[Issue Report] Squid forward request to 0.0.0.0/8
"Yang, Chao" <[email protected]> Thu, 5 Jun 2025 08:04:09 +0000
| Newsgroups | gmane.comp.web.squid.devel |
|---|---|
| Message-ID | <[email protected]> |
--===============9037844182761091734==
Content-Language: zh-CN
Content-Type: multipart/alternative;
boundary="_000_9f2ee826cd454f898e2dcb7042173bf3nwcdcloudcn_"
--_000_9f2ee826cd454f898e2dcb7042173bf3nwcdcloudcn_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Dear Squid Support Team,
Hope you are everything well.
I meet a strange issue and hope you could give some suggestions.
Background:
I am using squid as a proxy to register my SUSE EC2 Instance in AWS. I inst=
alled squid in Amazon Linux 2023 and just modify /etc/squid/squid.conf file=
"http_access deny all" to "http_access allow all".
After that , I set the enviroment in SUSE Instance(172.31.45.49 is Squid in=
stance):
env | grep proxy
https_proxy=3Dhttp://172.31.45.49:3128
http_proxy=3Dhttp://172.31.45.49:3128
no_proxy=3D169.254.169.254
When I tried to register SUSE instance with command "registercloudguest --f=
orce-new", got the following error(/var/log/cloudregister):
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
2025-06-05 05:23:34,418 ERROR: Registration failed: Registering system to =
registration proxy https://smt-ec2.susecloud.net
Updating system details on https://smt-ec2.susecloud.net ...
Activating sle-module-web-scripting 15.5 x86_64 ...
-> Adding service to system ...
command '/usr/bin/zypper --non-interactive refs Web_and_Scripting_Module_x8=
6_64' failed
Error: zypper returned 1 with 'Unexpected exception.
Unknown error reading from 'plugin:/susecloud?credentials=3DWeb_and_Scripti=
ng_Module_x86_64&path=3D/services/2494'
History:
- Not ready to read within timeout.
Please file a bug report about this.
See http://en.opensuse.org/Zypper/Troubleshooting for instructions.' (exit =
status 1)
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Action taken:
I found there are lots of strange log when I register SUSE as below(/var/lo=
g/squid/access.log):
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
1749103351.951 3 172.31.47.207 TCP_DENIED/403 3804 CONNECT 0.0.10.40:1=
- HIER_NONE/- text/html
1749103366.975 4 172.31.47.207 TCP_DENIED/403 3802 CONNECT 0.0.9.96:7 =
- HIER_NONE/- text/html
1749103375.466 59932 172.31.47.207 TCP_TUNNEL/503 0 CONNECT 0.0.9.102:443 =
- HIER_DIRECT/0.0.9.102 -
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
After I edited the config file(/etc/squid/squid.conf) and add the following=
:
acl invalid_dst dst 0.0.0.0/8
http_access deny invalid_dst
I could register SUSE without any error.
When I access Amazon S3 using squid instance, there is no any strange IP in=
the access log.
I checked /etc/hosts and no any information of "0.0.0.0/8"
Action Required:
Do you know why squid forward request to 0.0.0.0/8?
Thank you!
Best Regards
Yang Chao
--_000_9f2ee826cd454f898e2dcb7042173bf3nwcdcloudcn_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:DengXian;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:DengXian;
panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
text-align:justify;
text-justify:inter-ideograph;
font-size:10.5pt;
font-family:DengXian;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:DengXian;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:DengXian;}
/* Page Definitions */
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"ZH-CN" link=3D"#0563C1" vlink=3D"#954F72" style=3D"text-justi=
fy-trim:punctuation">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span lang=3D"EN-US">Dear Squid Support Team,<o:p></=
o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">Hope you are everything well.<o=
:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">I meet a strange issue and hope=
you could give some suggestions.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><b><span lang=3D"EN-US" style=3D"font-size:11.0pt">B=
ackground:<o:p></o:p></span></b></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">I am using squid as a proxy to =
register my SUSE EC2 Instance in AWS. I installed squid in Amazon Linux 202=
3 and just modify /etc/squid/squid.conf file "http_access deny all&quo=
t; to "http_access allow all".
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">After that , I set the envirome=
nt in SUSE Instance(172.31.45.49 is Squid instance):<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"> env | grep p=
roxy<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"> https_proxy=
=3Dhttp://172.31.45.49:3128<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"> http_proxy=
=3Dhttp://172.31.45.49:3128<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"> no_proxy=3D1=
69.254.169.254<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"> &=
nbsp; <o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">When I tried to register SUSE i=
nstance with command "registercloudguest --force-new", got the fo=
llowing error(/var/log/cloudregister):<o:p></o:p></span></p>
<p class=3D"MsoNormal"><i><span lang=3D"EN-US">=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D<o:p></o:p></span></i></p>
<p class=3D"MsoNormal"><i><span lang=3D"EN-US">2025-06-05 05:23:34,418 ERRO=
R: Registration failed: Registering system to registration proxy http=
s://smt-ec2.susecloud.net<o:p></o:p></span></i></p>
<p class=3D"MsoNormal"><i><span lang=3D"EN-US"><o:p> </o:p></span></i>=
</p>
<p class=3D"MsoNormal"><i><span lang=3D"EN-US">Updating system details on h=
ttps://smt-ec2.susecloud.net ...<o:p></o:p></span></i></p>
<p class=3D"MsoNormal"><i><span lang=3D"EN-US"><o:p> </o:p></span></i>=
</p>
<p class=3D"MsoNormal"><i><span lang=3D"EN-US">Activating sle-module-web-sc=
ripting 15.5 x86_64 ...<o:p></o:p></span></i></p>
<p class=3D"MsoNormal"><i><span lang=3D"EN-US">-> Adding service to syst=
em ...<o:p></o:p></span></i></p>
<p class=3D"MsoNormal"><i><span lang=3D"EN-US">command '/usr/bin/zypper --n=
on-interactive refs Web_and_Scripting_Module_x86_64' failed<o:p></o:p></spa=
n></i></p>
<p class=3D"MsoNormal"><i><span lang=3D"EN-US">Error: zypper returned 1 wit=
h 'Unexpected exception.<o:p></o:p></span></i></p>
<p class=3D"MsoNormal"><i><span lang=3D"EN-US">Unknown error reading from '=
plugin:/susecloud?credentials=3DWeb_and_Scripting_Module_x86_64&path=3D=
/services/2494'<o:p></o:p></span></i></p>
<p class=3D"MsoNormal"><i><span lang=3D"EN-US">History:<o:p></o:p></span></=
i></p>
<p class=3D"MsoNormal"><i><span lang=3D"EN-US">- Not ready to read within t=
imeout.<o:p></o:p></span></i></p>
<p class=3D"MsoNormal"><i><span lang=3D"EN-US"><o:p> </o:p></span></i>=
</p>
<p class=3D"MsoNormal"><i><span lang=3D"EN-US">Please file a bug report abo=
ut this.<o:p></o:p></span></i></p>
<p class=3D"MsoNormal"><i><span lang=3D"EN-US">See http://en.opensuse.org/Z=
ypper/Troubleshooting for instructions.' (exit status 1)<o:p></o:p></span><=
/i></p>
<p class=3D"MsoNormal"><i><span lang=3D"EN-US">=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D<o:p></o:p></span></i></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><b><span lang=3D"EN-US" style=3D"font-size:11.0pt">A=
ction taken:<o:p></o:p></span></b></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">I found there are lots of stran=
ge log when I register SUSE as below(/var/log/squid/access.log):<o:p></o:p>=
</span></p>
<p class=3D"MsoNormal"><i><span lang=3D"EN-US">=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D<o:p></o:p></span></i></p>
<p class=3D"MsoNormal"><i><span lang=3D"EN-US">1749103351.951 &n=
bsp; 3 172.31.47.207 TCP_DENIED/403 3804 CONNECT 0.0.10.40:1 - =
HIER_NONE/- text/html<o:p></o:p></span></i></p>
<p class=3D"MsoNormal"><i><span lang=3D"EN-US">1749103366.975 &n=
bsp; 4 172.31.47.207 TCP_DENIED/403 3802 CONNECT 0.0.9.96:7 - H=
IER_NONE/- text/html<o:p></o:p></span></i></p>
<p class=3D"MsoNormal"><i><span lang=3D"EN-US">1749103375.466 59932 1=
72.31.47.207 TCP_TUNNEL/503 0 CONNECT 0.0.9.102:443 - HIER_DIRECT/0.0.9.102=
-<o:p></o:p></span></i></p>
<p class=3D"MsoNormal"><i><span lang=3D"EN-US">=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D<o:p></o:p></span></i></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">After I edited the config file(=
/etc/squid/squid.conf) and add the following:<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"> acl invalid_=
dst dst 0.0.0.0/8 <o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"> http_ac=
cess deny invalid_dst<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"> &=
nbsp; <o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">I could register SUSE without a=
ny error.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">When I access Amazon S3 using s=
quid instance, there is no any strange IP in the access log.<o:p></o:p></sp=
an></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">I checked /etc/hosts and no any=
information of "0.0.0.0/8"<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><b><span lang=3D"EN-US" style=3D"font-size:11.0pt">A=
ction Required:<o:p></o:p></span></b></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">Do you know why squid forward r=
equest to 0.0.0.0/8?<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">Thank you!<o:p></o:p></span></p=
>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">Best Regards<o:p></o:p></span><=
/p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">Yang Chao<o:p></o:p></span></p>
</div>
</body>
</html>
--_000_9f2ee826cd454f898e2dcb7042173bf3nwcdcloudcn_--
--===============9037844182761091734==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
squid-dev mailing list
[email protected]
https://lists.squid-cache.org/listinfo/squid-dev
--===============9037844182761091734==--