When try to open https://mail.google.com I get these errors in cache.log: 2010/08/10 17:05:37| comm_open: socket failure: (97) Address family not supported by protocol I try to debug and find that comm_openex try to open ipv6 address instead of ipv4. I've have ipv4-only system (ipv6 disabled in kernel) and squid compiled with --disable-ipv6 configure option. This can be "fixed" with tcp_outgoing_address option but I've 2 external interfaces and I cannot bind exclusively to one of them. So I put "temp.SetIPv4();" in ./src/tunnel.cc (line 644, after "IpAddress temp = getOutgoingAddr(request,NULL);"). That fix the problem. Also: 1. IpAddress::ToHostname always return ipv6 address if IsAnyAddr() or IsNoAddr() is true - no checks for --disable-ipv6 2. IpAddress::NtoA always return "::" if IsAnyAddr() are true - no checks for --disable-ipv6
Thank you. I just added a fix for this. Please try this patch and report back here. http://west.squid-cache.org/Versions/v3/3.HEAD/changesets/squid-3-10722.patch (was diff'ed for 3.HEAD, but should apply easily to 3.1).
(In reply to comment #1) > Thank you. I just added a fix for this. > Please try this patch and report back here. > > http://west.squid-cache.org/Versions/v3/3.HEAD/changesets/squid-3-10722.patch > (was diff'ed for 3.HEAD, but should apply easily to 3.1). Amos I'm having the same problem, so just tried this patch (against 3.1.6). Unfortunately the patch for tunnel.cc fails... I think there is another part that needs patching too though. I use ICAP, and get the following the first time squid attempts to access the ICAP service: 2010/08/02 10:28:42| comm_open: socket failure: (97) Address family not supported by protocol 2010/08/02 10:28:42| essential ICAP service is down after an options fetch failure: icap://localhost:1344/srv_clamav [down,!opt] I have ipv6 disabled in the kernel, and squid built with --disable-ipv6. Many thanks Chris
Created attachment 2237 [details] modified patch for 3.1.6 I modify original patch. It fix my problem.
Thanks Leonid. Applying the updates. Will be in 3.1.7.
Created attachment 2238 [details] ICAP IPv4 protections. Chris: please test this for the ICAP problem.
(In reply to comment #5) > Created attachment 2238 [details] > ICAP IPv4 protections. > > Chris: please test this for the ICAP problem. Hi Amos There is a typo in the patch which nukes the config parsing - in the line else if (strcmp(name, "ipv6") == 0) { the "else" is missing at the start... Once I put the missing "else" in it worked like a charm Many thanks Chris
Great news. Thank you for your help testing and fixing. Fixes applied to Squid-3. will be in 3.1.7. NP: marking as duplicate of bug 2994 since they are two parts of the same regression. *** This bug has been marked as a duplicate of bug 2994 ***