RE: too many TCP_DENIED messages ...

> -----Original Message-----
> From: Michael Dean [mailto:Michael.Dean@detir.qld.gov.au]
>
> On Wed, 12 May 1999 nagy_l@vaxst2.tii.matav.hu wrote:
>
> > Hi!
> >
> > We use an ldap authentication with squid 2.1.patch2.
> >
> > when we analyse the access.log then too many the TCP_DENIED
> messages in the log
> > file.
> >
> > Some wrong urls :
> >
> > http://channels.real.com/getlatest.glh?
>
> we had 93000 hits thru our squid proxy yesterday and 2700 of
> those were
> TCP_DENIED to this URL. Does anybody know what is causing this?? The
> TCP_DENIED's seem to be happening when people turn on their PC's. Some
> Microsoft thing???

It is a RealPlayer G2 thing (and it might be some other versions of
RealPlayer as well). It doesn't understand proxy authentication. When we
first turned on proxy auth after running for over a year without it, we had
tons of these requests, one a minute from a bunch of different hosts, in
fact. People who had installed RealPlayer G2 prior to our instituting proxy
auth kept sending this, but those who installed it afterwards didn't. The
solution was to track each user down and get them to turn off the updating
of Channels in the Content section of their preferences.

Mike
Received on Thu May 13 1999 - 18:29:25 MDT