Re: [squid-users] Skype through Squid

Truth Seeker wrote:
> Hi,
>
> Through our squid proxy, for few users if they tried to login through skype, after taking long delay (say 10 minutes) they are able to login to Skype (but i didnt do any specific settings for that). On the other hand many of the users are not able to log in.
>
> How can i safely allow skype through squid proxy?

see below...

>
> The following is a log entry which i tried to login to skype (but failed)
>
> 1253005012.941 0 192.168.4.81 TCP_DENIED/407 2901 CONNECT 84.228.2.193:443 - NONE/- text/html
> 1253005012.941 0 192.168.4.81 TCP_DENIED/407 2901 CONNECT 79.182.75.87:443 - NONE/- text/html
> 1253005012.941 0 192.168.4.81 TCP_DENIED/407 2909 CONNECT 79.178.106.123:443 - NONE/- text/html
> 1253005012.941 0 192.168.4.81 TCP_DENIED/407 2909 CONNECT 79.181.140.214:443 - NONE/- text/html
> 1253005012.962 0 192.168.4.81 TCP_DENIED/407 3081 CONNECT 79.182.75.87:443 - NONE/- text/html
> 1253005012.963 0 192.168.4.81 TCP_DENIED/407 3081 CONNECT 84.228.2.193:443 - NONE/- text/html
> 1253005012.963 0 192.168.4.81 TCP_DENIED/407 3089 CONNECT 79.181.140.214:443 - NONE/- text/html

Someone tried to use Skype for a whole bunch of connections. You require
proxy users to login. But these ones did not have any login details for
the proxy. They were blocked for having no login...

> 1253005012.973 0 192.168.4.81 TCP_DENIED/407 3089 CONNECT 79.178.106.123:443 - NONE/- text/html
> 1253005015.350 2319 192.168.4.81 TCP_MISS/200 0 CONNECT 79.178.106.123:443 BEMCO-IPP/surf DIRECT/79.178.106.123 -

This one tried the same. On seeing the proxy "please login" message
(Skype?) sent login details.

That connection continued happily and sent some bytes out and got 190
bytes back in through Squid.

> 1253005017.058 4082 192.168.4.81 TCP_MISS/200 190 CONNECT 84.228.2.193:443 BEMCO-IPP/surf DIRECT/84.228.2.193 -
> 1253005017.136 4156 192.168.4.81 TCP_MISS/200 212 CONNECT 79.181.140.214:443 BEMCO-IPP/surf DIRECT/79.181.140.214 -

The same person then did two more successful connections...

<snip>
The same story of mixed login failures and successes continues. Mostly
failures.

>
> Expecting favourable reply...
>

Looks like Skype needs to be configured to login to the proxy.

I am assuming that 192.168.4.81 is a single workstation.

This type of behaviour is expected if 192.168.4.81 was another proxy
with several users, some clients configured properly to send login some
not configured properly.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE6 or 3.0.STABLE19
   Current Beta Squid 3.1.0.13