Re: [squid-users] Quickbooks updates and Squid

On Mon, 1 Oct 2001, Henrik Nordstrom wrote:

> I see a couple of possible reasons:
>
> 1. You have a broken "transparent proxy" without support for the TCP
> interception used compiled into Squid. All interception methods except
> Linux-2.2 ipchains (i.e. IP-Filter or Linux-2.4 netfilter) requires
> Squid to be told about it at build time or it won't work proper.

Yes, I checked that, and tried to compile with the support. I tried
ipchains and also got the same results.

>
> 2. You are running a "transparetn proxy" but haven't configured
> squid.conf properly. See the Squid FAQ.

I will recheck everything. Been running squid for years under linux in
transparent proxy mode. True, I am new to ipfilter, but I don't believe
the config is wrong, but I will verify everything.

>
> 3. The application is broken and the user has your proxy configured as
> proxy

possibly, but I see alot of stuff coming thru with the squid box as the
target..........so makes me think it must be some issue with the box
itself.

Thanks, I will look into some of your suggestions

Brian

>
> Sorted in order of likelyhood.
>
> Regards
> Henrik Nordström
> Squid Hacker
>
>
> Brian wrote:
> >
> > On Mon, 1 Oct 2001, Henrik Nordstrom wrote:
> >
> > > What is seen in access.log and/or cache.log when your users attempts to
> > > update "Quickbooks"? It may be as simple as a slight configuration
> > > change.
> >
> > Here are some of them:
> >
> > 1001968473.392 1056 207.254.201.100 TCP_MISS/403 1111 POST
> > http://207.254.193.43/UpdateDirChanQB - DIRECT/207.254.193.43 text/html
> > 1001968624.650 6 207.254.193.43 TCP_MISS/403 1066 POST
> > http://207.254.193.43/UpdateDirChanQB - NONE/- -
> > 1001960784.355 24 207.16.247.33 TCP_MISS/403 1111 POST
> > http://207.254.193.43/UpdateDirChanQB - DIRECT/207.254.193.43 text/html
> > 1001960784.355 23 207.16.247.33 TCP_MISS/500 0 POST
> > http://207.254.193.43/UpdateDirChanQB - DIRECT/207.254.193.43 -
> > 1001960819.239 4 207.254.193.43 TCP_MISS/403 1066 POST
> > http://207.254.193.43/UpdateDirChanQB - NONE/- -
> >
> > now realize the actual URL is
> > http://qbmarimbaqwfg.quicken.com/UpdateDirChanQB, however, notice how
> > above that is written to the address of my squid! (My squid is
> > 207.254.193.43). I have no idea why alot of URL's try to destinate at the
> > squid itself, I have notice alot of things doing this.....mostly update
> > programs and things like that.
>

-----------------------------------------------
Brian Feeny, CCIE #8036 email:signal@shreve.net
Network Engineer phone:318.222.2638x109
ShreveNet Inc. fax: 318.221.6612
Received on Mon Oct 01 2001 - 15:57:09 MDT