Re: forwarding loop

Leslie Jensen <[email protected]> Tue, 15 Jan 2013 11:50:14 +0100
Newsgroups gmane.os.openbsd.pf
Message-ID <[email protected]>

2013-01-15 11:10, Daniel Hartmeier skrev:
> Wait, the squid server is on a separate host, on the $int_if side of the
> firewall (the same side the clients are on)?
>
> Then transparent proxying would require "reflection", and doesn't work, see
> http://www.openbsd.org/faq/pf/rdr.html#reflect
>
> If squid is seeing TCP_MISS errors, that probably means the clients are
> using the proxy explicitely (not transparently), and the rdr is not
> being used at all...
>
> This worked for the past years how?
>
> Daniel
>

Yes! This machine has been in service since Freebsd 7.2.

That's why I'm totally lost and ask for advise.

It's one machine with two nic's functioning as a gateway running pf and 
squid as proxy.

The problems showed themselves when squid updated to version 3.2.

Any help to clarify the situation is appreciated.

Thanks

/Leslie