Re: AW: [squid-users] Windows update hangs

Just as a FYI on this, the proxycfg tool M$ mentions in this article does
not exist in Windows 2000 (or at least not in any of the copies I've tried).
   It would be a bit cleaner an option if it did. There's also no mention
of the connection that happens on https (which may be because that's a
fairly recent change on their part).

One solution I was trying was a simple registry file to enable the IE proxy,
then another to disable it. But downloading and clicking on them is yet
again asking for trouble since there's just too many ways the user can mess
that up. If anyone's interested, this is the registry info:

# Enable proxy, replace <xxxx> with info
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigProxy"="wininet.dll"
"ProxyEnable"=dword:00000001
"ProxyHttp1.1"=dword:00000000
"ProxyServer"="<servername or ip>:<port>"

# Disable proxy, replace <xxxx> with info
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigProxy"="wininet.dll"
"ProxyEnable"=dword:00000000
"ProxyHttp1.1"=dword:00000000
"ProxyServer"="<servername or ip>:<port>"

Obviously, take out the # comment and make each a file saved as regular text
with a .reg extension. These will function in Windows 2000/XP/2003.

The downside to these are that the user has to be smart enough to download
them and click on them, saying "yes" to merge with registry, then also
remember to disable it after they're done getting their updates unless
they're supposed to always use that proxy.

Aaron

Carlos Zottmann wrote:
> Hi everybody !!
>
> Don´t know a solution can be found here, but the following link show
> an article describing "How the windows update client determines wich
> proxy server to use ..."
>
> http://support.microsoft.com/?kbid=900935
>
> Regards,
> Carlos.
>
> 2005/8/12, Lasse Mørk <debian@cyrix.dk>:
>
>>Still runs terrible slow!
>>
>>It is almost impossible to use windows update...
>>This aint good!
>>
>>
>>
>>>Try to use https://update... Instead of http.. That works for us...
>>>
>>>But youre right, there is an problem with squid and windowsupdate. If i
>>>set proxy settings to automatically (dns or dhcp delivers the wpad
>>>settings) than windowsupdate failes.
>>>
>>>
>>>--
>>>Mit freundlichen Gruessen!
>>>Axel Mueller
>>>
>>> +------------------------------------------------------------+
>>> Axel Müller
>>> ICT - Services
>>> T-Systems GEI GmbH
>>> Service Line Systems Integration
>>> IBU Public and Healthcare
>>>
>>> Goslarer Ufer 35, 10589 Berlin, Germany
>>> Telefon: +49 30 3497-1859
>>> FAX: +49 30 3497-1177
>>> E-Mail: axel.mueller@T-Systems.com
>>> Internet: http://www.t-systems.com
>>>
>>>
>>> T-Systems ist eine Division der Deutschen Telekom
>>> +------------------------------------------------------------+
>>> The only problem with mornings is that they happen too early in the day
>>>
>>>
>>>
>>>
>>>-----Ursprüngliche Nachricht-----
>>>Von: Lasse Mørk [mailto:debian@cyrix.dk]
>>>Gesendet: Donnerstag, 11. August 2005 15:22
>>>An: squid-users@squid-cache.org
>>>Cc: Aaron McDonnell
>>>Betreff: Re: [squid-users] Windows update hangs
>>>
>>>
>>>Hi Aaron
>>>The squid is not running as a transperent proxy, and we have manually set
>>>the proxy settings in I-Explore.
>>>
>>>It works though, but takes 30min - 1hour or so to connect. And forever to
>>>download the updates. :(
>>>
>>>
>>>
>>>>Hi Lasse
>>>>
>>>>It could be related to the problem I'm having, depending on how your
>>>>proxy it set up. I'm trying to build a box to manage the Quarantine
>>>>network in our environment and the Windows Update site hangs/fails for
>>>>me as well.
>>>>The
>>>>problem in my case is that Squid is a transparent proxy, and when you
>>>>click on either the "Custom" or "Express" options, it briefly requires
>>>>an SSL connection to download.windowsupdate.com - since Squid doesn't
>>>>seem to have a way to do that in transparent mode, it fails.
>>>>
>>>>If I set IE to use Squid as a proxy directly, it'll work. Have you
>>>>tried setting the proxy settings directly in IE yet?
>>>>
>>>>Aaron
>>>>
>>>>Lasse Mørk wrote:
>>>>
>>>>>Is there anyway to get around this issue?
>>>>>
>>>>>It just stalls now where it looks for latest updates.
>>>>>Maybe without caching the windows update files?
>>>>>
>>>>>I am getting kinda desperate!
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>>Hmm.. Dosn't seem to help :(
>>>>>>
>>>>>>It still lacks and run terrible slow.
>>>>>>
>>>>>>
>>>>>>
>>>>>>>On 8/11/05, Lasse Mørk <debian@cyrix.dk> wrote:
>>>>>>>
>>>>>>>
>>>>>>>>Hey all
>>>>>>>>
>>>>>>>>squid 2.5.9-10 running debian.
>>>>>>>>
>>>>>>>>Does anyone knows what to do, when windows update hangs ?
>>>>>>>>Sometime it just stalls, but now and then it works, although it is
>>>>>>>>got damn slow :(
>>>>>>>>
>>>>>>>>Including that, it prompts for user and passwords just before it
>>>>>>>>checks for updates, I belive it is?
>>>>>>>>
>>>>>>>>Any solution to this? The best thing would be if it was possible to
>>>>>>>>cache the updates, but it worst case I might have to remove the
>>>>>>>>windows update site, from the proxy list.
>>>>>>>>
>>>>>>>>Thanks
>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>> http://www.squid-cache.org/Doc/FAQ/FAQ-11.html#ss11.54
>>>>>>>
>>>>>>> M.
>>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>>
>>>>--
>>>>
>>>>Aaron McDonnell
>>>>Network Administrator
>>>>Network Operations Centre
>>>>University of Western Ontario
>>>>Tel: 519-661-2111 ext. 86558
>>>>
>>>
>>>
>>
>>

-- 
Aaron McDonnell
Network Administrator
Network Operations Centre
University of Western Ontario
Tel: 519-661-2111 ext. 86558