[squid-users] TCP_MISS/504 when accesing www.citibank.com

Hi all,

I'm new on the list so hi everyone and please do excuse my english.

And now down to bussiness :)

Im having trouble accessing www.citibank.com with squid 2.7. I'm
actually trying from two different platforms (Debian Lenny linux box
running 2.7.STABLE3 and NetBSD running 2.7.STABLE7), using different
connections to the internet and both getting weird results.

* ) With the NetBSD machine:

What i usually get in the browser is a " (110) Connection timed out",
and a "TCP_MISS/504" in the servers logs.

>While trying to retrieve the URL: http://www.citibank.com/
>The following error was encountered:
>Connection to 192.193.219.58 Failed
>The system returned:
> (110) Connection timed out
>The remote host or network may be down. Please try the request again.

03:16:39 120355 10.5.5.236 TCP_MISS/504 1454 GET
http://www.citibank.com/ - DIRECT/192.193.219.58 text/html

But sometimes (ina very few rare occasions) it gets through and I see
the following:

1320746405.173 15615 10.5.5.236 TCP_MISS/200 6985 CONNECT
metrics1.citibank.com:443 - DIRECT/63.140.40.2 -

And in the browser I see that I get redirected to
"https://online.citibank.com/US/Welcome.c". From there on I have no
trouble surfing the website. Also, if I try go directly to
"https://online.citibank.com" works every time.

* ) With the linux one:

With this one I never gotten through (maybe I havent tried as many
times), I also get the "Connection timed out" and "TCP_MISS/504", and
also a"Zero Sized Reply" and a "TCP_MISS/502":

The browser shows:

> While trying to retrieve the URL: http://www.citibank.com/
> The following error was encountered:
> Zero Sized Reply
>Squid did not receive any data for this request.

And in the logs I get:
03:01:03 150396 10.5.5.236 TCP_MISS/502 1334 GET
http://www.citibank.com/ - DIRECT/192.193.103.222 text/html
03:03:35 151215 10.5.5.236 TCP_MISS/504 1477 GET
http://www.citibank.com/favicon.ico - DIRECT/192.193.103.222 text/html

Machines are:

- Linux box (debian lenny).
# squid -v
Squid Cache: Version 2.7.STABLE3
configure options: '--prefix=/usr' '--exec_prefix=/usr'
'--bindir=/usr/sbin' '--sbindir=/usr/sbin'
'--libexecdir=/usr/lib/squid' '--sysconfdir=/etc/squid'
'--localstatedir=/var/spool/squid' '--datadir=/usr/share/squid'
'--enable-async-io' '--with-pthreads'
'--enable-storeio=ufs,aufs,coss,diskd,null' '--enable-linux-netfilter'
'--enable-arp-acl' '--enable-epoll'
'--enable-removal-policies=lru,heap' '--enable-snmp'
'--enable-delay-pools' '--enable-htcp' '--enable-cache-digests'
'--enable-underscores' '--enable-referer-log' '--enable-useragent-log'
'--enable-auth=basic,digest,ntlm,negotiate'
'--enable-negotiate-auth-helpers=squid_kerb_auth' '--enable-carp'
'--enable-follow-x-forwarded-for' '--with-large-files'
'--with-maxfd=65536' 'i386-debian-linux'
'build_alias=i386-debian-linux' 'host_alias=i386-debian-linux'
'target_alias=i386-debian-linux' 'CFLAGS=-Wall -g -O2' 'LDFLAGS='
'CPPFLAGS='

- NetBSD 5.0.2 machine:
[root_at_prometeo ~]# squid -v
Squid Cache: Version 2.7.STABLE7
configure options: '--sysconfdir=/usr/pkg/etc/squid'
'--localstatedir=/var/squid' '--datarootdir=/usr/pkg/share/squid'
'--enable-auth=basic,digest,ntlm'
'--enable-cachemgr-hostname=localhost' '--enable-delay-pools'
'--enable-icmp' '--enable-removal-policies=lru,heap' '--enable-poll'
'--enable-underscores' '--enable-storeio=ufs null aufs coss diskd'
'--with-aio' '--enable-ipf-transparent' '--enable-carp'
'--enable-snmp' '--enable-ssl' '--with-openssl=/usr'
'--enable-basic-auth-helpers=getpwnam MSNT NCSA YP PAM'
'--enable-digest-auth-helpers=password'
'--enable-ntlm-auth-helpers=fakeauth SMB'
'--enable-external-acl-helpers=ip_user unix_group' '--prefix=/usr/pkg'
'--build=i386--netbsdelf' '--host=i386--netbsdelf'
'--mandir=/usr/pkg/man' 'build_alias=i386--netbsdelf'
'host_alias=i386--netbsdelf' 'CC=cc' 'CFLAGS=-O2 -pthread
-I/usr/include' 'LDFLAGS=-L/usr/lib -Wl,-R/usr/lib -pthread
-Wl,-R/usr/pkg/lib' 'LIBS=' 'CPPFLAGS=-I/usr/include'

I can post both squid.conf files if requested.

Any hints?

Cheers,
Fred.
Received on Tue Nov 08 2011 - 11:29:28 MST