Re: [squid-users] error in opening google.com in firefox
On Mon, Jun 11, 2012 at 11:32 AM, Amos Jeffries wrote: > On 11/06/2012 6:11 p.m., Muhammad Yousuf Khan wrote: >> >> On Sun, Jun 10, 2012 at 10:54 PM, Eliezer Croitoru >> wrote: >>> >>> proxy is uses as a server to client that is aware of it. >>> this is what called forward proxy. >>> you define in the browserthe proxy address and port then use it. >>> to work with that you define in squid.conf the line: >>> http_port 3128 >>> or any other port. >>> if you want to "intercept" the clients connections so the proxy will >>> always >>> work on their traffic you must use another argument: >>> http_port 3128 intercept >> >> i just learn that "intercept" is a new name of "transparent" however i >> can not use transparent since i want to block https domains in working >> hours which is not possible in transparent. since squid is working >> only on http traffic. correct me if i am wrong since i am new? > > >>> some more info about it you can find here: >>> http://www.squid-cache.org/Doc/config/http_port/ >>> >>> are you using linux? >>> if so did you configure any iptables rules for squid to work? >> >> yes i am using linux. do you mean that i should redirect 3128 traffice >> to port 80 via iptables and squid will be listening on port 80. is >> this what you mean? > > > He was asking if you have "transparent interception proxy" setup. You said > no. sorry for my weak english. i understood it wrong. > > IE is apparently not working properly. When configured with a proxy it > should be passing HTTP to the proxy in proxy format. It is passing HTTP to > the proxy in a different format which is only safely used on port 80. > > In particular the format sent lacks the "http://"; part of URL and Squid is > unable to determine whether it is an HTTP, HTTPS, FTP, Gopher or some other > internal request. > you were right. restart of the system resolves the issue. i believe it was an application layer issue. it has nothing to do with squid. Thanks, > > Amos
Re: [squid-users] error in opening google.com in firefox
On 11/06/2012 6:11 p.m., Muhammad Yousuf Khan wrote: On Sun, Jun 10, 2012 at 10:54 PM, Eliezer Croitoru wrote: proxy is uses as a server to client that is aware of it. this is what called forward proxy. you define in the browserthe proxy address and port then use it. to work with that you define in squid.conf the line: http_port 3128 or any other port. if you want to "intercept" the clients connections so the proxy will always work on their traffic you must use another argument: http_port 3128 intercept i just learn that "intercept" is a new name of "transparent" however i can not use transparent since i want to block https domains in working hours which is not possible in transparent. since squid is working only on http traffic. correct me if i am wrong since i am new? some more info about it you can find here: http://www.squid-cache.org/Doc/config/http_port/ are you using linux? if so did you configure any iptables rules for squid to work? yes i am using linux. do you mean that i should redirect 3128 traffice to port 80 via iptables and squid will be listening on port 80. is this what you mean? He was asking if you have "transparent interception proxy" setup. You said no. IE is apparently not working properly. When configured with a proxy it should be passing HTTP to the proxy in proxy format. It is passing HTTP to the proxy in a different format which is only safely used on port 80. In particular the format sent lacks the "http://"; part of URL and Squid is unable to determine whether it is an HTTP, HTTPS, FTP, Gopher or some other internal request. Amos
Re: [squid-users] error in opening google.com in firefox
On Sun, Jun 10, 2012 at 10:54 PM, Eliezer Croitoru wrote: > proxy is uses as a server to client that is aware of it. > this is what called forward proxy. > you define in the browserthe proxy address and port then use it. > to work with that you define in squid.conf the line: > http_port 3128 > or any other port. > if you want to "intercept" the clients connections so the proxy will always > work on their traffic you must use another argument: > http_port 3128 intercept i just learn that "intercept" is a new name of "transparent" however i can not use transparent since i want to block https domains in working hours which is not possible in transparent. since squid is working only on http traffic. correct me if i am wrong since i am new? > > some more info about it you can find here: > http://www.squid-cache.org/Doc/config/http_port/ > > are you using linux? > if so did you configure any iptables rules for squid to work? yes i am using linux. do you mean that i should redirect 3128 traffice to port 80 via iptables and squid will be listening on port 80. is this what you mean? Thanks > > Eliezer > > > On 10/06/2012 16:52, Muhammad Yousuf Khan wrote: >> >> sorry i know very basic squid >> would you please explain it a bit more. >> i am using squid in proxy mode (not transparent) >> squid port is 3128. i didnt change it to 80 or 8080 >> >> moreover this error is showed up on firefox however working normal >> with explorer and it is happening only in my PC for all other clients >> its working fine. >> >> furthermore Squid was working fine since 6 months this error has >> occurs very recently. >> >> On Sat, Jun 9, 2012 at 10:42 AM, Amos Jeffries >> wrote: >>> >>> On 8/06/2012 3:32 a.m., Muhammad Yousuf Khan wrote: i am receiving this error via firfox but working good in explorer. this is what i am getting in access.log. TCP_DENIED/400 2022 GET NONE:// - NONE/- text/html and this is the exact error that i am getting on firefox. ERROR The requested URL could not be retrieved Invalid Request error was encountered while trying to process the request: GET / HTTP/1.1 Host: www.google.com.pk X-VMN-URL: http://partner37.mydomainadvisor.com/search.php?pr=blekko&id=blekkotb_031_tb&v=1_0_1_34&ent=antiphishing_dn&q=www.google.com.pk >>> >>> >>> >>> This looks like you are sending port 80 traffic to a forward proxy >>> listening >>> port. Client->proxy traffic in HTTP has a very different syntax to >>> client->server traffic. The way Squid identifies how to handle the >>> traffic >>> is by the traffic "mode" flag you set on the http_port. >>> >>> Amos > > > > -- > Eliezer Croitoru > https://www1.ngtech.co.il > IT consulting for Nonprofit organizations > eliezer ngtech.co.il
Re: [squid-users] error in opening google.com in firefox
proxy is uses as a server to client that is aware of it. this is what called forward proxy. you define in the browserthe proxy address and port then use it. to work with that you define in squid.conf the line: http_port 3128 or any other port. if you want to "intercept" the clients connections so the proxy will always work on their traffic you must use another argument: http_port 3128 intercept some more info about it you can find here: http://www.squid-cache.org/Doc/config/http_port/ are you using linux? if so did you configure any iptables rules for squid to work? Eliezer On 10/06/2012 16:52, Muhammad Yousuf Khan wrote: sorry i know very basic squid would you please explain it a bit more. i am using squid in proxy mode (not transparent) squid port is 3128. i didnt change it to 80 or 8080 moreover this error is showed up on firefox however working normal with explorer and it is happening only in my PC for all other clients its working fine. furthermore Squid was working fine since 6 months this error has occurs very recently. On Sat, Jun 9, 2012 at 10:42 AM, Amos Jeffries wrote: On 8/06/2012 3:32 a.m., Muhammad Yousuf Khan wrote: i am receiving this error via firfox but working good in explorer. this is what i am getting in access.log. TCP_DENIED/400 2022 GET NONE:// - NONE/- text/html and this is the exact error that i am getting on firefox. ERROR The requested URL could not be retrieved Invalid Request error was encountered while trying to process the request: GET / HTTP/1.1 Host: www.google.com.pk X-VMN-URL: http://partner37.mydomainadvisor.com/search.php?pr=blekko&id=blekkotb_031_tb&v=1_0_1_34&ent=antiphishing_dn&q=www.google.com.pk This looks like you are sending port 80 traffic to a forward proxy listening port. Client->proxy traffic in HTTP has a very different syntax to client->server traffic. The way Squid identifies how to handle the traffic is by the traffic "mode" flag you set on the http_port. Amos -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer ngtech.co.il
Re: [squid-users] error in opening google.com in firefox
sorry i know very basic squid would you please explain it a bit more. i am using squid in proxy mode (not transparent) squid port is 3128. i didnt change it to 80 or 8080 moreover this error is showed up on firefox however working normal with explorer and it is happening only in my PC for all other clients its working fine. furthermore Squid was working fine since 6 months this error has occurs very recently. On Sat, Jun 9, 2012 at 10:42 AM, Amos Jeffries wrote: > On 8/06/2012 3:32 a.m., Muhammad Yousuf Khan wrote: >> >> i am receiving this error via firfox but working good in explorer. >> >> this is what i am getting in access.log. >> >> TCP_DENIED/400 2022 GET NONE:// - NONE/- text/html >> >> >> >> and this is the exact error that i am getting on firefox. >> >> ERROR >> The requested URL could not be retrieved >> >> Invalid Request error was encountered while trying to process the request: >> >> GET / HTTP/1.1 >> Host: www.google.com.pk >> X-VMN-URL: >> http://partner37.mydomainadvisor.com/search.php?pr=blekko&id=blekkotb_031_tb&v=1_0_1_34&ent=antiphishing_dn&q=www.google.com.pk > > > This looks like you are sending port 80 traffic to a forward proxy listening > port. Client->proxy traffic in HTTP has a very different syntax to > client->server traffic. The way Squid identifies how to handle the traffic > is by the traffic "mode" flag you set on the http_port. > > Amos
Re: [squid-users] error in opening google.com in firefox
On 8/06/2012 3:32 a.m., Muhammad Yousuf Khan wrote: i am receiving this error via firfox but working good in explorer. this is what i am getting in access.log. TCP_DENIED/400 2022 GET NONE:// - NONE/- text/html and this is the exact error that i am getting on firefox. ERROR The requested URL could not be retrieved Invalid Request error was encountered while trying to process the request: GET / HTTP/1.1 Host: www.google.com.pk X-VMN-URL: http://partner37.mydomainadvisor.com/search.php?pr=blekko&id=blekkotb_031_tb&v=1_0_1_34&ent=antiphishing_dn&q=www.google.com.pk This looks like you are sending port 80 traffic to a forward proxy listening port. Client->proxy traffic in HTTP has a very different syntax to client->server traffic. The way Squid identifies how to handle the traffic is by the traffic "mode" flag you set on the http_port. Amos
