Re: [squid-users] Squid - some Websites are not correct build

Hey,

The problem you are having is not directly connected to squid.
it might be connected to somethings else.
try a settings of "allow all" and also show us the logs from access.log
and check the cache.log to make sure there is no problem with anything else.

if it's the ntlm or any other network issue then turning the "allow all"
will solve the problem.

So whats on the logs?

Elizer

On 6/14/2013 11:11 AM, guzzzi wrote:
> Hello,
>
> there are some Website when i use Squid they doesnt build up correct. If i
> open the Website without Squid i get see the Website correct.
>
> My squid.conf
>
> # Auth
> auth_param ntlm program /usr/bin/ntlm_auth
> --helper-protocol=squid-2.5-ntlmssp
> auth_param ntlm children 30
> auth_param ntlm keep_alive on
>
> #auth_param basic program /usr/bin/ntlm_auth
> --helper-protocol=squid-2.5-basic
> #auth_param basic children 10
> #auth_param basic realm Squid Proxy Server
> #auth_param basic credentialsttl 2 hours
> #auth_param basic casesensitive off
>
> authenticate_ttl 1 hour
> authenticate_cache_garbage_interval 10 minutes
>
> #
> # Recommended minimum configuration:
> #
> acl manager proto cache_object
> acl localhost src 127.0.0.1/32 ::1
> acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1
>
> # Example rule allowing access from your local networks.
> # Adapt to list your (internal) IP networks from where browsing
> # should be allowed
> acl localnet src 10.0.0.0/8 # RFC1918 possible internal network
> acl localnet src 172.16.0.0/12 # RFC1918 possible internal network
> acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
>
> acl SSL_ports port 443 3000
> acl Safe_ports port 80
> acl Safe_ports port 443
> acl Safe_ports port 70
> acl Safe_ports port 21
> acl Safe_ports port 210
> acl Safe_ports port 1025-65535
> acl Safe_ports port 280
> acl Safe_ports port 488
> acl Safe_ports port 591
> acl Safe_ports port 777
> acl FTP_ports port 21
> acl windowsupdate dstdomain windowsupdate.microsoft.com
> acl windowsupdate dstdomain .update.microsoft.com
> acl windowsupdate dstdomain download.windowsupdate.com
> acl windowsupdate dstdomain redir.metaservices.microsoft.com
> acl windowsupdate dstdomain images.metaservices.microsoft.com
> acl windowsupdate dstdomain c.microsoft.com
> acl windowsupdate dstdomain www.download.windowsupdate.com
> acl windowsupdate dstdomain wustat.windows.com
> acl windowsupdate dstdomain crl.microsoft.com
> acl CONNECT method CONNECT
> acl wuCONNECT dstdomain www.update.microsoft.com
> acl AuthorizedUsers proxy_auth REQUIRED
>
> #acl block-fnes urlpath_regex -i .*/fnes/echo
>
> #
> # Recommended minimum Access Permission configuration:
> #
> # Only allow cachemgr access from localhost
> http_access allow manager localhost
> http_access deny manager
> http_access deny !Safe_ports
> http_access deny CONNECT !SSL_ports
> http_access allow localnet
> http_access allow CONNECT wuCONNECT localnet
> http_access allow windowsupdate localnet
> http_access allow AuthorizedUsers
> http_access deny all
>
> # Squid normally listens to port 3128
> http_port 3128 transparent
>
> # We recommend you to use at least the following line.
> hierarchy_stoplist cgi-bin ?
>
> # Uncomment and adjust the following to add a disk cache directory.
> cache_dir ufs /var/cache/squid 51200 36 256
>
> # Add any of your own refresh_pattern entries above these.
> refresh_pattern -i \.(html|htm|html\?|htm\?)$ 9440 90% 100000
> override-expire reload-into-ims
> refresh_pattern -i
> \.(gif|png|jpg|jpeg|ico|bmp|tiff|webp|bif|gif\?|png\?|jpg\?|jpeg\?|ico\?|bmp\?|tiff\?|webp\?|bif\?)$
> 36000 90% 100000 overr$
> refresh_pattern \.(swf|swf\?|js|js\?|wav|css|css\?|class|dat|zsci)$ 36000
> 90% 100000 override-expire reload-into-ims
> refresh_pattern -i
> \.(bin|deb|rpm|exe|zip|tar|tgz|ram|rar|bin|ppt|doc|docx|tiff|pdf|uxx|gz|xls|xlsx|psd|crl|msi|dll|dll\?|crx|enc|skl|arc)$
> 36$
> refresh_pattern -i \.(xml)$ 0 90% 100000
> refresh_pattern -i \.(json|json\?)$ 1440 90% 5760 override-expire
> reload-into-ims
> refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
> refresh_pattern ^ftp: 5440 90% 10080
> refresh_pattern ^gopher: 1440 0% 1440
> refresh_pattern -i . 0 90% 5760
> ignore_expect_100 on
> minimum_object_size 0 KB
> #pipeline_prefetch on
> maximum_object_size 250 MB
> maximum_object_size_in_memory 1 MB
> #visible_hostname shadow
> #ique_hostname shadow-DHS
> client_db off
> cache_store_log none
> #positive_dns_ttl 16 day
> #shutdown_lifetime 0 second
> cache_mem 768 MB
> memory_pools on
> #read_ahead_gap 1 MB
> #half_closed_clients off
>
> access_log /var/log/squid3/access.log
>
> and the Website of "www.kia.de" look like this, and this is not correct
>
> <http://squid-web-proxy-cache.1019090.n4.nabble.com/file/n4660603/kia.jpg>
>
> Hope someone can Help me
>
> Many Thanks
> Best Regards
>
>
>
> --
> View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-some-Websites-are-not-correct-build-tp4660603.html
> Sent from the Squid - Users mailing list archive at Nabble.com.
>
Received on Fri Jun 14 2013 - 08:30:03 MDT