Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 01 Oct 2007 09:55:31 +0200
From:      Kris Kennaway <kris@FreeBSD.org>
To:        Peter Jeremy <peterjeremy@optushome.com.au>
Cc:        net@freebsd.org
Subject:   Re: localhost connections showing source address 0.0.0.0
Message-ID:  <4700A7F3.7060206@FreeBSD.org>
In-Reply-To: <20071001070634.GO1752@turion.vk2pj.dyndns.org>
References:  <46FEB462.4040307@FreeBSD.org> <20071001070634.GO1752@turion.vk2pj.dyndns.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Peter Jeremy wrote:
> On 2007-Sep-29 22:24:02 +0200, Kris Kennaway <kris@freebsd.org> wrote:
>> Going back at least as far as January 2007 some of the package build 
>> machines have occasionally experienced a problem where a fetch(1) via a 
>> localhost:3128 squid proxy are denied because squid sees the connection as 
>> having a source address of 0.0.0.0 instead of 127.0.0.1.
> 
> Can you capture source port as well (squid.conf says %>p will do this)?

Thanks, I am tcpdumping for this already but will change squid.conf.

> Is there any correlation with the source port or package being fetched?
> Is it consistent?

There is no consistency, repeating the same fetch will work.  It's only 
happening on something like 0.002% of all squid connections.

Kris





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4700A7F3.7060206>