[squid-users] Reverse proxy for Outlook 2010 anywhere with NTLM

I am trying to use squid as outlook reverse proxy but popup on outlook is
apearing all the time and i don't know how to solve the problem. Also for
some unknown reason with this config squid won't start at boot time and when
i start it manually it take long time to start. I am using squid 3.1.19 .
Rest of stuff that i configured over squid works fine.

Is my config good for reverse proxying multiple servers? Kinda strange that
i can't specify multiple FQDNS inside ACL?

#debug_options ALL,3
logformat combined %>a %[ui %[un [%tl] "%rm %ru HTTP/%rv" %>Hs %<st
"%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh
pid_filename /var/run/squidext.pid
httpd_suppress_version_string on
cache_mgr nomail_address_given
#visible_hostname webmail.codimensions.com
via off
forwarded_for transparent
ssl_unclean_shutdown on
# Internet connectors
https_port 443 accel cert=/etc/squid/certs/codimensions/codimensions.crt
key=/etc/squid/certs/codimensions/codimensions.key
defaultsite=webmail.codimensions.com vhost
https_port 443 accel cert=/etc/squid/certs/codimensions/codimensions.crt
key=/etc/squid/certs/codimensions/codimensions.key
defaultsite=portal.codimensions.com vhost
https_port 443 accel cert=/etc/squid/certs/codimensions/codimensions.crt
key=/etc/squid/certs/codimensions/codimensions.key
defaultsite=crm.codimensions.com vhost
https_port 444 accel cert=/etc/squid/certs/codimensions/codimensions.crt
key=/etc/squid/certs/codimensions/codimensions.key
defaultsite=crm.codimensions.com vhost
https_port 443 accel cert=/etc/squid/certs/codimensions/codimensions.crt
key=/etc/squid/certs/codimensions/codimensions.key
defaultsite=autodiscover.codimensions.com vhost
https_port 443 accel cert=/etc/squid/certs/codimensions/codimensions.crt
key=/etc/squid/certs/codimensions/codimensions.key
defaultsite=meet.codimensions.com vhost
https_port 443 accel cert=/etc/squid/certs/codimensions/codimensions.crt
key=/etc/squid/certs/codimensions/codimensions.key
defaultsite=ts.codimensions.com vhost
http_port 80 accel defaultsite=www.codimensions.com vhost
http_port 80 accel defaultsite=www.continuitytrain.com vhost
http_port 80 accel defaultsite=continuitytrain.com vhost
http_port 80 accel defaultsite=codimensions.com vhost

# destination server
cache_peer 10.10.20.33 parent 443 0 ssl ssldomain=webmail.codimensions.com
sslcafile=/etc/squid/certs/codimensions/codimensions.crt proxy-only
no-query no-digest front-end-https=on originserver login=PASS
connection-auth=on name=exchange forceddomain=webmail.codimensions.com
cache_peer 10.10.20.53 parent 443 0 ssl ssldomain=webmail.codimensions.com
sslcafile=/etc/squid/certs/codimensions/codimensions.crt no-query
originserver ssl sslflags=DONT_VERIFY_PEER,DONT_VERIFY_DOMAIN name=crm1
cache_peer 10.10.20.53 parent 444 0 ssl ssldomain=webmail.codimensions.com
sslcafile=/etc/squid/certs/codimensions/codimensions.crt no-query
originserver ssl sslflags=DONT_VERIFY_PEER,DONT_VERIFY_DOMAIN name=crm2
cache_peer 10.10.20.37 parent 443 0 ssl ssldomain=webmail.codimensions.com
sslcafile=/etc/squid/certs/codimensions/codimensions.crt no-query
originserver login=PASS ssl sslflags=DONT_VERIFY_PEER,DONT_VERIFY_DOMAIN
name=sharepoint
cache_peer 10.10.20.41 parent 443 0 ssl ssldomain=webmail.codimensions.com
sslcafile=/etc/squid/certs/codimensions/codimensions.crt no-query
originserver login=PASS ssl sslflags=DONT_VERIFY_PEER,DONT_VERIFY_DOMAIN
name=ts
cache_peer 10.10.20.34 parent 443 0 ssl ssldomain=webmail.codimensions.com
sslcafile=/etc/squid/certs/codimensions/codimensions.crt no-query
originserver ssl sslflags=DONT_VERIFY_PEER,DONT_VERIFY_DOMAIN name=meet
cache_peer 10.10.20.90 parent 80 0 no-query originserver name=apache
acl CODOMmail dstdomain webmail.codimensions.com
autodiscover.codimensions.com
acl CODOMportal dstdomain portal.codimensions.com
acl CODOMcrm dstdomain crm.codimensions.com
acl CODOMts dstdomain ts.codimensions.com
acl CODOMmeet dstdomain meet.codimensions.com
acl CODOMapache1 dstdomain www.codimensions.com
acl CODOMapache2 dstdomain www.continuitytrain.com
acl CODOMapache3 dstdomain .continuitytrain.com
acl CODOMapache4 dstdomain .codimensions.com

never_direct allow CODOMmail
never_direct allow CODOMportal
never_direct allow CODOMcrm
never_direct allow CODOMts
never_direct allow CODOMmeet
never_direct allow CODOMapache1
never_direct allow CODOMapache2
never_direct allow CODOMapache3
never_direct allow CODOMapache4
http_access allow CODOMmail
http_access allow CODOMportal
http_access allow CODOMcrm
http_access allow CODOMts
http_access allow CODOMmeet
http_access allow CODOMapache1
http_access allow CODOMapache2
http_access allow CODOMapache3
http_access allow CODOMapache4
http_access deny all

cache_peer_access exchange allow CODOMmail
cache_peer_access sharepoint allow CODOMportal
cache_peer_access crm1 allow CODOMcrm
cache_peer_access crm2 allow CODOMcrm
cache_peer_access ts allow CODOMts
cache_peer_access meet allow CODOMmeet
cache_peer_access apache allow CODOMapache1
cache_peer_access apache allow CODOMapache2
cache_peer_access apache allow CODOMapache3
cache_peer_access apache allow CODOMapache4
cache_peer_access exchange deny all
cache_peer_access sharepoint deny all
cache_peer_access crm1 deny all
cache_peer_access crm2 deny all
cache_peer_access ts deny all
cache_peer_access meet deny all
cache_peer_access apache deny all
# eof
Received on Sun Mar 03 2013 - 20:09:13 MST