Re: Fwd: Re: [squid-users] Squid 3 Bad request reply

From: Mgr. Peter Tuharsky <tuharsky_at_misbb.sk>
Date: Fri, 20 Sep 2013 08:27:24 +0200

Thank You for Your reply. I have identified a name resolving issue so far.

I'm not sure however, what should be in acl localhost src and acl
localnet src.

Peter

Dňa 20.09.2013 05:09, Amos Jeffries wrote / napísal(a):
> On 17/09/2013 6:24 p.m., Mgr. Peter Tuharsky wrote:
>> .Via: */
>> 0x31, 0x2e, 0x30, 0x20, 0x6c, 0x6f, 0x63, 0x61, /* 1.0 loca */
>> 0x6c, 0x68, 0x6f, 0x73, 0x74, 0x20, 0x28, 0x73, /* lhost
>
> Your Squid is for some reason identifying its *public* domain name as
> "localhost".
>
> This has bitten a few people when their proxy tried to interact with a
> second proxy (upstream or downstream) whch also identified its public
> FQDN the same way.
> What you need is to setup the machine the proxy is running on such that
> hostname produces a resolvable FQDN, and that name has preferrably both
> forward and reverse DNS (the latest Squid still check for rDNS but do
> not break if it differs). Also any IP addresses used in the
> http_port/https_port forward-proxy directive need to have rDNS pointing
> at a publicly resolvable FQDN.
>
> Amos
Received on Fri Sep 20 2013 - 06:26:18 MDT

This archive was generated by hypermail 2.2.0 : Mon Sep 23 2013 - 12:00:05 MDT