Results 1 to 8 of 8
I´m brazilian and I am having a small problem with squid.
we need to make a computer running windows be able to execute the command tracert any ip (obviously this ...
Enjoy an ad free experience by logging in. Not a member yet? Register.
- 01-07-2004 #1Just Joined!
- Join Date
- Jan 2004
- Posts
- 4
tracert + squid in a windows workstation
I´m brazilian and I am having a small problem with squid.
we need to make a computer running windows be able to execute the command tracert any ip (obviously this computer is behind a rh9 server with squid as proxy server).
Does somebody know how i can do this, we have already recompiled squid, and liberated all the access we thought could have a relation with this, but we got nothing. Does somebody know what can be done, in order to allow the client to execute the command.
- 01-07-2004 #2Linux Guru
- Join Date
- Apr 2003
- Location
- London, UK
- Posts
- 3,284
It is proberly not squid causing the problem, squid is a HTTP proxy, tracert/traceroute has nothing to do with HTTP.
What happens when you perform a traceroute?
Jason
- 01-07-2004 #3Just Joined!
- Join Date
- Jan 2004
- Posts
- 4
it show a result for the route until the proxy, and after the proxy it shows other routes without name and unreachable.
- 01-07-2004 #4Linux Engineer
- Join Date
- Dec 2002
- Location
- New Zealand
- Posts
- 766
as far as i know, traceroute works on a similar protocol to icmp pings, except it senmds out small TTL's so that each server in turn will drop the request then send a failure notification back.
Im not sure this will work with squid since i dont think it forwards pings and/or drop packet notifications.
i think u might need some sort of NAT setup rather than a proxy server.
- 01-08-2004 #5Linux Guru
- Join Date
- Oct 2001
- Location
- Täby, Sweden
- Posts
- 7,578
Indeed; traceroute sends UDP packets with varying TTLs, and since that has nothing whatsoever to do with HTTP, squid won't even know that they're there. Like Hellmasker says, NAT is probably the best solution.
- 01-08-2004 #6Just Joined!
- Join Date
- Jan 2004
- Posts
- 4
I am not sure if I understood, but, basically it is a DNS problem? please correct me if I am wrong.
- 01-09-2004 #7Linux Guru
- Join Date
- Oct 2001
- Location
- Täby, Sweden
- Posts
- 7,578
No, DNS has nothing to do with it.
The problem is that squid only passes HTTP traffic through, and traceroute traffic obviously isn't HTTP. You need some other kind of proxy to pass traceroute packets. The only real way to do it is to set up the proxy as a NATting router. There are lots of documentation at http://www.netfilter.org/ if you decide that is what you want. However, you should be aware that if you enable NAT, all other kind of traffic will be routed as well.
- 01-09-2004 #8Just Joined!
- Join Date
- Jan 2004
- Posts
- 4
I will take a look at this.
Thank you.


Reply With Quote
