Re: [squid-users] squid3 WindowsUpdate failed

John Mok wrote:
> Hi,
>
> I am using Squid3 nightly built 20071026 running on Ubuntu 6.06 LTS with
> the compilation options :-
>
> ./configure --with-pthreads --enable-icap-client
>
> I tried both (i) the configurations with default option, or (ii)
> icap-enabled options, the Windows client failed to get WindowsUpdate
> (see the following log).
>

Where is this failure you speak of?
   The log you posted showed a proper link to WindowsUpdate, with all
the static content coming from cache (TCP_HIT/TCP_IMS_HIT) and the
dynamic pages and updates being brought in from M$ (TCP_MISS)

If your client got the custom M$ "Windows Update failed" page.
Then I suspect you have overlooked a M$ nasty:
   WU requires an HTTPS 'validation' test.
   You MUST permit an HTTP 'CONNECT' request to 65.55.184.125:443.
   (the IPA being that of www.update.microsoft.com from your current
location)

This bypass needs to be made on your firewall. WU will NOT always
attempt it through the configured proxy :-(

The best you can do is bypass it at the FW and also configure the proxy
manually in IE, then run "proxycfg -u" in command line on the windows
box, and hope that the particular box update level will use the proxy
for it.

Amos
Received on Fri Oct 26 2007 - 19:49:58 MDT