[squid-users] Access to IP websites blocked partially

From: Josh <mylist13_at_gmail.com>
Date: Thu, 3 Jul 2008 12:57:47 +0800

Hey list,

I have an issue with my squid proxy server.
My setup is like that : client ---> squid ---> netcache ---> internet

When I enter in my client's browser the url: http://17.149.160.10/ , I
got stucked... the page cannot be displayed.
Access.log gives me :
1215060561.991 4986 10.51.128.79 TCP_MISS/000 0 GET
http://17.149.160.10/ - NONE/- -

When I enter the same url in the browser on the proxy itself, the page
is displayed without any pblm. The browser is configured to use the
netcache proxy server.

Any idea on what's going on ?

Thanks,
Josh

Non-authoritative answer:
www.apple.com canonical name = www.apple.com.akadns.net.
Name: www.apple.com.akadns.net
Address: 17.149.160.10

# squid -v
Squid Cache: Version 2.6.STABLE19
configure options: '--datadir=/usr/local/share/squid'
'--localstatedir=/var/squid' '--disable-linux-netfilter'
'--disable-linux-tproxy' '--disable-epoll' '--enable-arp-acl'
'--enable-async-io' '--enable-auth=basic digest ntlm'
'--enable-basic-auth-helpers=NCSA YP'
'--enable-digest-auth-helpers=password' '--enable-cache-digests'
'--enable-large-cache-files' '--enable-carp' '--enable-delay-pools'
'--enable-external-acl-helpers=ip_user session unix_group
wbinfo_group' '--enable-htcp' '--enable-ntlm-auth-helpers=SMB'
'--enable-referer-log' '--enable-removal-policies=lru heap'
'--enable-snmp' '--enable-ssl' '--enable-storeio=ufs aufs coss diskd
null' '--enable-underscores' '--enable-useragent-log'
'--enable-wccpv2' '--with-aio' '--with-large-files' '--with-pthreads'
'--with-maxfd=32768' 'CPPFLAGS=-I/usr/local/include'
'LDFLAGS=-L/usr/local/lib' 'CFLAGS=-DNUMTHREADS=128'
'--prefix=/usr/local' '--sysconfdir=/etc' '--mandir=/usr/local/man'
'--infodir=/usr/local/info' 'CC=cc'

# cat squid.conf
http_port 8080
icp_port 0
cache_peer 10.22.52.1 parent 8080 0 default no-query no-digest no-netdb-exchange
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
cache_mem 512 MB
cache_swap_low 90
cache_swap_high 95
maximum_object_size 64 MB
maximum_object_size_in_memory 512 KB
ipcache_size 8192
ipcache_low 90
ipcache_high 95
fqdncache_size 8192
cache_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF
cache_dir aufs /var/squid/cache 60000 16 256
access_log /var/squid/logs/access.log squid
hosts_file /etc/hosts
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
quick_abort_min 0 KB
quick_abort_max 0 KB
positive_dns_ttl 24 hours
half_closed_clients off
pconn_timeout 10 seconds
shutdown_lifetime 5 seconds
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 # https
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl purge method PURGE
acl CONNECT method CONNECT
acl snmppublic snmp_community public
acl corpnet dstdomain .corp.local
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access allow CONNECT SSL_ports
http_access allow Safe_ports
http_access deny all
httpd_suppress_version_string on
visible_hostname XXXX
memory_pools off
log_icp_queries off
client_db off
buffered_logs on
never_direct deny corpnet
never_direct allow all
Received on Thu Jul 03 2008 - 04:57:54 MDT

This archive was generated by hypermail 2.2.0 : Thu Jul 03 2008 - 12:00:02 MDT