[squid-users] no subject

2005-03-08 Thread mstde
Hi,  

I try to set up a squid reverse-proxy in front of a Lotus Notes Webmail and an 
IIS-webserver 

- two different machines in the same domain.

squid.conf looks like this:

https_port 443 cert=/usr/local/squid/cacert.pem 
key=/usr/local/squid/privkey.pem defaultsite=domino.oursite.de

https_port 442 cert=/usr/local/squid/cacert.pem 
key=/usr/local/squid/privkey.pem defaultsite=iis.oursite.de

cache_peer 10.0.1.1 parent 443 0 no-query proxy-only name=domino.oursite.de ssl 
 sslflags=DONT_VERIFY_PEER

cache_peer 10.0.1.2 parent 443 0 no-query proxy-only name=iis.oursite.de ssl  
sslflags=DONT_VERIFY_PEER

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80  # http
acl Safe_ports port 21  # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70  # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT

acl data dstdomain iis.oursite.de 
acl mails dstdomain domino.oursite.de

#cache_peer_access domino.oursite.de deny data
cache_peer_access domino.oursite.de allow all

#cache_peer_access web-eins.ad.worldgames2005.de deny mails
cache_peer_access web-eins.ad.worldgames2005.de allow all

The idea is to forward requests for domino to the cache_peer 10.0.1.1. and 
requests for iis  to the cache_peer 10.0.1.2. 

But EVERYTIME i change the cache_peer_access directiv to something other than 
allow all   
Squid aborts with the error

assertion failed: cbdata.cc:402: c-locks  0

Changing the directive and restarting helps an squid works -  but the second 
webserver cannot be reached.

The error can be reproduced by activating the cache_peer_access-directive with 
a content  other than allow all

What's wrong ? How can i get it working?

Any help is very much appreciated.

Thanks,

Michael
__
Mit WEB.DE FreePhone mit hoechster Qualitaet ab 0 Ct./Min.
weltweit telefonieren! http://freephone.web.de/?mc=021201



[squid-users] Squid aborts with cache_peer_access

2005-03-08 Thread mstde
Hi,  

I try to set up a squid reverse-proxy in front of a Lotus Notes Webmail and an 
IIS-webserver 

- two different machines in the same domain.

squid.conf looks like this:

https_port 443 cert=/usr/local/squid/cacert.pem 
key=/usr/local/squid/privkey.pem defaultsite=domino.oursite.de

https_port 442 cert=/usr/local/squid/cacert.pem 
key=/usr/local/squid/privkey.pem defaultsite=iis.oursite.de

cache_peer 10.0.1.1 parent 443 0 no-query proxy-only name=domino.oursite.de ssl 
 sslflags=DONT_VERIFY_PEER

cache_peer 10.0.1.2 parent 443 0 no-query proxy-only name=iis.oursite.de ssl  
sslflags=DONT_VERIFY_PEER

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80  # http
acl Safe_ports port 21  # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70  # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT

acl data dstdomain iis.oursite.de 
acl mails dstdomain domino.oursite.de

#cache_peer_access domino.oursite.de deny data
cache_peer_access domino.oursite.de allow all

#cache_peer_access web-eins.ad.worldgames2005.de deny mails
cache_peer_access web-eins.ad.worldgames2005.de allow all

The idea is to forward requests for domino to the cache_peer 10.0.1.1. and 
requests for iis  to the cache_peer 10.0.1.2. 

But EVERYTIME i change the cache_peer_access directiv to something other than 
allow all   
Squid aborts with the error

assertion failed: cbdata.cc:402: c-locks  0

Changing the directive and restarting helps an squid works -  but the second 
webserver cannot be reached.

The error can be reproduced by activating the cache_peer_access-directive with 
a content  other than allow all

What's wrong ? How can i get it working?

Any help is very much appreciated.

Thanks,

Michael
__
Verschicken Sie romantische, coole und witzige Bilder per SMS!
Jetzt bei WEB.DE FreeMail: http://f.web.de/?mc=021193