[squid-users] Re: Accessing OWA2007 reverse-proxied by ISA Server

From: <samk_at_twinix.com>
Date: Sat, 22 Nov 2008 02:04:24 -0600 (CST)

See Thread at: http://www.techienuggets.com/Detail?tx=58290 Posted on behalf of a User

I think there is something wrong in this OWA server setup:
Check with nslookup if OWA2007 have round robin active:

C:\>nslookup mail.telecomitalia.it
Server: dns1.tiscaliia.it
Address: 213.205.32.10

Non-authoritative answer:
Name: mail.telecomitalia.it
Addresses: 156.54.233.103, 156.54.233.102

If is active like my example use thi in your squid configuration (squid.conf):
balance_on_multiple_ip off

A round robin configuration for a OWA front-end is a wrong
solution because OWA is a session based web application.

Lodovico Bertolini

In Response To:

Hi folks,

I'm experiencing some trouble to acces an OWA 2007 server, located
behing an ISA reverse proxy, through our Squid 2.6ST18 proxy.

When I try to access it, IE or Firefox keeps waiting for data to
tranfer, the page stays blank and it nevers falls nor on time-out or
any other error.

Squid log shows lines that let think that there is some traffic transferred:

1225194824.927 1042 10.1.103.104 TCP_MISS/200 3088 CONNECT
OBFUSCATED_URL:443 - DIRECT/84.14.218.217 -
1225194825.050 118 10.1.103.104 TCP_MISS/200 1056 CONNECT
OBFUSCATED_URL:443 - DIRECT/84.14.218.217 -
1225194825.185 133 10.1.103.104 TCP_MISS/200 4524 CONNECT
OBFUSCATED_URL:443 - DIRECT/84.14.218.217 -
1225194825.367 168 10.1.103.104 TCP_MISS/200 2371 CONNECT
OBFUSCATED_URL:443 - DIRECT/84.14.218.217 -
1225194849.719 24520 10.1.103.104 TCP_MISS/200 155 CONNECT
OBFUSCATED_URL:443 - DIRECT/84.14.218.217 -

Direct connexion (I mean bypassing our Squid proxy) to this website works fine.

As i had a similar problem some time ago on another OWA installation,
I tried to deactivate "Accept-Encoding" header in Squid Proxy but it
is the same problem.
Our Squid Installation is quite basic, we don't authenticate our
clients, only a small cache is done on the fly.

For those who would give a try, I pasted the URL at
http://pastebin.com/m44904a19 to prevent it from showing up in mailing
lists archives, as this server belongs to a partner.
Please do not paste it in your replies.

Thanks for any help.

Momo
Received on Sat Nov 22 2008 - 16:52:03 MST

This archive was generated by hypermail 2.2.0 : Sun Nov 23 2008 - 12:00:04 MST