> Squid´s access log shows this:
>
> 1124403238.616590 10.x.x.x TCP_DENIED/403 310 HEAD
> http://www.download.windowsupdate.com/msdownload/update/v3-19990518/cabpool/ndp1.1sp1-kb867460-x86_74a5b25d65a70b8ecd6a9c301a0aea10d8483a23.exe
> - DIRECT/206.24.192.222 text/html
>
> Does anyone know what
Hi,
I am facing the following problem with Windows Update ... It works
nice with squid until it has to download any file ... At this point
the windows update client sends a "HEAD" method to the site, and it
gets Denied by squid ...
I have already declared an acl for the HEAD method and allowed th
On Wed, 17 Aug 2005, Lasse [iso-8859-1] Mørk wrote:
Argh. I think it works now :)
It still prompts, but only just before showing the update list. hm. weird.
But anyway, it seems like it runs pretty good damn faster.
Thanks. Old you big one.
This happened to me as well. When I reviewed the lo
Argh. I think it works now :)
It still prompts, but only just before showing the update list. hm. weird.
But anyway, it seems like it runs pretty good damn faster.
Thanks. Old you big one.
>> acl win1 dstdomain http://*.update.microsoft.com
>
> No, protocol shouldn't be in a dstdomain acl. The co
> acl win1 dstdomain http://*.update.microsoft.com
No, protocol shouldn't be in a dstdomain acl. The correct acl is:
acl win1 dstdomain .update.microsoft.com
If you want the protocol too you need the 'proto' acl type.
Joost
]
Enviada em: terça-feira, 16 de agosto de 2005 10:31
Para: [EMAIL PROTECTED]
Cc: squid-users@squid-cache.org
Assunto: Re: [squid-users] Windows update hangs
ok. I've putted at the end of squid.conf :(
Then tried to move it up a little.
Now i looks like this:
--snip--
acl WIN1 dstdomain
Lasse Mørk said:
> ok. I've putted at the end of squid.conf :(
> Then tried to move it up a little.
>
> Now i looks like this:
> --snip--
>
> acl WIN1 dstdomain http://*.update.microsoft.com
acl WIN1 dstdomain .update.microsoft.com
Joost
On Tue, 2005-08-16 at 15:31 +0200, Lasse Mørk wrote:
> ok. I've putted at the end of squid.conf :(
> Then tried to move it up a little.
>
> Now i looks like this:
> --snip--
>
> acl WIN1 dstdomain http://*.update.microsoft.com
> acl WIN2 dstdomain http://*.windowsupdate.microsoft.com
> acl WIN3
ok. I've putted at the end of squid.conf :(
Then tried to move it up a little.
Now i looks like this:
--snip--
acl WIN1 dstdomain http://*.update.microsoft.com
acl WIN2 dstdomain http://*.windowsupdate.microsoft.com
acl WIN3 dstdomain http://download.windowsupdate.com
acl WIN4 dstdomain https://*
>> That's the wrong options if you are doing the authentication locally.
>> always_direct is for bypassing parent proxies.
>> I think what you want to do is to use "http_access allow WIN1" (and so
>> on) as seperate ACLs to your main one that allows your clients to
>> access. Of course, as always,
rosoft.com
Graeme
-Original Message-
From: Aaron McDonnell [mailto:[EMAIL PROTECTED]
Sent: 15 August 2005 16:12
To: [EMAIL PROTECTED]
Cc: Sunil S; squid-users@squid-cache.org
Subject: Re: [squid-users] Windows update hangs
Try adding download.windowsupdate.com. If you do a TCPDUMP you
Try adding download.windowsupdate.com. If you do a TCPDUMP you'll see it
accesses that one as well.
Aaron
Lasse Mørk wrote:
Might be an option...
How do I do that?
I have tried
acl WIN1 dstdomain update.microsoft.com
acl WIN2 dstdomain windowsupdate.microsoft.com
acl WIN3 dstdomain download.
That did'n work. It still prompts for user and password :(
> That's the wrong options if you are doing the authentication locally.
> always_direct is for bypassing parent proxies.
> I think what you want to do is to use "http_access allow WIN1" (and so
> on) as seperate ACLs to your main one that
That's the wrong options if you are doing the authentication locally.
always_direct is for bypassing parent proxies.
I think what you want to do is to use "http_access allow WIN1" (and so
on) as seperate ACLs to your main one that allows your clients to
access. Of course, as always, I could be w
Might be an option...
How do I do that?
I have tried
acl WIN1 dstdomain update.microsoft.com
acl WIN2 dstdomain windowsupdate.microsoft.com
acl WIN3 dstdomain download.microsoft.com
always_direct allow WIN1
always_direct allow WIN2
always_direct allow WIN3
But it still prompts for auth.
>
> Ar
Are you getting your users to authenticate when they connect?
Windows update looks like is not capable of working well with authenticating
proxies. If you exclude URLs used by Windows updates from authenticating, it
will go through.
Look at access.log to see the URLs used by Windows Updates.
he Nachricht-
Von: Lasse Mørk [mailto:[EMAIL PROTECTED]
Gesendet: Donnerstag, 11. August 2005 15:22
An: squid-users@squid-cache.org
Cc: Aaron McDonnell
Betreff: Re: [squid-users] Windows update hangs
Hi Aaron
The squid is not running as a transperent proxy, and we have manually set
the proxy s
happen too early in the day
> >
> >
> >
> >
> > -----Ursprüngliche Nachricht-
> > Von: Lasse Mørk [mailto:[EMAIL PROTECTED]
> > Gesendet: Donnerstag, 11. August 2005 15:22
> > An: squid-users@squid-cache.org
> > Cc: Aaron McDonnell
> > Bet
lekom
> ++
> The only problem with mornings is that they happen too early in the day
>
>
>
>
> -Ursprüngliche Nachricht-
> Von: Lasse Mørk [mailto:[EMAIL PROTECTED]
> Gesendet: Donnerstag, 11. August 2005
--Ursprüngliche Nachricht-
Von: Lasse Mørk [mailto:[EMAIL PROTECTED]
Gesendet: Donnerstag, 11. August 2005 15:22
An: squid-users@squid-cache.org
Cc: Aaron McDonnell
Betreff: Re: [squid-users] Windows update hangs
Hi Aaron
The squid is not running as a transperent proxy, and we have manually
PROTECTED]
Gesendet: Donnerstag, 11. August 2005 15:22
An: squid-users@squid-cache.org
Cc: Aaron McDonnell
Betreff: Re: [squid-users] Windows update hangs
Hi Aaron
The squid is not running as a transperent proxy, and we have manually set the
proxy settings in I-Explore.
It works though, but
Hi Aaron
The squid is not running as a transperent proxy, and we have manually set
the proxy settings in I-Explore.
It works though, but takes 30min - 1hour or so to connect. And forever to
download the updates. :(
> Hi Lasse
>
> It could be related to the problem I'm having, depending on how y
Hi Lasse
It could be related to the problem I'm having, depending on how your proxy
it set up. I'm trying to build a box to manage the Quarantine network in
our environment and the Windows Update site hangs/fails for me as well. The
problem in my case is that Squid is a transparent proxy, an
Is there anyway to get around this issue?
It just stalls now where it looks for latest updates.
Maybe without caching the windows update files?
I am getting kinda desperate!
> Hmm.. Dosn't seem to help :(
>
> It still lacks and run terrible slow.
>
>> On 8/11/05, Lasse Mørk <[EMAIL PROTECTED]>
Hmm.. Dosn't seem to help :(
It still lacks and run terrible slow.
> On 8/11/05, Lasse Mørk <[EMAIL PROTECTED]> wrote:
>> Hey all
>>
>> squid 2.5.9-10 running debian.
>>
>> Does anyone knows what to do, when windows update hangs ?
>> Sometime it just stalls, but now and then it works, although it
On 8/11/05, Lasse Mørk <[EMAIL PROTECTED]> wrote:
> Hey all
>
> squid 2.5.9-10 running debian.
>
> Does anyone knows what to do, when windows update hangs ?
> Sometime it just stalls, but now and then it works, although it is got
> damn slow :(
>
> Including that, it prompts for user and passwor
Hey all
squid 2.5.9-10 running debian.
Does anyone knows what to do, when windows update hangs ?
Sometime it just stalls, but now and then it works, although it is got
damn slow :(
Including that, it prompts for user and passwords just before it checks
for updates, I belive it is?
Any solution
27 matches
Mail list logo
