Regarding: 
"Squid is missing a logcheck rule to ignore the seemingly routine and 
impossible to stop message that follows:

Dec 4 14:04:11 ursine squid[2869]: parseHttpRequest: NF
getsockopt(SO_ORIGINAL_DST) failed: (92) Protocol not available"

The above error is a useful indicator of bad config. It is produced when
receiving non-NAT intercepted requests on a port flagged as receiving ONLY
NAT intercepted requests. The above message will be produced once for every
ten or so non-NAT message the system NAT table fails to locate.

This is resolve by using two ports like so:
http_port 3128
http_port 10000 transparent

.. with the firewall interception passing traffic to Squid 10000. Regular
users configured for use of 3128.

Amos
Squid Team




--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to