Univention Bugzilla – Bug 53011
Squid does not start after being configured as a transparent proxy
Last modified: 2022-07-13 09:29:47 CEST
When configuring squid as a transparent proxy, squid is not able to start any more. In order to generate a valid URL to fetch some needed content, squid needs a port configured to receive normal forward-proxy traffic. In this case port 3128 is now used as a transparent port and cannot be used as such. Adding an additional port in the squid.conf, e.g. http_port 3129 makes it so squid can be started again. Transparent proxy mode then works as expected. To reproduce (UCS5 only): univention-app install squid echo "1" >/proc/sys/net/ipv4/ip_forward ucr set squid/transparentproxy=yes /etc/init.d/univention-firewall restart /etc/init.d/squid restart Logs: Mär 30 11:47:47 p16 squid[13982]: ERROR: No forward-proxy ports configured. Mär 30 11:47:47 p16 squid[13982]: Not currently OK to rewrite swap log. Mär 30 11:47:47 p16 squid[13982]: storeDirWriteCleanLogs: Operation aborted. Mär 30 11:47:47 p16 squid[13982]: FATAL: mimeLoadIcon: cannot parse internal URL: http://p16.jbp16.intranet:0/squid-internal-static/icons/silk/image.png Docs: https://wiki.squid-cache.org/KnowledgeBase/NoForwardProxyPorts
This is needed as soon as we have UCS@school for UCS 5.0.
Created attachment 10677 [details] squid.conf patch
Created attachment 10678 [details] actual squid.conf patch ..
See also git:9d5891bb870705ea05ae976a1d21997756f46dcf which is related to the new behavior. It looks like it was broken in UCS 4.4 as well, but didn't came into effect because 'squid/virusscan'/'squid/contentscan' was set there?
I tried to reproduce this in ucs4, the same error is shown (ERROR: No forward-proxy ports configured), but squid starts and works as a transparent proxy as expected. I guess the older squid version did not try to fetch from any internal url as this version does?
Fixed in (applied patch without typos): univention-squid (13.0.3-1) d4d1fe7d18e2 | Bug #53011: make sure squid starts when configured as transparent proxy interim bug, no changelog required.
Installation: OK Squid runs after being configured as a transparent proxy: OK Additional port opened if transparent proxy: OK Verified
UCS 5.0 has been released: https://docs.software-univention.de/release-notes-5.0-0-en.html https://docs.software-univention.de/release-notes-5.0-0-de.html If this error occurs again, please use "Clone This Bug".