Idea..!! Thanks, Ganesh J Thanks, OodoO Fiber, +91 8940808080 www.oodoo.co.in On Tue, Jul 8, 2014 at 1:16 AM, Nyamul Hassan

Re: [squid-users] TPROXY Squid Error.

2014-07-07 Thread Nyamul Hassan
Did you check the possibility of a routing loop as described in the troubleshooting section of the TProxy wiki page? In fact, can you check that you have covered all the steps mentioned in that section? Regards HASSAN On Tue, Jul 8, 2014 at 2:37 AM, Info OoDoO i...@oodoo.co.in wrote: Thanks