RE: [squid-users] Abridged URL gives weird squid error on STABLE10?

> -----Original Message-----
> From: Henrik Nordstrom [mailto:hno@squid-cache.org]
> Sent: Friday, 3 June 2005 1:24 AM
> To: Frank Hamersley
> Cc: 'Squid-Users (E-mail)'
> Subject: RE: [squid-users] Abridged URL gives weird squid error on
> STABLE10?
>
> On Thu, 2 Jun 2005, Frank Hamersley wrote:
>
> > Config #1 - iptables DNAT port 80 to 3128 - FAILED!!
> > ------------------------------------------------------------------
> > 1116851967.015 0 10.1.1.96 TCP_DENIED/400 1539 GET
> > /firefox?client=firefox-a&rls=org.mozilla:en-US:official -
> NONE/- text/html
> > 1116851967.135 5 10.1.1.96 TCP_DENIED/400 1443 GET
> /favicon.ico -
> > NONE/- text/html
> > ------------------------------------------------------------------
>
> This looks very much like an attempt in using transparent interception
> without configuring the required settings in squid.conf.
>
> Regards
> Henrik

Thanks for the tip Henrik - I had mistakenly assumed that the "out of the
shrink wrap" config was transparent proxy oriented. Silly moi!

Curiously I am sure it did function "correctly" for nearly 24 hours before I
got the phone call from the better half saying that the net was a mill pond!

I remain convinced this was the case because when I installed and tested it
the evening before every thing seemed OK. I had verified with SNMP from
MRTG (this was the purpose of the exercise) to see some cache hits etc but
am wondering now if I was looking at the right thing - BTW it was about 1:00
AM so after factoring that in - who knows what I saw!

Regardless, it works now. Perhaps the only thing I can see as a potential
improvement to a great package would be for Squid to complain politely if
squid.conf looks untouched by human hands!

Given this is an open source product when time allows I will look at
producing the "patch" myself although I not going to hold my breath!

Cheers, Frank.
Received on Sun Jun 05 2005 - 20:37:35 MDT