RE: [squid-users] Problem accessing a particular site through squid

2010-09-17 Thread Seb Harrington
-Original Message-
From: Amos Jeffries [mailto:squ...@treenet.co.nz]
Sent: 15 September 2010 15:21
To: squid-users@squid-cache.org
Subject: Re: [squid-users] Problem accessing a particular site through
squid

On 15/09/10 23:24, Seb Harrington wrote:
>
> Hi everyone,
>
> I have a problem when accessing http://smallsteps4life.direct.gov.uk/
> through squid.
>
> When accessing the site directly the site is properly formatted, when 
> accessing through squid the site appears 'unformatted', some of the 
> images do not load and it looks as if the CSS has not been applied.
>
> I thought this behaviour was a little strange so I've tested it on two

> more instances of squid, one a default fresh install allowing 
> everything through (the all acl).
>
> When accessing the site these are the logs:
>   access.log: http://pastebin.com/HtkyfjUJ
>   store.log: http://pastebin.com/0NjnDZzW
>   cache.log: did not output anything useful or informative.
>
> I'm using the ubuntu version of squid3 (apt-get squid3) and I'm using 
> ubuntu 10.04 Lucid Lynx.
>
> Squid version: Squid Cache: Version 3.0.STABLE19   Could someone

>please run that website through their version of squid for  me and let 
>me know if this is a squid issue, a website issue or a bug in  the 
>ubuntu packaged version of squid.
>
> Cheers,
>
> Seb
>

Hi Amos,

Thanks for the reply,

>That trace from the "working" squid? There is zero CSS in it. Just 
>JavaScript files that generate page content on the fly. Most of the
content seems to be going through HTTPS which passes straight through
Squid.

That was the trace from squid fresh installed from apt-get in ubuntu. I
wanted to try a fresh installation so I prove that it was / was not
squid causing the website to display incorrectly. It is showing the same
behaviour as the production squid proxy.

> The all ACL working where regular config catches only some occasional 
> files makes me think either those files are on a domain being blocked,
or you have regex patterns that are catching more than you are aware of.

The squid conf as being used on the fresh installed squid is here:
http://pastebin.com/5QTAL2px

All I've changed is I've uncommented the acl all src all on line # 578
and changed http_access allow all on line # 629. I have made no other
modifications, and the site still displays incorrectly. Any other ideas?

That is a very valid point about the CSS, I've looked at the source of
the webpage and all CSS/JS seems to come from the same domian and
subdomian, but it is weired that the CSS isn't coming through the in the
logs.

Cheers,

Seb

This email carries a disclaimer, a copy of which may be read at 
http://learning.longhill.org.uk/disclaimer


RE: [squid-users] Problem accessing a particular site through squid

2010-09-16 Thread Chad Naugle
Is your squid configured to advertise that it is a proxy to the sites it 
connects to?

-
Chad E. Naugle
Tech Support II, x. 7981
Travel Impressions, Ltd.
 


>>> "Seb Harrington"  9/16/2010 6:15 AM >>>
Hi DaniL,

Thanks for your reply.

>Do you have content filter installed on your machine?

On the production squid server we run dansguradian as a content filter,
but on the other two servers I have installed squid3 onto (to check if
DG or squid was at fault) it was just squid and the problem with the
site remained.

Cheers,

Seb

This email carries a disclaimer, a copy of which may be read at 
http://learning.longhill.org.uk/disclaimer


Travel Impressions made the following annotations
-
"This message and any attachments are solely for the intended recipient and may 
contain confidential or privileged information.  If you are not the intended 
recipient, any disclosure, copying, use, or distribution of the information 
included in this message and any attachments is prohibited.  If you have 
received this communication in error, please notify us by reply e-mail and 
immediately and permanently delete this message and any attachments.
Thank you."


RE: [squid-users] Problem accessing a particular site through squid

2010-09-16 Thread Seb Harrington
Hi DaniL,

Thanks for your reply.

>Do you have content filter installed on your machine?

On the production squid server we run dansguradian as a content filter,
but on the other two servers I have installed squid3 onto (to check if
DG or squid was at fault) it was just squid and the problem with the
site remained.

Cheers,

Seb

This email carries a disclaimer, a copy of which may be read at 
http://learning.longhill.org.uk/disclaimer


Re: [squid-users] Problem accessing a particular site through squid

2010-09-15 Thread Danil Nafikov
I had very similar problem.
My problem was that CSS and javascript files were not loading. after
looking to it closer, I find out that it was due to content filter
(dansguardian). CSS and javascript files were  on different domain,
which was blocked.

Do you have content filter installed on your machine?


--
DaniL


[squid-users] RE: EXTERNAL: Re: [squid-users] Problem accessing a particular site through squid

2010-09-15 Thread Bucci, David G
I just tried it on my Ubuntu 10.04 running the std repo squid 3.0.STABLE19-1.  
I see the same behavior, running Google Chrome (nightly experimental build).

Interestingly, through Squid, it hangs trying to retrieve something from 
http://directgov.stcllctrs.com ... which is in a  block.  
So something is causing Chrome to think it should execute noscripts (?)

The only other thing I notice is that your certificate is invalid for SSL to 
the smallsteps4life.direct.gov.uk ... the server name is a wildcarded 
*.workingwithprofero.com.  Don't think that should be affecting Squid though.

When I save the html source before/after squid, they have a huge amount of 
difference ... oh, interesting, the noscript isn't correct, it's 
<noscript> instead of correctly using <> chars.  That explains why chrome 
is trying to retrieve the URL.

I dunno ... nothing jumps out at me.

-Original Message-
From: Amos Jeffries [mailto:squ...@treenet.co.nz] 
Sent: Wednesday, September 15, 2010 10:21 AM
To: squid-users@squid-cache.org
Subject: EXTERNAL: Re: [squid-users] Problem accessing a particular site 
through squid

On 15/09/10 23:24, Seb Harrington wrote:
>
> Hi everyone,
>
> I have a problem when accessing http://smallsteps4life.direct.gov.uk/
> through squid.
>
> When accessing the site directly the site is properly formatted, when
> accessing through squid the site appears 'unformatted', some of the
> images do not load and it looks as if the CSS has not been applied.
>
> I thought this behaviour was a little strange so I've tested it on two
> more instances of squid, one a default fresh install allowing everything
> through (the all acl).
>
> When accessing the site these are the logs:
>   access.log: http://pastebin.com/HtkyfjUJ
>   store.log: http://pastebin.com/0NjnDZzW
>   cache.log: did not output anything useful or informative.
>
> I'm using the ubuntu version of squid3 (apt-get squid3) and I'm using
> ubuntu 10.04 Lucid Lynx.
>
> Squid version: Squid Cache: Version 3.0.STABLE19
>
> Could someone please run that website through their version of squid for
> me and let me know if this is a squid issue, a website issue or a bug in
> the ubuntu packaged version of squid.
>
> Cheers,
>
> Seb
>

That trace from the "working" squid? There is zero CSS in it. Just 
JavaScript files that generate page content on the fly. Most of the 
content seems to be going through HTTPS which passes straight through Squid.

The all ACL working where regular config catches only some occasional 
files makes me think either those files are on a domain being blocked, 
or you have regex patterns that are catching more than you are aware of.

Amos
-- 
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.8
   Beta testers wanted for 3.2.0.2


Re: [squid-users] Problem accessing a particular site through squid

2010-09-15 Thread Jordon Bedwell
On 09/15/2010 08:45 AM, Seb Harrington wrote:
> 
>> did check it with SQUID3.1.8 on FreeBSD, and have no problems
> whatsoever.
> 
> Thankyou.
> 
> Is there anyone else on the list using squid3 as packaged by ubuntu that
> could also test the site for me?
> 
> Thanks,
> 
> Seb
> 
> 
> This email carries a disclaimer, a copy of which may be read at 
> http://learning.longhill.org.uk/disclaimer

I'm on my Ubuntu machine right now, if you want to send me a direct
email with the problem you were having I can use my local squid install
to check it out.


Re: [squid-users] Problem accessing a particular site through squid

2010-09-15 Thread Amos Jeffries

On 15/09/10 23:24, Seb Harrington wrote:


Hi everyone,

I have a problem when accessing http://smallsteps4life.direct.gov.uk/
through squid.

When accessing the site directly the site is properly formatted, when
accessing through squid the site appears 'unformatted', some of the
images do not load and it looks as if the CSS has not been applied.

I thought this behaviour was a little strange so I've tested it on two
more instances of squid, one a default fresh install allowing everything
through (the all acl).

When accessing the site these are the logs:
access.log: http://pastebin.com/HtkyfjUJ
store.log: http://pastebin.com/0NjnDZzW
cache.log: did not output anything useful or informative.

I'm using the ubuntu version of squid3 (apt-get squid3) and I'm using
ubuntu 10.04 Lucid Lynx.

Squid version: Squid Cache: Version 3.0.STABLE19

Could someone please run that website through their version of squid for
me and let me know if this is a squid issue, a website issue or a bug in
the ubuntu packaged version of squid.

Cheers,

Seb



That trace from the "working" squid? There is zero CSS in it. Just 
JavaScript files that generate page content on the fly. Most of the 
content seems to be going through HTTPS which passes straight through Squid.


The all ACL working where regular config catches only some occasional 
files makes me think either those files are on a domain being blocked, 
or you have regex patterns that are catching more than you are aware of.


Amos
--
Please be using
  Current Stable Squid 2.7.STABLE9 or 3.1.8
  Beta testers wanted for 3.2.0.2


RE: [squid-users] Problem accessing a particular site through squid

2010-09-15 Thread Seb Harrington

> did check it with SQUID3.1.8 on FreeBSD, and have no problems
whatsoever.

Thankyou.

Is there anyone else on the list using squid3 as packaged by ubuntu that
could also test the site for me?

Thanks,

Seb


This email carries a disclaimer, a copy of which may be read at 
http://learning.longhill.org.uk/disclaimer


Re: [squid-users] Problem accessing a particular site through squid

2010-09-15 Thread Amos Jeffries

On 15/09/10 23:24, Seb Harrington wrote:


Hi everyone,

I have a problem when accessing http://smallsteps4life.direct.gov.uk/
through squid.

When accessing the site directly the site is properly formatted, when
accessing through squid the site appears 'unformatted', some of the
images do not load and it looks as if the CSS has not been applied.

I thought this behaviour was a little strange so I've tested it on two
more instances of squid, one a default fresh install allowing everything
through (the all acl).

When accessing the site these are the logs:
access.log: http://pastebin.com/HtkyfjUJ
store.log: http://pastebin.com/0NjnDZzW
cache.log: did not output anything useful or informative.

I'm using the ubuntu version of squid3 (apt-get squid3) and I'm using
ubuntu 10.04 Lucid Lynx.

Squid version: Squid Cache: Version 3.0.STABLE19


You may find a backport of 3.1 useful:
 https://launchpad.net/~yadi/+archive/ppa

Amos
--
Please be using
  Current Stable Squid 2.7.STABLE9 or 3.1.8
  Beta testers wanted for 3.2.0.2


Re: [squid-users] Problem accessing a particular site through squid

2010-09-15 Thread Goetz R Schultz
Hi,

did check it with SQUID3.1.8 on FreeBSD, and have no problems whatsoever.

HTH,

Thanks and regards

  Goetz R. Schultz

"I intend to live forever - so far, so good."
===
Verify the GnuPG-Sig at www.goetz.co.uk
Get the rootcertificate at www.cacert.org
===
 /"\
 \ /ASCII Ribbon Campaign
  X  against HTML e-mail
 / \

"Si forte in alienas manus oberraverit hec peregrina epistola
incertis ventis dimissa, sed Deo commendata, precamur ut ei
reddatur cui soli destinata, nec preripiat quisquam non sibi parata."

On 15/09/2010 12:24, Seb Harrington wrote:
>  
> Hi everyone,
> 
> I have a problem when accessing http://smallsteps4life.direct.gov.uk/
> through squid.
> 
> When accessing the site directly the site is properly formatted, when
> accessing through squid the site appears 'unformatted', some of the
> images do not load and it looks as if the CSS has not been applied.
>  
> I thought this behaviour was a little strange so I've tested it on two
> more instances of squid, one a default fresh install allowing everything
> through (the all acl).
> 
> When accessing the site these are the logs: 
>   access.log: http://pastebin.com/HtkyfjUJ
>   store.log: http://pastebin.com/0NjnDZzW
>   cache.log: did not output anything useful or informative.
> 
> I'm using the ubuntu version of squid3 (apt-get squid3) and I'm using
> ubuntu 10.04 Lucid Lynx.
> 
> Squid version: Squid Cache: Version 3.0.STABLE19
> configure options:  '--build=i486-linux-gnu' '--prefix=/usr'
> '--includedir=${prefix}/include' '--mandir=${prefix}/share/man'
> '--infodir=${prefix}/share/info' '--sysconfdir=/etc'
> '--localstatedir=/var' '--libexecdir=${prefix}/lib/squid3'
> '--disable-maintainer-mode' '--disable-dependency-tracking'
> '--disable-silent-rules' '--srcdir=.' '--datadir=/usr/share/squid3'
> '--sysconfdir=/etc/squid3' '--mandir=/usr/share/man'
> '--with-cppunit-basedir=/usr' '--enable-inline' '--enable-async-io=8'
> '--enable-storeio=ufs,aufs,diskd,null'
> '--enable-removal-policies=lru,heap' '--enable-delay-pools'
> '--enable-cache-digests' '--enable-underscores' '--enable-icap-client'
> '--enable-follow-x-forwarded-for'
> '--enable-auth=basic,digest,ntlm,negotiate'
> '--enable-basic-auth-helpers=LDAP,MSNT,NCSA,PAM,SASL,SMB,YP,getpwnam,mul
> ti-domain-NTLM' '--enable-ntlm-auth-helpers=SMB'
> '--enable-digest-auth-helpers=ldap,password'
> '--enable-negotiate-auth-helpers=squid_kerb_auth'
> '--enable-external-acl-helpers=ip_user,ldap_group,session,unix_group,wbi
> nfo_group' '--enable-arp-acl' '--enable-snmp'
> '--with-filedescriptors=65536' '--with-large-files'
> '--with-default-user=proxy' '--enable-epoll' '--enable-linux-netfilter'
> 'build_alias=i486-linux-gnu' 'CFLAGS=-g -O2 -g -Wall -O2'
> 'LDFLAGS=-Wl,-Bsymbolic-functions' 'CPPFLAGS=' 'CXXFLAGS=-g -O2 -g -Wall
> -O2' 'FFLAGS=-g -O2'
> 
> Could someone please run that website through their version of squid for
> me and let me know if this is a squid issue, a website issue or a bug in
> the ubuntu packaged version of squid.
> 
> Cheers,
> 
> Seb
> 
> 
> This email carries a disclaimer, a copy of which may be read at 
> http://learning.longhill.org.uk/disclaimer
> 



smime.p7s
Description: S/MIME Cryptographic Signature