Re: [squid-users] Issue with some files and templates
fre 2010-04-02 klockan 20:30 +0100 skrev a...@gmail: > My http_port settings are Nothing obviously odd there, except that you should not need the 3128 port. So keep a close eye on access.log of both Squid and your web server when seeing the problem. > I have this in my cache.log but I don't know where it's coming from > > WARNING: CONNECT method received on http Accelerator port 3128 Someone is trying to use your reverse proxy port as a normal proxy. See access.log for who. > lientProcessRequest: Invalid Request > 2010/04/02 13:35:00| Failed to select source for 'http://mysite.net/' > 2010/04/02 13:35:00| always_direct = 0 > 2010/04/02 13:35:00|never_direct = 0 > 2010/04/02 13:35:00|timedout = 0 Not mysite.net is in your list of sites for the main server. > 2010/04/02 13:46:43| Failed to select source for > 'http://81.XX.XX.XX/install.txt' ((This is my public IP) Probably a bot looking for a known vulnerability in some other server / shopping cart application. Nothing to worry about. > And finally my access.log fills up within minutes, it is now in the size of > 23, 780, 835 bytes (23.5 MB) > This is far too large, sometimes it's even difficult to empty them, as they > won't open because they are too large. > Any ideas please? I have tried the squid -k rotate but it doesn't seem to > work for the access.log access.log is rotated by "squid -k rotate" just as the other logs. But maybe your Squid is configured for using external rotation by logrotate or similar.. > access.log > 1270183340.294615 204.152.200.138 TCP_MISS/200 167 CONNECT > 203.188.197.10:25 - DIRECT/203.188.197.10 - Ouch.. someone are using your server as a spam relay. Do you have any http_port not configured in accel mode? > For the above question, the answer is yes if it is what I understood > the bottom one I didn't understand what you meant > > " > Including host component." scheme://hostcomponent/urlpath Regards Henrik
Re: [squid-users] Issue with some files and templates
om Is there a way to block this please? And finally my access.log fills up within minutes, it is now in the size of 23, 780, 835 bytes (23.5 MB) This is far too large, sometimes it's even difficult to empty them, as they won't open because they are too large. Any ideas please? I have tried the squid -k rotate but it doesn't seem to work for the access.log I will paste few lines from the access log, it is far too big to post everything here: basically the same request repeated time and time again. access.log 1270183340.294615 204.152.200.138 TCP_MISS/200 167 CONNECT 203.188.197.10:25 - DIRECT/203.188.197.10 - 1270183340.665609 67.215.231.50 TCP_MISS/200 167 CONNECT 203.188.197.9:25 - DIRECT/203.188.197.9 - 1270183340.702606 67.215.247.242 TCP_MISS/200 167 CONNECT 203.188.197.9:25 - DIRECT/203.188.197.9 - 1270183340.767602 67.215.231.50 TCP_MISS/200 167 CONNECT 203.188.197.9:25 - DIRECT/203.188.197.9 - 1270183341.272609 67.215.247.210 TCP_MISS/200 167 CONNECT 203.188.197.10:25 - DIRECT/203.188.197.10 - I hope this helps for your last questions I didn't quite understand what you meant by "And does the requested URLs match what your origin servers expect? For the above question, the answer is yes if it is what I understood the bottom one I didn't understand what you meant " > Including host component." I hope that helps Kinds Regards Adam ----- Original Message - From: "Henrik Nordström" To: "a...@gmail" Cc: Sent: Friday, April 02, 2010 7:33 PM Subject: Re: [squid-users] Issue with some files and templates fre 2010-04-02 klockan 19:14 +0100 skrev a...@gmail: Since I installed Squid, now that I can access my backend server and vhosted websites There are a lot of things that aren't working, some links can't be accessed, some folders can't be opened, images, a lot of things. Can you describe your setup in a bit more detail? http_port settings? cache_peer settings? cache_peer_access settings? And what does access.log report? Does it match your expectations on what was requested and where Squid tried to forward it? And does the requested URLs match what your origin servers expect? Including host component. Regards Henrik
Re: [squid-users] Issue with some files and templates
fre 2010-04-02 klockan 19:14 +0100 skrev a...@gmail: > Since I installed Squid, now that I can access my backend server and vhosted > websites > There are a lot of things that aren't working, some links can't be accessed, > some folders can't be opened, images, a lot of things. Can you describe your setup in a bit more detail? http_port settings? cache_peer settings? cache_peer_access settings? And what does access.log report? Does it match your expectations on what was requested and where Squid tried to forward it? And does the requested URLs match what your origin servers expect? Including host component. Regards Henrik
[squid-users] Issue with some files and templates
Hi All, Since I installed Squid, now that I can access my backend server and vhosted websites There are a lot of things that aren't working, some links can't be accessed, some folders can't be opened, images, a lot of things. I simply can't understand what does Squid do to block all of these things and (please don't say it's not Squid) , I can understand that Squid might block any direct access to a folder etc.. but not the files and apps interaction: while contacting the OriginServer why is it that almost a quarter of items aren't displayed, I even get this items, folder, file, " not found on this server" When I know they are there. I really don't know what to do, as if Squid stops applications talking to each other within the same folder, I really don't how to explain it. It's a shame because the concept of a proxy server is a good idea but almost 40% of things refuse to work as they used to. If anyone can give me an idea on how to work around these problems please, Regards Adam
