Re: [squid-users] Re: help with config file for OWA 2003 reverse proxy setup - UPDATED Config

On Fri, 18 Mar 2005 00:14:24 +0100 (CET), Henrik Nordstrom
<hno@squid-cache.org> wrote:
>
> You need to view the source of the frame set, not an individual frame.
>
> Regards
> Henrik

Ok, as stated the url of the frame is:
http://testmail.ncmec.org/exchange/MartinBurke/

The newly compiled and patched squid is:

Squid Cache: Version 2.5.STABLE9
configure options: --enable-ssl --with-openssl=/etc/ssl (the path to
ssl on Gentoo)

Config File:
visible_hostname testmail.ncmec.org
https_port 443 cert=/etc/squid/webmail.crt key=/etc/squid/webmail.key
hosts_file /etc/squid/hosts
http_port 127.0.0.1:8080

httpd_accel_host testmail.ncmec.org
httpd_accel_port 80
httpd_accel_uses_host_header off
httpd_accel_single_host on
httpd_accel_with_proxy off
cache_peer 172.25.4.51 parent 80 0 no-query front-end-https=auto login=PASS

acl acl_testmail dstdomain testmail.ncmec.org
http_access allow acl_testmail

acl to_index urlpath_regex /$
acl to_favicon urlpath_regex /favicon.ico$ acl to_exchange
urlpath_regex /exchange http_access allow to_index http_access allow
to_favicon http_access allow to_exchange

acl all src 0.0.0.0/0.0.0.0
header_access Accept-Encoding deny all
never_direct allow all
http_access deny all

The options that I used with 3.0-PRE3 that aren't available in
2.5.STABLE9 are "defaultsite" and "originserver". The httpd_accel_*
options are available in 2.5 and weren't in 3.0.

The cache_access_log entries are:

"GET http://testmail.ncmec.org/exchange/ HTTP/1.1" 401 405
TCP_MISS:FIRST_UP_PARENT
"GET http://testmail.ncmec.org/exchange/ HTTP/1.1" 200 1620
TCP_MISS:FIRST_UP_PARENT

The log entries on the OWA box when coming through squid are:

172.25.4.51 GET /exchange/ - 80 ncmec\mburke 192.168.254.248
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322)
401 2 2148074254
172.25.4.51 GET /exchange/ - 80 ncmec\mburke 192.168.254.248
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322)
200 0 0

The entries when directly access the OWA box (no squid) are (this log
is 443, but it accepts connections on 80 as well and they appear as 80
in the log):

2005-03-18 00:53:16 172.25.4.51 GET /exchange/ - 443 - 100.1.9.221
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322)
401 2 2148074254
2005-03-18 00:53:32 172.25.4.51 GET /exchange/ - 443 ncmec\mburke
100.1.9.221 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322)
200 0 0
2005-03-18 00:53:32 172.25.4.51 GET /exchange/MartinBurke/ Cmd=navbar
443 ncmec\mburke 100.1.9.221
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322)
200 0 0
2005-03-18 00:53:32 172.25.4.51 GET /exchange/MartinBurke/Inbox/
Cmd=contents 443 ncmec\mburke 100.1.9.221
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322)
200 0 0
2005-03-18 00:53:34 172.25.4.51 GET
/exchweb/6.5.7226.0/controls/tf_Messages.xsl - 443 - 100.1.9.221
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322)
200 0 0
2005-03-18 00:53:34 172.25.4.51 SEARCH /exchange/MartinBurke/Inbox/ -
443 ncmec\mburke 100.1.9.221
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322)
207 0 0
2005-03-18 00:53:35 172.25.4.51 SUBSCRIBE
/exchange/MartinBurke/Calendar - 443 ncmec\mburke 100.1.9.221
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322)
200 0 0

Thanks again,

Martin Burke
National Center for Missing & Exploited Children
699 Prince St
Alexandria, VA 22314
Received on Thu Mar 17 2005 - 18:19:28 MST