[squid-users] Website problem

From: Carlos E. Vargas <cvargas_at_incadr.com>
Date: Thu, 17 Sep 2009 15:22:09 -0400

Hi list, im having this problem in a company i work as a Network Admin..
we moved from a ISA Server 2004 to a squid proxy server with ntlm auth +
dansguardian + ClamAV + adzapper + wpad via DHCP in Debian Stable 5.0

With the ISA i can see this website: http://www.sic.gov.do/ which is a
security website from my country and our security department need to
access to it, but with the Squid i just see the head part of the site
and not the body.

This is the error message:

The page cannot be displayed
Explanation: There is a problem with the page you are trying to reach
and it cannot be displayed.
________________________________________________________________________

Try the following:

      * Refresh page: Search for the page again by clicking the Refresh
        button. The timeout may have occurred due to Internet
        congestion.
      * Check spelling: Check that you typed the Web page address
        correctly. The address may have been mistyped.
      * Access from a link: If there is a link to the page you are
        looking for, try accessing the page from that link.

________________________________________________________________________

Technical Information (for support personnel)

      * Error Code: 500 Internal Server Error. An internal error
        occurred. (1359)

My SQUID contiguration is:

auth_param ntlm program /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 5
auth_param ntlm keep_alive on
auth_param basic program /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-ntlmssp
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl Java browser Java/1.4 Java/1.5 Java/1.6
acl cachemgrcgi src 172.20.0.36/32
acl to_localhost dst 127.0.0.0/8
acl ntlm_users proxy_auth REQUIRED
acl SSL_ports port 443 # https
acl SSL_ports port 563 # snews
acl SSL_ports port 873 # rsync
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 631 # cups
acl Safe_ports port 873 # rsync
acl Safe_ports port 901 # SWAT
acl purge method PURGE
acl CONNECT method CONNECT
acl QUERY urlpath_regex cgi-bin \? \.css \.asp \.aspx
http_access allow manager localhost
http_access allow manager cachemgrcgi
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow ntlm_users
http_access allow ntlm_users Java
http_access allow localhost Java
http_access allow localhost
http_access deny all
icp_access allow ntlm_users
icp_access deny all
follow_x_forwarded_for allow localhost
follow_x_forwarded_for allow ntlm_users
http_port 172.20.0.36:3128 transparent
cache_peer 127.0.0.1 parent 3128 0 no-query login=*:nopassword
hierarchy_stoplist cgi-bin ?
hierarchy_stoplist jsp asp aspx
cache_mem 16 MB
cache_dir null /dev/null
maximum_object_size 20480 KB
store_avg_object_size 50 KB
cache_swap_low 85
cache_swap_high 95
access_log /var/log/squid/access.log squid
cache_log /var/log/squid/cache.log
cache_store_log none
logfile_rotate 5
redirect_rewrites_host_header off
pid_filename /var/run/squid.pid
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern (Release|Package(.gz)*)$ 0 20% 2880
refresh_pattern . 0 20% 4320
acl shoutcast rep_header X-HTTP09-First-Line ^ICY\s[0-9]
upgrade_http0.9 deny shoutcast
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
extension_methods REPORT MERGE MKACTIVITY CHECKOUT
header_access WWW-Authenticate deny all
header_access Link deny all
header_access Warning deny all
header_access Via deny all
#header_access User-Agent deny all
header_access Proxy-Connection deny all
header_access X-Forwarded-For deny all
half_closed_clients off
shutdown_lifetime 1 seconds
cache_mgr cvargas_at_incadr.com
cache_effective_user proxy
cache_effective_group proxy
visible_hostname lnxisaprx01.inca.local
snmp_port 0
snmp_access deny all
icp_port 0
htcp_port 0
error_directory /usr/share/squid/errors/Spanish
acl FTP proto FTP
always_direct allow FTP
no_cache deny QUERY
dns_defnames on
hosts_file /etc/hosts
append_domain .inca.local
ipcache_size 4192
ipcache_low 90
ipcache_high 95
fqdncache_size 3600
forwarded_for off
cachemgr_passwd secret all
coredump_dir /var/spool/squid
pipeline_prefetch on
log_icp_queries on
buffered_logs on
url_rewrite_program /usr/bin/adzapper.wrapper
url_rewrite_children 10

Thanks for all,

-- 
Carlos E. Vargas
Administrador de Redes
Tecnología de Información y Comunicaciones.
809-987-7454 (Tel) 
809-987-7575 (Fax) 
809-642-6131 (Cel)
cvargas_at_incadr.com
www.industriasnacionales.com
 
*** Disclaimers ***
 
Este correo electrónico, con cualquier anexo que pueda contener, esta dirigido exclusivamente a la persona o entidad a la cual es enviado, pudiendo contener información privilegiada y confidencial. 
Si usted no es el destinatario, por favor no lo lea, no lo copie, no lo reproduzca  ni distribuya, ni lo use en forma alguna. Queda formalmente notificado que cualquier acción de esta naturaleza está estrictamente prohibida. 
Si recibe este correo electrónico por error, favor eliminarlo de su computadora y notificar inmediatamente al emisor a través de un mensaje de respuesta. Cualquier criterio u opinión expresado a través de este correo electrónico 
es responsabilidad absoluta del emisor y no necesariamente de Industrias Nacionales, C. por A. (INCA) ha de estar de acuerdo con el mismo. 
 
--------------------------------------------------------------------------------
 
This e-mail, along with any attachment it may contain, is addressed exclusively to the person or institution it has been sent to, and may contain privileged or confidential information. 
 If you are not the recipient, please do not read, copy, reproduce or distribute it, nor use it in any way.  You are formally notified that any action of said nature is strictly forbidden.  
If you receive this e-mail in error, please eliminate it from your computer and immediately notify sender through a reply message. 
Sender is the only individual responsible for any criteria or opinion expressed in this electronic message and Industrias Nacionales, C. por A. (INCA) does not necessarily agree with it. 
Received on Thu Sep 17 2009 - 19:23:44 MDT

This archive was generated by hypermail 2.2.0 : Fri Sep 18 2009 - 12:00:03 MDT