one site not working

classic Classic list List threaded Threaded
5 messages Options
Reply | Threaded
Open this post in threaded view
|

one site not working

simon ben

Dear All,

 

I am using Squid version 3.5.2 on Centos  7 64 bit and its working fine with no issue but recently got a complain from one user saying that the below site Is not opening..  just says page cannot be displayed

 

https://my.esri.com

 

but if I use a machine without squid its working fine

 

the access logs is showing me as below

 

 

1575869460.673   6034 172.16.2.175 TCP_TUNNEL/200 0 CONNECT my.esri.com:443 - HIER_DIRECT/34.210.189.55 -

1575869461.235    559 172.16.2.175 TCP_TUNNEL/200 0 CONNECT my.esri.com:443 - HIER_DIRECT/34.210.189.55 -

1575869461.801    562 172.16.2.175 TCP_TUNNEL/200 0 CONNECT my.esri.com:443 - HIER_DIRECT/34.210.189.55 -

1575869462.096    291 172.16.2.175 TCP_TUNNEL/200 0 CONNECT my.esri.com:443 - HIER_DIRECT/34.210.189.55

 

 

I tried to google around and found that the the ip4 prefrence has to enabled for DNS so I did the below in squid config

 

dns_v4_first on

 

but no luck

 

appreciate your help and advice

 

 

thanks and regards

 

simon



_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users
Reply | Threaded
Open this post in threaded view
|

Re: one site not working

Amos Jeffries
Administrator
On 10/12/19 5:52 am, simon ben wrote:
> Dear All,
>
>  
>
> I am using Squid version 3.5.2 on Centos  7 64 bit and its working fine
> with no issue but recently got a complain from one user saying that the
> below site Is not opening..  just says page cannot be displayed
>

That would be one issue. Likely many others you are just not noticing.

Please upgrade. v3.5.2 is over 5 years old and obsolete. Current Squid
release is v4.9.


 

>
> 1575869460.673   6034 172.16.2.175 TCP_TUNNEL/200 0 CONNECT
> my.esri.com:443 <http://my.esri.com:443> - HIER_DIRECT/34.210.189.55
> <http://34.210.189.55> -
>
> 1575869461.235    559 172.16.2.175 TCP_TUNNEL/200 0 CONNECT
> my.esri.com:443 <http://my.esri.com:443> - HIER_DIRECT/34.210.189.55
> <http://34.210.189.55> -
>
> 1575869461.801    562 172.16.2.175 TCP_TUNNEL/200 0 CONNECT
> my.esri.com:443 <http://my.esri.com:443> - HIER_DIRECT/34.210.189.55
> <http://34.210.189.55> -
>
> 1575869462.096    291 172.16.2.175 TCP_TUNNEL/200 0 CONNECT
> my.esri.com:443 <http://my.esri.com:443> - HIER_DIRECT/34.210.189.55
> <http://34.210.189.55> –
>
>  
>
>  
>
> I tried to google around and found that the the ip4 prefrence has to
> enabled for DNS so I did the below in squid config
>

No it does not. Your proxy is already connecting the tunnel to that
sites IPv4 address.


Amos
_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users
Reply | Threaded
Open this post in threaded view
|

Re: one site not working

simon ben
Dear Amos,

Thanks for the quick reply.

Yes its an old version as I use to install using yum.
I will upgrade as you said and check it out

thanks once again

Regards

simon

On Tuesday, December 10, 2019, 10:57:47 AM GMT+3, Amos Jeffries <[hidden email]> wrote:


On 10/12/19 5:52 am, simon ben wrote:
> Dear All,
>
>  
>
> I am using Squid version 3.5.2 on Centos  7 64 bit and its working fine
> with no issue but recently got a complain from one user saying that the
> below site Is not opening..  just says page cannot be displayed
>

That would be one issue. Likely many others you are just not noticing.

Please upgrade. v3.5.2 is over 5 years old and obsolete. Current Squid
release is v4.9.


 

>
> 1575869460.673   6034 172.16.2.175 TCP_TUNNEL/200 0 CONNECT
> my.esri.com:443 <http://my.esri.com:443> - HIER_DIRECT/34.210.189.55
> <<a shape="rect" href="http://34.210.189.55" target="_blank" onclick="return window.theMainWindow.showLinkWarning(this)">http://34.210.189.55> -
>
> 1575869461.235    559 172.16.2.175 TCP_TUNNEL/200 0 CONNECT
> my.esri.com:443 <http://my.esri.com:443> - HIER_DIRECT/34.210.189.55
> <<a shape="rect" href="http://34.210.189.55" target="_blank" onclick="return window.theMainWindow.showLinkWarning(this)">http://34.210.189.55> -
>
> 1575869461.801    562 172.16.2.175 TCP_TUNNEL/200 0 CONNECT
> my.esri.com:443 <http://my.esri.com:443> - HIER_DIRECT/34.210.189.55
> <<a shape="rect" href="http://34.210.189.55" target="_blank" onclick="return window.theMainWindow.showLinkWarning(this)">http://34.210.189.55> -
>
> 1575869462.096    291 172.16.2.175 TCP_TUNNEL/200 0 CONNECT
> my.esri.com:443 <http://my.esri.com:443> - HIER_DIRECT/34.210.189.55
> <<a shape="rect" href="http://34.210.189.55" target="_blank" onclick="return window.theMainWindow.showLinkWarning(this)">http://34.210.189.55> –

>
>  
>
>  
>
> I tried to google around and found that the the ip4 prefrence has to
> enabled for DNS so I did the below in squid config

>

No it does not. Your proxy is already connecting the tunnel to that
sites IPv4 address.


Amos
_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users


_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users
Reply | Threaded
Open this post in threaded view
|

Re: one site not working

simon ben
Dear Amos,

I have upgraded to squid as below

[root@linproxy software]# squid -v
Squid Cache: Version 4.6
Service Name: squid

but the site www.esri.com
is still not working .. 
just says page cannot be displayed

the access.log show the below
----------------------------------

576385816.111    189 172.16.2.175 TCP_REFRESH_MODIFIED/301 377 GET http://www.esri.com/ - HIER_DIRECT/23.37.177.22 -
1576385816.112  15875 172.16.2.175 TCP_TUNNEL/200 5547 CONNECT outlook.office365.com:443 - HIER_DIRECT/40.101.137.50 -
1576385816.157     42 172.16.2.175 TCP_TUNNEL/200 46 CONNECT www.esri.com:443 - HIER_DIRECT/23.37.177.22 -
1576385816.203     42 172.16.2.175 TCP_TUNNEL/200 46 CONNECT www.esri.com:443 - HIER_DIRECT/23.37.177.22 -
1576385816.249     43 172.16.2.175 TCP_TUNNEL/200 46 CONNECT www.esri.com:443 - HIER_DIRECT/23.37.177.22 -
1576385816.274     21 172.16.2.175 TCP_TUNNEL/200 39 CONNECT www.esri.com:443 - HIER_DIRECT/23.37.177.22 -
----------------------------------

but hotmail and other sites working fine

anyway I can try to debug more to find the issue

apprecite your help and advice


On Tuesday, December 10, 2019, 07:18:07 PM GMT+3, simon ben <[hidden email]> wrote:


Dear Amos,

Thanks for the quick reply.

Yes its an old version as I use to install using yum.
I will upgrade as you said and check it out

thanks once again

Regards

simon

On Tuesday, December 10, 2019, 10:57:47 AM GMT+3, Amos Jeffries <[hidden email]> wrote:


On 10/12/19 5:52 am, simon ben wrote:
> Dear All,
>
>  
>
> I am using Squid version 3.5.2 on Centos  7 64 bit and its working fine
> with no issue but recently got a complain from one user saying that the
> below site Is not opening..  just says page cannot be displayed
>

That would be one issue. Likely many others you are just not noticing.

Please upgrade. v3.5.2 is over 5 years old and obsolete. Current Squid
release is v4.9.


 

>
> 1575869460.673   6034 172.16.2.175 TCP_TUNNEL/200 0 CONNECT
> my.esri.com:443 <<a rel="nofollow" shape="rect" target="_blank" onclick="return window.theMainWindow.showLinkWarning(this)" href="http://my.esri.com:443">http://my.esri.com:443> - HIER_DIRECT/34.210.189.55
> <<a rel="nofollow" shape="rect" target="_blank" onclick="return window.theMainWindow.showLinkWarning(this)" href="http://34.210.189.55">http://34.210.189.55> -
>
> 1575869461.235    559 172.16.2.175 TCP_TUNNEL/200 0 CONNECT
> my.esri.com:443 <<a rel="nofollow" shape="rect" target="_blank" onclick="return window.theMainWindow.showLinkWarning(this)" href="http://my.esri.com:443">http://my.esri.com:443> - HIER_DIRECT/34.210.189.55
> <<a rel="nofollow" shape="rect" target="_blank" onclick="return window.theMainWindow.showLinkWarning(this)" href="http://34.210.189.55">http://34.210.189.55> -
>
> 1575869461.801    562 172.16.2.175 TCP_TUNNEL/200 0 CONNECT
> my.esri.com:443 <<a rel="nofollow" shape="rect" target="_blank" onclick="return window.theMainWindow.showLinkWarning(this)" href="http://my.esri.com:443">http://my.esri.com:443> - HIER_DIRECT/34.210.189.55
> <<a rel="nofollow" shape="rect" target="_blank" onclick="return window.theMainWindow.showLinkWarning(this)" href="http://34.210.189.55">http://34.210.189.55> -
>
> 1575869462.096    291 172.16.2.175 TCP_TUNNEL/200 0 CONNECT
> my.esri.com:443 <<a rel="nofollow" shape="rect" target="_blank" onclick="return window.theMainWindow.showLinkWarning(this)" href="http://my.esri.com:443">http://my.esri.com:443> - HIER_DIRECT/34.210.189.55
> <<a rel="nofollow" shape="rect" target="_blank" onclick="return window.theMainWindow.showLinkWarning(this)" href="http://34.210.189.55">http://34.210.189.55> –

>
>  
>
>  
>
> I tried to google around and found that the the ip4 prefrence has to
> enabled for DNS so I did the below in squid config

>

No it does not. Your proxy is already connecting the tunnel to that
sites IPv4 address.


Amos
_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users


_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users
Reply | Threaded
Open this post in threaded view
|

Re: one site not working

Amos Jeffries
Administrator
On 15/12/19 6:21 pm, simon ben wrote:

> Dear Amos,
>
> I have upgraded to squid as below
>
> [root@linproxy software]# squid -v
> Squid Cache: Version 4.6
> Service Name: squid
>
> but the site www.esri.com
> is still not working .. 
> just says page cannot be displayed
>
> the access.log show the below
> ----------------------------------
>
> 576385816.111    189 172.16.2.175 TCP_REFRESH_MODIFIED/301 377 GET
> http://www.esri.com/ - HIER_DIRECT/23.37.177.22 -
> 1576385816.112  15875 172.16.2.175 TCP_TUNNEL/200 5547 CONNECT
> outlook.office365.com:443 - HIER_DIRECT/40.101.137.50 -
> 1576385816.157     42 172.16.2.175 TCP_TUNNEL/200 46 CONNECT
> www.esri.com:443 - HIER_DIRECT/23.37.177.22 -
> 1576385816.203     42 172.16.2.175 TCP_TUNNEL/200 46 CONNECT
> www.esri.com:443 - HIER_DIRECT/23.37.177.22 -
> 1576385816.249     43 172.16.2.175 TCP_TUNNEL/200 46 CONNECT
> www.esri.com:443 - HIER_DIRECT/23.37.177.22 -
> 1576385816.274     21 172.16.2.175 TCP_TUNNEL/200 39 CONNECT
> www.esri.com:443 - HIER_DIRECT/23.37.177.22 -
> ----------------------------------
>
> but hotmail and other sites working fine
>
> anyway I can try to debug more to find the issue
>
> apprecite your help and advice
>

Its all working okay as far as Squid. The tunnels have status 200, but
either client or server are closing them pretty quickly after only a few
dozen bytes transferred.

Amos
_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users