LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   Squid 3.1.6 and www.snort.org timeout (https://www.linuxquestions.org/questions/linux-networking-3/squid-3-1-6-and-www-snort-org-timeout-4175432270/)

shayno90 10-15-2012 05:32 AM

Squid 3.1.6 and www.snort.org timeout
 
I cannot connect to www.snort.org via squid3 proxy:
-------------------------------------------------
TCP_MISS/503 4002 GET http://www.snort.org/ - DIRECT/23.23.170.170 text/html
---------------------------------------------------
The following error was encountered while trying to retrieve the URL: http://www.snort.org/

Connection to 23.23.170.170 failed.

The system returned: (110) Connection timed out

The remote host or network may be down. Please try the request again.

Your cache administrator is webmaster.
----------------------------------------
I added the dns_v4 option to squid.conf:
dns_v4_fallback on

and also:

#tcp_outgoing_address 23.23.170.170

neither seem to work

Contacted ISP and snort.org admins but no luck either.

Either it is a firewall issue or squid issue?

hamlindsza 11-11-2012 01:23 AM

If you are unable to telnet snort.org on port 80 then its a firewall issue.

If you are able to telnet, then it could be a squid configuration issue. Could u post your squid configuration here?

shayno90 11-12-2012 04:27 AM

Quote:

Originally Posted by hamlindsza (Post 4826818)
If you are unable to telnet snort.org on port 80 then its a firewall issue.

If you are able to telnet, then it could be a squid configuration issue. Could u post your squid configuration here?

Yes, it looks like a firewall issue:

telnet snort.org 80
Trying 23.23.143.164...
telnet: Unable to connect to remote host: Connection timed out

and

telnet openvas.org 80
Trying 5.9.98.186...
telnet: Unable to connect to remote host: Connection timed out

Those domains used to be accessible so I am not sure what was changed exactly in the firewall.

Then paypal.com used to be accessible and now this:

telnet paypal.com 80
Trying 66.211.169.66...
Connected to paypal.com.
Escape character is '^]'.

but in the browser:

Unable to connect
Firefox can't establish a connection to the server at www.paypal.com.

I thought this may be an issue with ipv6 settings in squid3.1.6 for these domains but need to see what exact port is being blocked for only these domains since other domains are accessible on port 80.


All times are GMT -5. The time now is 01:48 PM.