I am running Squid 2.4 Stable 6 on LInux AS3.2 in our production
environment. Recently I run into an issue with the following message on
access.log when my users cannot access a specific web site:
1105043121.000 119838 x.x.x.x TCP_MISS/000 0 CONNECT
www.cibc.can-act.com:443 - NONE/- -
I read some discussions about this issue on this mailing-list back in 2003
and was resolved by turning off ECN. I have checked into the ECN and I
found that it has already got a zero value in /proc/sys/net/ipv4/tcp_ecn. and it is still not working.
We are also using SquidGuard. I just wonder whether some tcp/ip
parameter was somehow tweaked by Squid or SquidGuard. I can access the
same web site without going through Squid. I am also able to see the same
website when I go through another test Squid 2.5 RH AS3.2 box without
SquidGuard. I did check that the website was not blocked by ACL or
SquidGuard. I have also checked the tcp parameters in /proc/sys/net/ipv4 are same between the production and test Squid box.
Please help ! Thanks in advance.
Manrique
Received on Fri Jan 07 2005 - 15:37:29 MST
This archive was generated by hypermail pre-2.1.9 : Mon Mar 07 2005 - 12:59:35 MST