Re: [squid-users] Proxy chaining

Don't use proxy_auth acls in never_direct. Most likely you want

never_direct allow all.

Regards
Henrik

On Thursday 20 June 2002 16.10, Daniel Colardelle wrote:
> Hello,
>
> I have set up a proxy (Squid 2.5 on NT) with two non-ICP parents.
>
> It runs fine except for HTTPS, PUT or forms. I then receive an
> error message "connection failed", the system returned : (10060)
> unknown. Both parents caches are up.
> Here is part of my squid.conf :
>
> cache_peer 10.17.38.2 parent 80 7 login=beta:g0ld no-query
> cache_peer 10.21.65.11 parent 80 7 no-query
>
> acl all src 0.0.0.0/0.0.0.0
> acl password proxy_auth REQUIRED
> acl INSIDE dstdomain .creditlyonnais.fr
>
> cache_peer_access 10.22.65.11 allow INSIDE
> cache_peer_access 10.18.38.2 allow !INSIDE
>
> never_direct allow password
> http_access allow password
> http_access deny all
>
> And here is part of the access.log :
>
> 1024612674.000 240000 10.14.0.226 TCP_MISS/504 1003 GET
> http://www.ibm.com/Search? proxy NONE/- text/html
> 1024612674.343 185328 10.14.0.226 TCP_MISS/000 0 GET
> http://stats.www.ibm.com/rc/images/uc.GIF? proxy NONE/- -
> 1024612914.015 239656 10.14.0.226 TCP_MISS/504 1009 GET
> http://www.google.com/search? proxy NONE/- text/html
>
> I took traces on both parent proxies and on firewalls. There are
> none. It seems that the proxy doesnt know where to send queries.
>
> Any help welcome.
>
> Daniel
Received on Fri Jun 21 2002 - 15:57:41 MDT