Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1049
  • Last Modified:

squid proxy

I have squid proxy on suse enterprise linux 11.2, for some maintenance puposes i have to swap the proxy ip with Windows ISA server. after that my squid is not working,so i am getting the following error in my access log file and none of user is able to browse the internet.

1382609509.685 239818 172.16.225.203 TCP_CLIENT_REFRESH_MISS/504 0 GET http://dnl-07.geo.kaspersky.com/index/u0607g.xml.dif - DIRECT/130.117.190.137 text/html
1382609515.918   9913 172.16.225.203 TCP_MISS/000 0 CONNECT 62.213.110.174:443 - NONE/- -
one more thing i am getting the different dns records in nslookup query

while i checked in the dns server there is only one record against the proxy with the new ip but on the linux machine itself there are three records.I have cleared the cache uodated the dns record even restarted the proxy server but in vain.

40.0.16.172.in-addr.arpa        name = isa.abc.local
40.0.16.172.in-addr.arpa        name = proxy-web.abc.local.
40.0.16.172.in-addr.arpa        name = proxy-server.abc.local
0
kastro Abbasi
Asked:
kastro Abbasi
  • 2
1 Solution
 
Daniel HelgenbergerCommented:
I am not sure if I get what you have done?
1 shutdown squid
2 swapped IPs with another proxy
3 start squid
4 swiched back IPs
All was working well until after step 4.

TCP_CLIENT_REFRESH_MISS/504
TCP/504 is a gateway timeout - can you confirm squid can connect to the requested site? Maybe someth. went wrong when switching IPs or something (firewall) is blocking squid? Maybe iptables?

Basic debug on the cache server:
curl http://dnl-07.geo.kaspersky.com/index/u0607g.xml.dif

Open in new window

0
 
kastro AbbasiAuthor Commented:
no i can not even browse on the proxy itself. But why i am geting the two records against this server updating the old records in dns server and clear the cache on this machine.
0
 
Daniel HelgenbergerCommented:
no i can not even browse on the proxy itself
What does this mean? Proxy has no wan connectivity?

There are many reasons why you could get those PTR's, most likely they are in the DNS you do your lookup against - and a left over from the IP switching. But don't worry, they to no harm and have nothing to do with your current problem. Consider cleaning up your reverse lookup zones to get rid of those PTRs.
0

Featured Post

 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now