hello all,

I'm scratching my head on a problem that i do not know where or how to proceed with. I'm hoping a Guru will take pity on my exhausted lobes.

I've set up a SQUID3 proxy server on an Ubuntu box. I've set up my ACL lists and can access the internet fine once I've configured my browser to use the proxy.

Now... here's the kicker:

After I've set my browser to use the proxy, i visit www.speedtest.net to do a speed test. Half-way through the speed test, it appears that the network crashes on the proxy box.

I can no longer access the internet from my clients, and i can no longer SSH into the box to reboot/diagnose. As a result i have to walk into the room and physically reboot the box.

Just in case you don't know... speedtest.net downloads and uploads a test file to your local PC, so it can then report on the speed of your net connection.

It feels like the proxy is either crashing because there is some kind of file size limit or speed limit. And when I breach that limit something is either turned off... or it craps out on me.

Thats the issue. Any advice gratefully recieved.

Sincerely

J

Hmm... ok. I think i fixed it.

I had configured my eth1 connection to use a static external IP address in /etc/network/interfaces

Turns out... that external IP address was assigned to another server on the network. Swapped external IP addresses to another IP and it seems like its not crashing anymore.

ho hum...

Ooo...actually. Disregard my post claiming I'd fixed it. I haven't.

My proxy box is still dropping any network connection when I "overload" it with a speedtest.net connection.

So... as per my original post; anyone any ideas what's happening?

Having continued to look into this issue... i;m still really no further.

My ethX's and Pings seem to be the wrong way around. To explain:

when I reboot my proxy box... i can ping "google.com" from my Eth0 interface (which is the internal 192.168.x.x card), but can NOT ping google.com from my Eth1 interface (the external xxx.xxx.xxx.xxx ip).

I would have thought that if i can ping anything... it should be from the External NIC, and the internal NIC should be reserved.

If it was a guess I;d say i have to swap the interfaces around, and make Eth0 EXTERNAL, and Eth1 INTERNAL. However, this is illogical. If the box has two NICs in it, then surely it doesn't matter which is which, just as long as they are connected correctly to the switch / gateway.

Do i have to set up ip-tables on a squid3 proxy? I thought not... but maybe...

Weeeellll... Any way.

I think its fixed again. HAHAHA! Famous last words.

I swapped my Eth1 and Eth0 over by altering the names given to them in the /etc/udev/rules.d/70-persistent-net.rules file.

It seems stable now.

Though I am perplexed as to why it woudl be so funny about seeing the Eth0 connection first etc...