RE: [squid-users] proxy server ith local addresses (Part 2)

From: stevepalmer <[email protected]>
Date: Tue, 23 Mar 2004 14:59:45 -0000

I've just attempted it with lynx which has no proxy specified for it, and that gets access to the internal addresses correctly. There are no firewalls involved either.

I spotted the cache_peer_domain rule in there for altering caching behavour. Adding proxy2.embc.org.uk !.nbcs.net doesnt appear to have any affect on it however. I already have an always_direct acl in place for the domain anyway.

I've noticed that on an unproxyed browser on one of the windows clients, entering email.nbcs.net rather than just email results in a request for user/pass which it should not do. Furthermore intranet.nbcs.net gives me an Under Construction page. After typing http://xxxxx on a proxied browser the failed screen always resolves it to xxxx.nbcs.net. I hope there is a way to prevent that if i manage to get to work correctly as is?

-----Original Message-----
From: Henrik Nordstrom [mailto:hno@squid-cache.org]
Sent: Mon 3/22/2004 5:46 PM
To: stevepalmer
Cc: Henrik Nordstrom
Subject: RE: [squid-users] proxy server ith local addresses (Part 2)

On Mon, 22 Mar 2004, stevepalmer wrote:

> assumedly i need to enter .nbcs.net correct?

If this is your internal domain and you want users to be able to access
internal servers by short name then yes.

> Well the result of this is a long day with a resulting "110 Connection
> timed out" error while attempting to access
> http://email.nbcs.net/exchange. Pings to both email & email.nbcs.net on
> the squid box both go to the correct internal ip address btw.

Good.

Make sure there is no firewalling which prevents the Squid server from
going to port 80/443 on those servers.

In addition, if your Squid has parents, make sure it must always go direct
for the local domain(s).

One simple method to verify connectivityu is to try to use a browser
without proxy settings on the Squid server.

Regards
Henrik

This message is confidential. You should not copy it or disclose its contents to anyone. You may use and apply the information only for the intended purpose. Internet communications are not secure and therefore Noel-Baker Community School does not accept legal responsibility for the contents of this message. Any views or opinions presented are only those of the author and not those of Noel-Baker Community School. If this email has come to you in error please delete it and any attachments. Please note that Noel-Baker Community School may intercept incoming and outgoing e-mail communications.
Received on Tue Mar 23 2004 - 08:04:00 MST

This archive was generated by hypermail pre-2.1.9 : Thu Apr 01 2004 - 12:00:02 MST