Transparent Proxy Problmes

[Poida]

ok here's the problem i have, squid is trying and failing to fetch zip's exe's mp3's cab's (files linked vier http not ftp) im usinging slackware 2.2.x and squid 2 and the transproxy is setup using ipchains to point port 80 to the proxy port 8080, the normal Http cache is running fine, can i or are their commands for squit in squid conf i can use to tell the proxy not to fetch the above file types and let the users connect to them directly so they can download them and update their virus scanners

cheers Poida

[Craig McPherson]

If you configure a web browser connect through the Squid server directly rather than letting the firewall catch and redirect it, do things work normally? Can you download those files that way?

I haven't had the problems you describe, so I can't say exactly what your problem is without knowing a bit more. Please post the live bits of your squid.conf file here -- just the lines that aren't commented out. The squid.conf is huge, so just post the active lines, not the commented-out ones or the comments, or stick the squid.conf on a webpage and post the URL. I'll be sure to take a look at it and make some recommendations.

[Poida]

firwall catching the port or the browser proxy settings enabled it seems to be the same here is what my conf is after alot of editing

http_port 8080
cache_dir ufs /squid/cache 19500 128 256
cache_access_log /dev/null
cache_log /dev/null
cache_store_log /dev/null
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80 21 443 563 70 210 1025-65535
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow all
icp_access allow all
miss_access allow all
cache_mgr support@domainname.com
visible_hostname proxy.domainname.com
httpd_accel_host vertual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on


to me it looks ok

[ 05 October 2001: Message edited by: Poida ]

[Craig McPherson]

httpd_accel_host vertual

That's one problem right there. "vertual"?

[Poida]

ok typo fixed restarted the server and squid to me sure and seems that the downloads stop after about 70k if this helps

[Craig McPherson]

Okay, before you fixed the typo, what was happening? Was it dying after 70KB like it is now, or was it not working at all?

I'm not really sure what's causing it -- one thing you might want to try is setting the "maximum_object_size" value very high an see if that makes a difference. Objects larger than maximum_object_size won't be stored in the cache, but Squid should still retrieve them with no problems -- still, try fiddling with the value and see if it makes a difference.

Good luck.

[Poida]

even with the typo squid was caching web content and html fine its a pain in the but really because only like 2% of files now are stored as http rest ftp, ill try the max cache object and see how it is, i cant do it till tommorow when im back at work, tell you the truth i was thinking in that area also, im also going to store a 1mb file on another isp as a test object for some consistant tests of our squid server. ill let ya know monday afternoon how i went.

[Poida]

hmm ok done some tests and im breaking the 70k mark now seems to be running with both the proxy settings in and letting the firewall redirect the port to 8080, i didnt end up seting the max object size, seems like the router may have been a small part of the problen also as it droped one of its static route settings, Thank you Craig for your time sometimes we cant see the problem for looking :rolleyes: now all i have to do is work out how to do timed ppp dial up accounts oh well if it was easy it would be all linux, once again tnks

Cheers Poida