I have two boxes (172.16.1.224 and 172.16.1.218). I have squid running on both and am using a DNAT (Shorewall) to forward traffic on port 80 of x.x.x.224 to port 3129 (Squid) of x.x.x.218.
The problem is when I connect my browser's proxy to 172.16.1.224:3128, I get the following error:
ERROR The requested URL could not be retrieved
The following error was encountered while trying to retrieve the URL: http://www.google.com/search?
Connection to 74.125.77.99 failed.The system returned: (113) No route to host
The remote host or network may be down. Please try the request again.
Your cache administrator is webmaster.
Generated Tue, 21 Jun 2011 10:24:57 GMT by remote-site (squid/2.7.STABLE9)
When I turn off the DNAT and connect my browser to x.x.x.224:3128 and x.x.x.218:3129, the proxies work fine individually. It's when I try to link the two together the problems arise.
I'm using Ubuntu. When I ran the same setup on Fedora, it worked fine - I just had to do a sudo iptables stop. I really need to get this working on Ubuntu and I'm totally stuck.
Here are the last two lines from /var/log/syslog:
Jun 21 11:27:18 remote-site kernel: [4337.397707] martian source 255.255.255.255 from 169.254.100.100, on dev eth2
Jun 21 11:27:18 remote-site kernel: [4337.397831] ll header: ff:ff:ff:ff:ff:ff:00:0f:cb:dd:9d:40:08:00
Here are some lines from /var/log/squid/access.log on x.x.x.224:
1308651123.145 0 172.16.1.227 TCP_MISS/504 1614 GET http://go/favicon.ico - DIRECT/go text/html
1308651158.257 27205 172.16.1.227 TCP_MISS/504 1503 GET http://www.google.ie/ - DIRECT/209.85.143.99 text/html
1308651346.753 27166 172.16.1.227 TCP_MISS/504 1503 GET http://www.google.ie/ - DIRECT/209.85.143.99 text/html
1308651416.192 27160 172.16.1.227 TCP_MISS/504 1503 GET http://www.google.ie/ - DIRECT/209.85.143.99 text/html
I'm really stuck and I'd very much appreciate any suggestions.
