[squid-users] <no subject>

From: <mstde@dont-contact.us>
Date: Tue, 08 Mar 2005 17:17:45 +0100

Hi,

I try to set up a squid reverse-proxy in front of a Lotus Notes Webmail and an IIS-webserver

- two different machines in the same domain.

squid.conf looks like this:

"https_port 443 cert=/usr/local/squid/cacert.pem key=/usr/local/squid/privkey.pem defaultsite=domino.oursite.de

https_port 442 cert=/usr/local/squid/cacert.pem key=/usr/local/squid/privkey.pem defaultsite=iis.oursite.de

cache_peer 10.0.1.1 parent 443 0 no-query proxy-only name=domino.oursite.de ssl sslflags=DONT_VERIFY_PEER

cache_peer 10.0.1.2 parent 443 0 no-query proxy-only name=iis.oursite.de ssl sslflags=DONT_VERIFY_PEER

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT

acl data dstdomain iis.oursite.de
acl mails dstdomain domino.oursite.de

#cache_peer_access domino.oursite.de deny data
cache_peer_access domino.oursite.de allow all

#cache_peer_access web-eins.ad.worldgames2005.de deny mails
cache_peer_access web-eins.ad.worldgames2005.de allow all"

The idea is to forward requests for domino to the cache_peer 10.0.1.1. and requests for iis to the cache_peer 10.0.1.2.

But EVERYTIME i change the cache_peer_access directiv to something other than "allow all"
Squid aborts with the error

        assertion failed: cbdata.cc:402: "c->locks > 0"

Changing the directive and restarting helps an squid works - but the second webserver cannot be reached.

The error can be reproduced by activating the cache_peer_access-directive with a content other than "allow all"

What's wrong ? How can i get it working?

Any help is very much appreciated.

Thanks,

Michael
__________________________________________________________
Mit WEB.DE FreePhone mit hoechster Qualitaet ab 0 Ct./Min.
weltweit telefonieren! http://freephone.web.de/?mc=021201
Received on Tue Mar 08 2005 - 09:17:53 MST

This archive was generated by hypermail pre-2.1.9 : Fri Apr 01 2005 - 12:00:02 MST