Re: [squid-users] Problem with viewing http://wiki.mozilla-russia.org

Alex Gau wrote:
> Amos Jeffries пишет:
>> Alex Gau wrote:
>>> Hello,
>>> we use squid3.0 stable4 on SLES10.
>>> It was compiled with followed parameters:
>>>
>>>
>>> ./configure --prefix=/usr/local/squid3 --enable-icap-client
>>> --enable-default-err-language=Russian-1251
>>> --enable-err-languages="Russian-1251 Russian-koi8-r"
>>> --enable-linux-netfilter --disable-ident-lookups
>>> --with-default-user=drweb
>>>
>>>
>>> When we try to view URL http://wiki.mozilla-russia.org through the
>>> proxy, we receive error message.
>>>
>>> We enter squid in debug mode and receive followed messages:
>>>
>>>
>>> 1208927537.022 505 xxx.xxx.xxx.xxx TCP_MISS/302 14865 GET
>>> http://wiki.mozilla-russia.org/ - DIRECT/195.18.35.94
>>> application/xhtml+xml [Host: wiki.mozilla-russia.org\r\nUser-Agent:
>>> Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.8.1.12)
>>> Gecko/20080201 Firefox/2.0.0.12\r\nAccept:
>>> text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\nAccept-Language:
>>> ru-ru,ru;q=0.8,en-us;q=0.5,en;q=0.3\r\nAccept-Encoding:
>>> gzip,deflate\r\nAccept-Charset:
>>> windows-1251,utf-8;q=0.7,*;q=0.7\r\nKeep-Alive:
>>> 300\r\nProxy-Connection: keep-alive\r\n] [HTTP/1.1 302 Moved
>>> Temporarily\r\nServer: nginx/0.6.29\r\nDate: Wed, 23 Apr 2008
>>> 06:15:12 GMT\r\nContent-Type: application/xhtml+xml;
>>> charset=UTF-8\r\nConnection: close\r\nX-Powered-By:
>>> PHP/4.4.7\r\nSet-Cookie: PHPSESSID=3118ffe35f83d8e5b71612b1752c3a92;
>>> path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control:
>>> no-store, no-cache, must-revalidate, post-check=0,
>>> pre-check=0\r\nPragma: no-cache\r\nLocation:
>>> http://aaa.bbb.ccc.ddd/index.php/ru/%25D0%2591%25D0%25B0%25D0%25B7%25D0%25B0%2520%25D0%25B7%25D0%25BD%25D0%25B0%25D0%25BD%25D0%25B8%25D0%25B9%2520%25D0%25BF%25D1%2580%25D0%25BE%25D0%25B5%25D0%25BA%25D1%2582%25D0%25B0%2520Mozilla%2520%25D0%25A0%25D0%25BE%25D1%2581%25D1%2581%25D0%25B8%25D1%258F\r\n\r]
>>>
>>> 1208927537.187 144 xxx.xxx.xxx.xxx TCP_MISS/503 1688 GET
>>> http://aaa.bbb.ccc.ddd/index.php/ru/%D0%91%D0%B0%D0%B7%D0%B0%20%D0%B7%D0%BD%D0%B0%D0%BD%D0%B8%D0%B9%20%D0%BF%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B0%20Mozilla%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D1%8F
>>> - DIRECT/aaa.bbb.ccc.ddd text/html [Host: 77.108.86.4\r\nUser-Agent:
>>> Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.8.1.12)
>>> Gecko/20080201 Firefox/2.0.0.12\r\nAccept:
>>> text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\nAccept-Language:
>>> ru-ru,ru;q=0.8,en-us;q=0.5,en;q=0.3\r\nAccept-Encoding:
>>> gzip,deflate\r\nAccept-Charset:
>>> windows-1251,utf-8;q=0.7,*;q=0.7\r\nKeep-Alive:
>>> 300\r\nProxy-Connection: keep-alive\r\n] [HTTP/1.0 503 Service
>>> Unavailable\r\nServer: squid/3.0.STABLE4\r\nMime-Version:
>>> 1.0\r\nDate: Wed, 23 Apr 2008 05:12:17 GMT\r\nContent-Type:
>>> text/html\r\nContent-Length: 1322\r\nExpires: Wed, 23 Apr 2008
>>> 05:12:17 GMT\r\nX-Squid-Error: ERR_CONNECT_FAIL 111\r\n\r]
>>>
>>>
>>> As you can see squid put IP: aaa.bbb.ccc.ddd (a squid ip address) to
>>> the dynamic link instead of real domain name of the site
>>> (wiki.mozilla-russia.org)
>>>
>>> We don't understand why?
>>> Please, help us to solve this problem.
>>>
>>> Best Regards,
>>>
>>> Alex
>>
>> Not squids fault. The "Server: nginx/0.6.29" is sending a 302 out with
>> bad information.
>>
>> What happening there is:
>>
>> -> First request has domain + URI.
>> <- Squid contacts 195.18.35.94 for data
>>
>> -> 195.18.35.94 (nginx/0.6.29) redirects: 302 http://aaa.bbb.ccc.ddd...
>>
>>
>> -> Second request has aaa.bbb.ccc.ddd + new URI
>> <- Squid contacts aaa.bbb.ccc.ddd for data
>>
>> -> failure.
>>
>> If the server 195.18.35.94 is yours it needs its redirector fixed.
>>
>> Amos
> Hello, Amos.
>
> Thank you for your answer.
>
> The server 195.18.35.94 is not ours. It is http://wiki.mozilla-russia.org.
> We think that the problem in http://wiki.mozilla-russia.org, but we are
> not sure.
>
> I allready understood that 195.18.35.94 redirect the request.
>
> I don't understand why.
>
> In direct request (without squid (aaa.bbb.ccc.ddd)) the server
> 195.18.35.94 (http://wiki.mozilla-russia.org) redirect request to itself:
> http://wiki.mozilla-russia.org/index.php/ru/%D0%91%D0%B0%D0%B7%D0%B0%20%D0%B7%D0%BD%D0%B0%D0%BD%D0%B8%D0%B9%20%D0%BF%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B0%20Mozilla%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D1%8F
> When we use squid it redirect to squid ip:
> http://aaa.bbb.ccc.ddd/index.php/ru/%D0%91%D0%B0%D0%B7%D0%B0%20%D0%B7%D0%BD%D0%B0%D0%BD%D0%B8%D0%B9%20%D0%BF%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B0%20Mozilla%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D1%8F
>
> Of couse, the URL http://aaa.bbb.ccc.ddd/index.php/ru/...... is not exist.
>
> Alex.
>

I managed to replicate the behaviour without using squid at all.

The ngix server appear to be dying whenever it receives X-Forwarded-For:
header.

You can temporarily plug this break with:

   acl brokenXFF dstdomain .mozilla-russia.org
   request_header_access X-Forwarded-For deny brokenXFF

Amos

-- 
Please use Squid 2.6.STABLE19 or 3.0.STABLE4