RE: [squid-users] Problem accessing a particular site through squid
-Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: 15 September 2010 15:21 To: squid-users@squid-cache.org Subject: Re: [squid-users] Problem accessing a particular site through squid On 15/09/10 23:24, Seb Harrington wrote: > > Hi everyone, > > I have a problem when accessing http://smallsteps4life.direct.gov.uk/ > through squid. > > When accessing the site directly the site is properly formatted, when > accessing through squid the site appears 'unformatted', some of the > images do not load and it looks as if the CSS has not been applied. > > I thought this behaviour was a little strange so I've tested it on two > more instances of squid, one a default fresh install allowing > everything through (the all acl). > > When accessing the site these are the logs: > access.log: http://pastebin.com/HtkyfjUJ > store.log: http://pastebin.com/0NjnDZzW > cache.log: did not output anything useful or informative. > > I'm using the ubuntu version of squid3 (apt-get squid3) and I'm using > ubuntu 10.04 Lucid Lynx. > > Squid version: Squid Cache: Version 3.0.STABLE19 Could someone >please run that website through their version of squid for me and let >me know if this is a squid issue, a website issue or a bug in the >ubuntu packaged version of squid. > > Cheers, > > Seb > Hi Amos, Thanks for the reply, >That trace from the "working" squid? There is zero CSS in it. Just >JavaScript files that generate page content on the fly. Most of the content seems to be going through HTTPS which passes straight through Squid. That was the trace from squid fresh installed from apt-get in ubuntu. I wanted to try a fresh installation so I prove that it was / was not squid causing the website to display incorrectly. It is showing the same behaviour as the production squid proxy. > The all ACL working where regular config catches only some occasional > files makes me think either those files are on a domain being blocked, or you have regex patterns that are catching more than you are aware of. The squid conf as being used on the fresh installed squid is here: http://pastebin.com/5QTAL2px All I've changed is I've uncommented the acl all src all on line # 578 and changed http_access allow all on line # 629. I have made no other modifications, and the site still displays incorrectly. Any other ideas? That is a very valid point about the CSS, I've looked at the source of the webpage and all CSS/JS seems to come from the same domian and subdomian, but it is weired that the CSS isn't coming through the in the logs. Cheers, Seb This email carries a disclaimer, a copy of which may be read at http://learning.longhill.org.uk/disclaimer
RE: [squid-users] Problem accessing a particular site through squid
Is your squid configured to advertise that it is a proxy to the sites it connects to? - Chad E. Naugle Tech Support II, x. 7981 Travel Impressions, Ltd. >>> "Seb Harrington" 9/16/2010 6:15 AM >>> Hi DaniL, Thanks for your reply. >Do you have content filter installed on your machine? On the production squid server we run dansguradian as a content filter, but on the other two servers I have installed squid3 onto (to check if DG or squid was at fault) it was just squid and the problem with the site remained. Cheers, Seb This email carries a disclaimer, a copy of which may be read at http://learning.longhill.org.uk/disclaimer Travel Impressions made the following annotations - "This message and any attachments are solely for the intended recipient and may contain confidential or privileged information. If you are not the intended recipient, any disclosure, copying, use, or distribution of the information included in this message and any attachments is prohibited. If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments. Thank you."
RE: [squid-users] Problem accessing a particular site through squid
Hi DaniL, Thanks for your reply. >Do you have content filter installed on your machine? On the production squid server we run dansguradian as a content filter, but on the other two servers I have installed squid3 onto (to check if DG or squid was at fault) it was just squid and the problem with the site remained. Cheers, Seb This email carries a disclaimer, a copy of which may be read at http://learning.longhill.org.uk/disclaimer
Re: [squid-users] Problem accessing a particular site through squid
I had very similar problem. My problem was that CSS and javascript files were not loading. after looking to it closer, I find out that it was due to content filter (dansguardian). CSS and javascript files were on different domain, which was blocked. Do you have content filter installed on your machine? -- DaniL
[squid-users] RE: EXTERNAL: Re: [squid-users] Problem accessing a particular site through squid
I just tried it on my Ubuntu 10.04 running the std repo squid 3.0.STABLE19-1. I see the same behavior, running Google Chrome (nightly experimental build). Interestingly, through Squid, it hangs trying to retrieve something from http://directgov.stcllctrs.com ... which is in a block. So something is causing Chrome to think it should execute noscripts (?) The only other thing I notice is that your certificate is invalid for SSL to the smallsteps4life.direct.gov.uk ... the server name is a wildcarded *.workingwithprofero.com. Don't think that should be affecting Squid though. When I save the html source before/after squid, they have a huge amount of difference ... oh, interesting, the noscript isn't correct, it's <noscript> instead of correctly using <> chars. That explains why chrome is trying to retrieve the URL. I dunno ... nothing jumps out at me. -Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Wednesday, September 15, 2010 10:21 AM To: squid-users@squid-cache.org Subject: EXTERNAL: Re: [squid-users] Problem accessing a particular site through squid On 15/09/10 23:24, Seb Harrington wrote: > > Hi everyone, > > I have a problem when accessing http://smallsteps4life.direct.gov.uk/ > through squid. > > When accessing the site directly the site is properly formatted, when > accessing through squid the site appears 'unformatted', some of the > images do not load and it looks as if the CSS has not been applied. > > I thought this behaviour was a little strange so I've tested it on two > more instances of squid, one a default fresh install allowing everything > through (the all acl). > > When accessing the site these are the logs: > access.log: http://pastebin.com/HtkyfjUJ > store.log: http://pastebin.com/0NjnDZzW > cache.log: did not output anything useful or informative. > > I'm using the ubuntu version of squid3 (apt-get squid3) and I'm using > ubuntu 10.04 Lucid Lynx. > > Squid version: Squid Cache: Version 3.0.STABLE19 > > Could someone please run that website through their version of squid for > me and let me know if this is a squid issue, a website issue or a bug in > the ubuntu packaged version of squid. > > Cheers, > > Seb > That trace from the "working" squid? There is zero CSS in it. Just JavaScript files that generate page content on the fly. Most of the content seems to be going through HTTPS which passes straight through Squid. The all ACL working where regular config catches only some occasional files makes me think either those files are on a domain being blocked, or you have regex patterns that are catching more than you are aware of. Amos -- Please be using Current Stable Squid 2.7.STABLE9 or 3.1.8 Beta testers wanted for 3.2.0.2
Re: [squid-users] Problem accessing a particular site through squid
On 09/15/2010 08:45 AM, Seb Harrington wrote: > >> did check it with SQUID3.1.8 on FreeBSD, and have no problems > whatsoever. > > Thankyou. > > Is there anyone else on the list using squid3 as packaged by ubuntu that > could also test the site for me? > > Thanks, > > Seb > > > This email carries a disclaimer, a copy of which may be read at > http://learning.longhill.org.uk/disclaimer I'm on my Ubuntu machine right now, if you want to send me a direct email with the problem you were having I can use my local squid install to check it out.
Re: [squid-users] Problem accessing a particular site through squid
On 15/09/10 23:24, Seb Harrington wrote: Hi everyone, I have a problem when accessing http://smallsteps4life.direct.gov.uk/ through squid. When accessing the site directly the site is properly formatted, when accessing through squid the site appears 'unformatted', some of the images do not load and it looks as if the CSS has not been applied. I thought this behaviour was a little strange so I've tested it on two more instances of squid, one a default fresh install allowing everything through (the all acl). When accessing the site these are the logs: access.log: http://pastebin.com/HtkyfjUJ store.log: http://pastebin.com/0NjnDZzW cache.log: did not output anything useful or informative. I'm using the ubuntu version of squid3 (apt-get squid3) and I'm using ubuntu 10.04 Lucid Lynx. Squid version: Squid Cache: Version 3.0.STABLE19 Could someone please run that website through their version of squid for me and let me know if this is a squid issue, a website issue or a bug in the ubuntu packaged version of squid. Cheers, Seb That trace from the "working" squid? There is zero CSS in it. Just JavaScript files that generate page content on the fly. Most of the content seems to be going through HTTPS which passes straight through Squid. The all ACL working where regular config catches only some occasional files makes me think either those files are on a domain being blocked, or you have regex patterns that are catching more than you are aware of. Amos -- Please be using Current Stable Squid 2.7.STABLE9 or 3.1.8 Beta testers wanted for 3.2.0.2
RE: [squid-users] Problem accessing a particular site through squid
> did check it with SQUID3.1.8 on FreeBSD, and have no problems whatsoever. Thankyou. Is there anyone else on the list using squid3 as packaged by ubuntu that could also test the site for me? Thanks, Seb This email carries a disclaimer, a copy of which may be read at http://learning.longhill.org.uk/disclaimer
Re: [squid-users] Problem accessing a particular site through squid
On 15/09/10 23:24, Seb Harrington wrote: Hi everyone, I have a problem when accessing http://smallsteps4life.direct.gov.uk/ through squid. When accessing the site directly the site is properly formatted, when accessing through squid the site appears 'unformatted', some of the images do not load and it looks as if the CSS has not been applied. I thought this behaviour was a little strange so I've tested it on two more instances of squid, one a default fresh install allowing everything through (the all acl). When accessing the site these are the logs: access.log: http://pastebin.com/HtkyfjUJ store.log: http://pastebin.com/0NjnDZzW cache.log: did not output anything useful or informative. I'm using the ubuntu version of squid3 (apt-get squid3) and I'm using ubuntu 10.04 Lucid Lynx. Squid version: Squid Cache: Version 3.0.STABLE19 You may find a backport of 3.1 useful: https://launchpad.net/~yadi/+archive/ppa Amos -- Please be using Current Stable Squid 2.7.STABLE9 or 3.1.8 Beta testers wanted for 3.2.0.2
Re: [squid-users] Problem accessing a particular site through squid
Hi, did check it with SQUID3.1.8 on FreeBSD, and have no problems whatsoever. HTH, Thanks and regards Goetz R. Schultz "I intend to live forever - so far, so good." === Verify the GnuPG-Sig at www.goetz.co.uk Get the rootcertificate at www.cacert.org === /"\ \ /ASCII Ribbon Campaign X against HTML e-mail / \ "Si forte in alienas manus oberraverit hec peregrina epistola incertis ventis dimissa, sed Deo commendata, precamur ut ei reddatur cui soli destinata, nec preripiat quisquam non sibi parata." On 15/09/2010 12:24, Seb Harrington wrote: > > Hi everyone, > > I have a problem when accessing http://smallsteps4life.direct.gov.uk/ > through squid. > > When accessing the site directly the site is properly formatted, when > accessing through squid the site appears 'unformatted', some of the > images do not load and it looks as if the CSS has not been applied. > > I thought this behaviour was a little strange so I've tested it on two > more instances of squid, one a default fresh install allowing everything > through (the all acl). > > When accessing the site these are the logs: > access.log: http://pastebin.com/HtkyfjUJ > store.log: http://pastebin.com/0NjnDZzW > cache.log: did not output anything useful or informative. > > I'm using the ubuntu version of squid3 (apt-get squid3) and I'm using > ubuntu 10.04 Lucid Lynx. > > Squid version: Squid Cache: Version 3.0.STABLE19 > configure options: '--build=i486-linux-gnu' '--prefix=/usr' > '--includedir=${prefix}/include' '--mandir=${prefix}/share/man' > '--infodir=${prefix}/share/info' '--sysconfdir=/etc' > '--localstatedir=/var' '--libexecdir=${prefix}/lib/squid3' > '--disable-maintainer-mode' '--disable-dependency-tracking' > '--disable-silent-rules' '--srcdir=.' '--datadir=/usr/share/squid3' > '--sysconfdir=/etc/squid3' '--mandir=/usr/share/man' > '--with-cppunit-basedir=/usr' '--enable-inline' '--enable-async-io=8' > '--enable-storeio=ufs,aufs,diskd,null' > '--enable-removal-policies=lru,heap' '--enable-delay-pools' > '--enable-cache-digests' '--enable-underscores' '--enable-icap-client' > '--enable-follow-x-forwarded-for' > '--enable-auth=basic,digest,ntlm,negotiate' > '--enable-basic-auth-helpers=LDAP,MSNT,NCSA,PAM,SASL,SMB,YP,getpwnam,mul > ti-domain-NTLM' '--enable-ntlm-auth-helpers=SMB' > '--enable-digest-auth-helpers=ldap,password' > '--enable-negotiate-auth-helpers=squid_kerb_auth' > '--enable-external-acl-helpers=ip_user,ldap_group,session,unix_group,wbi > nfo_group' '--enable-arp-acl' '--enable-snmp' > '--with-filedescriptors=65536' '--with-large-files' > '--with-default-user=proxy' '--enable-epoll' '--enable-linux-netfilter' > 'build_alias=i486-linux-gnu' 'CFLAGS=-g -O2 -g -Wall -O2' > 'LDFLAGS=-Wl,-Bsymbolic-functions' 'CPPFLAGS=' 'CXXFLAGS=-g -O2 -g -Wall > -O2' 'FFLAGS=-g -O2' > > Could someone please run that website through their version of squid for > me and let me know if this is a squid issue, a website issue or a bug in > the ubuntu packaged version of squid. > > Cheers, > > Seb > > > This email carries a disclaimer, a copy of which may be read at > http://learning.longhill.org.uk/disclaimer > smime.p7s Description: S/MIME Cryptographic Signature