Re: [squid-users] Can't establish connection by windows-client (repdoc)

On 3/04/2012 10:06 p.m., Alexander Busam wrote:
> Hi!
>
> I use squid as a transparent proxy (hostname: hmsmbsrv, ip:
> 192.168.1.26, 192.168.2.26).
>
> The Windows program I use is repdoc. You can download the Smart Client
> for testing at http://www.repdoc.com/repdocUpdateService/Default.aspx
>
> When I start the program the very first time I got
>
> hmsmbsrv:/var/log/squid # tail -f access.log | grep 192.168.1.223
> 1333444246.207 0 192.168.1.223 NONE/417 4489 POST
> http://www.repdoc.com/repdocDataService2/DataService.asmx - NONE/-
> text/html
> 1333444334.637 0 192.168.1.223 TCP_MISS/200 353 OPTIONS
> http://hmsmbsrv/ - DIRECT/192.168.2.26 text/html
> 1333444348.621 456 192.168.1.223 TCP_MISS/200 2068 GET
> http://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD%2Fyl6nWPkczAQUe1tFz6%2FOy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS%2BzcBkvzl4%3D
> - DIRECT/199.7.54.72 application/ocsp-response
> 1333444348.870 226 192.168.1.223 TCP_MISS/200 1724 GET
> http://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9%2BWQCtWAQU1A1lP3q9NMb%2BR%2BdMDcC98t4Vq3ECECSDsnAoeipjkTMp77QlvRk%3D
> - DIRECT/199.7.54.72 application/ocsp-response
> 1333444348.898 0 192.168.1.223 NONE/417 4489 POST
> http://www.repdoc.com/repdocDataService2/DataService.asmx - NONE/-
> text/html
>
> When I start the program again I got
>
> 1333444413.815 0 192.168.1.223 NONE/417 4489 POST
> http://www.repdoc.com/repdocDataService2/DataService.asmx - NONE/-
> text/html
>
> Even when I use in squid.conf the following I got the same behaviour.
>
> acl cache_deny01 dstdomain .repdoc.com
> acl cache_deny02 dstdomain .thawte.com
>
> cache deny cache_deny01
> cache deny cache_deny02
>
> Any idea what's wrong ?

HTTP status 417. Your software is *requiring* a HTTP/1.1-only feature.
You are passing it to HTTP/1.0 software (Squid).

You have a few options:
  1) ignore_expect_100 ON. Which will make the client software request
timeouts and hopefully continue as normal after a few *minutes*.
  2) upgrade to squid-3.2 (beta) release.
  3) drop the transparent proxy. Use normal forward proxy, with
auto-configuration (WPAD and PAC) is best.

Amos
Received on Tue Apr 03 2012 - 11:22:38 MDT