Re: [squid-users] Error in cache.log

THis is the output of grep for errro in cache.log:

#######
[root@xyz root]# grep -i 'health_info.nmh.org'
/var/log/squid/access.log
1072007066.166 14 192.168.0.30 TCP_DENIED/400 1601
GET
http://health_info.nmh.org:80/Library/HealthGuide/IllnessConditions/topic.asp?hwid=tn8460
- NONE/- text/html

######

This user 192.168.0.30 is genuine user and I am sure
will not do this purposely.

I have not blocked any type of file by squid.

I tried from my machine to acces
"http://health_info.nmh.org/" but squid rejects this
request with following error :

########
ERROR
The requested URL could not be retrieved

--------------------------------------------------------------------------------

While trying to retrieve the URL:
http://health_info.nmh.org:80/

The following error was encountered:

Invalid URL
Some aspect of the requested URL is incorrect.
Possible problems:

Missing or incorrect access protocol (should be
`http://'' or similar)
Missing hostname
Illegal double-escape in the URL-Path
Illegal character in hostname; underscores are not
allowed
Your cache administrator is webmaster.
######

Any setting change required in "squid.conf"

Thanks for support.

--- Henrik Nordstrom <hno@squid-cache.org> wrote:
> On Sat, 20 Dec 2003, ads squid wrote:
>
> > 2003/12/20 22:28:42| parseHttpRequest: Unsupported
> > method 'recipientid=99&sessionid=8119^M
> > ^M
> > '
> > 2003/12/20 22:28:42| clientReadRequest: FD 33
> Invalid
> > Request
> > 2003/12/20 22:28:42| parseHttpRequest: Unsupported
> > method 'recipientid=100&sessionid=8119^M
> > ^M
> > '
> > 2003/12/20 22:28:42| clientReadRequest: FD 33
> Invalid
> > Request
>
>
> The above looks like a client sending invalid POST
> requests, sending more
> data than claimed in the request headers.
>
>
>
> > 2003/12/21 10:04:13| clientReadRequest: FD 16
> Invalid
> > Request
> > 2003/12/21 10:05:00| clientReadRequest: FD 14
> Invalid
> > Request
> > 2003/12/21 10:05:04| clientReadRequest: FD 14
> Invalid
> > Request
> > 2003/12/21 10:05:04| clientReadRequest: FD 14
> Invalid
> > Request
> > 2003/12/21 10:05:04| clientReadRequest: FD 14
> Invalid
> > Request
> > 2003/12/21 10:05:04| clientReadRequest: FD 16
> Invalid
> > Request
> > 2003/12/21 10:09:11| clientReadRequest: FD 14
> Invalid
> > Request
>
> Was there no other log entries between these?
>
> > Then I reconfigure squid and agin it starts
> working
> > Any clue what should be done to stop this.
>
> Try to find the offending client and what it is
> doing. A good start is the
> time these occurs and matching these to activity in
> access.log. Each of
> these messages should also have one line in
> access.log with a status code
> of 400 and a blank hierarchy code, and most likely
> no URL, so it should
> not be very hard to find who is causing these.
>
> Regards
> Henrik
>

__________________________________
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing.
http://photos.yahoo.com/
Received on Sun Dec 21 2003 - 21:27:16 MST