Re: [squid-users] Yet another "Invalid URL" question

Escuela Episcopal Bilingüe Santísima Trinidad wrote:
> Am trying to set up a separate box (with two NICs) as a
> firewall/filter using the following configuration. When Squid was
> running without Dansguardian, and I connected a laptop to the second
> NIC and pointed the laptop to Squid, everything worked fine. With the
> iptables set and Dansguardian running (and the laptop configured just
> normally), however, when I enter anything into the laptop's browser, I
> get an error message, from Squid, saying the URL is invalid, and the
> URL that it says it is trying to use is the URL I typed, without the
> domain info. Thus, if I ask for "www.google.com/" it shows "/"
> instead. If I try something like
> "search.lycos.com/?query=test&x=0&y=0" it shows "/?query=test&x=0&y=0"
> instead. I have seen some chatter about this type of thing on Squid's mail
> list, but, again, the Squid-only operation did not encounter this
> problem, so it could be something to do with Dansguardian, but I'm asking here,
> as well as in the Dansguardian group, in case anyone here could be of
> assistance (and because nobody has responded, at all, in the
> Dansguardian group).
>
> The configuration I am trying to use is listed below, but here are a
> couple of notes, before I just paste it all there. First, the main
> set of instructions I was trying to use for this were from:
>
> http://www.spencerstirling.com/computergeek/dansguardian.html
>
> However, it appears to be a bit older, and mentions Squid options that
> no longer appear to be valid (e.g. "httpd_accel_host virtual"). It
> also says to use "http_port 127.0.0.1:3128" but the discussion of the
> "invalid URL" problem in the Squid mail list suggests "http_post
> 127.0.0.1:3128 transparent" instead. Thus, I'm sure that the mismash
> of settings I am using is, somehow, the cause of the problem, but I
> lack the networking experience to tell just WHERE the problem occurs.
>
> Here, then, is the rest of the configuration information:
>
> Linux: Debian 4.0 r3 i386
> iptables: 1.3.6
> Squid: 3.0.PRES
> Dansguardian: 2.8.0.6-antivirus-6.4.4.1-2
> (Squid and Dansguardian installed via Synaptic Package Manager)

Please upgrade your Squid, we have been in STABLE cycle for several
months now. The current production release is available form the Debian
'unstable' repositories.

>
> Since the configuration files are large enough that their full text
> would cause the list server to truncate this message, I have posted
> them to MediaFire. Here they are:
>
> firewall.sh: http://www.mediafire.com/?zvb2gjj99d9
>
> dansguardian.conf: http://www.mediafire.com/?gucyirxttdb
>
> squid.conf: http://www.mediafire.com/?22txgzjdcez
>
> Thanks!

Amos

-- 
Please use Squid 2.7.STABLE1 or 3.0.STABLE6