Re: [squid-users] Squid 3.1.12 times out when trying to access MSDN

On 27/05/11 19:42, Pandu Poluan wrote:
> Hello list,
>
> I've been experiencing a perplexing problem.
>
> Squid 3.1.12 often times out when trying to access certain sites, most
> notably MSDN. But it's still very fast when accessing other
> non-problematic sites.
>
> For instance, trying to access the following URL *always* result in timeout:
>
> http://msdn.microsoft.com/en-us/library/aa302323.aspx
>
> Trying to get the above URL using wget: No problem.
>
> I've even opened up the http_access and miss_access:
>
> http_access allow manager localhost
> http_access deny manager
> #http_access deny !Safe_ports
> #http_access deny CONNECT !SSL_ports
> #http_access allow localnet
> http_access allow localhost
> http_access allow pans_indonet
> http_access deny all
> miss_access allow pans_indonet
> miss_access deny all
>
> ... where pans_indonet is the acl containing the whole network of my company.
>
> Any pointers as to what I should check next?
>
> Rgds,

msdn.microsoft.com DNS response to AAAA lookup is a successful CNAME,
but with no IP addresses to connect to.

The behaviour you describe can appear if you have turned dns_v4_fallback
OFF. Which disables A lookup (IPv4 connectivity) if there is any kind of
successful AAAA, even a useless empty one like MSDN produces.

Also, "miss_access deny ..." prevents Squid fetching new content from
the Internet. It's unclear why you would want to have miss_access in the
config at all.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.12
   Beta testers wanted for 3.2.0.7 and 3.1.12.1