Re: FTP Query

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Thu, 04 Mar 1999 02:01:14 +0100

Richard Stagg wrote:
>
> > > look at the source and they're "http://dmz_proxy.eu.csc.com:3128/
> > > squid-internal-static/icons/anthony-text.gif" or whatever.

> Doh! Of course:
> "s/dmz_proxy\.eu\.csc\.com/int_proxy\.eu\.csc\.com/;"
> Works like a charm.

Should not be needed or even help. Squid is designed to intercept all
squid-internal-static objects regardless of the server name or port
used.

Two things which comes to my mind are:
1. ACLs. Is the client allowed to fetch icons from the inner proxy?
2. no-proxy browser settings. It may be that the client tries to fetch
the icons directly fron the outer proxy, bypassing the inner proxy.

The fix to case 1 is obvious.

The fix to case 2 is less obvious, but there are several.
2a) Configure the outer proxy to use a visible hostname which resolves
to an alias for the inner proxy.
2b) Configure browsers to correctly contact the inner proxy for requests
to DMZ servers.
2c) Allow clients to fetch icons directly from the DMZ proxy.

---
Henrik Nordstrom
Spare time Squid hacker
Received on Wed Mar 03 1999 - 18:03:01 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:45:07 MST