[squid-users] Re: TCP_DENIED_REPLY/403

Ok. I got it fixed after reading the FAQ and changing the values to:
request_header_max_size 15824 KB
request_body_max_size 15824 KB
reply_header_max_size 15824 KB
reply_body_max_size 15824 KB

Is there any way to set these max_sizes to unlimited?

On Fri, Jul 29, 2011 at 12:06 PM, Andrei <funactivities_at_gmail.com> wrote:
> I'm getting this error message:
> http://yahoo.com/
> The requested URL could not be retrieved
> The request or reply is too large.
> If you are making a POST or PUT request, then the item you are trying
> to upload is too large.
> If you are making a GET request, then the item you are trying to
> download is too large.
>
> Squid access logs show:
> 1311965841.744 � � �0 176.16.0.161 TCP_DENIED_REPLY/403 3643 NONE
> error:request-too-large - NONE/- text/html
>
> I assume that reply_header_max_size are and �request_header_max_size
> are set by default to unlimited in v3m but adding manually
> reply_header_max_size 40 M and request_header_max_size 40 M still
> gives me the same error message.
>
> I'm running:
> Squid Cache: Version 3.1.6
> Debian stable 6.0.2.1
> DualXeon 3GhZ, 250GB SCSI, 4GB RAM
>
> Config file:
>
> acl manager proto cache_object
> acl localhost src 127.0.0.1/32
> acl to_localhost dst 127.0.0.0/8
> acl localnet src 172.16.0.0/21 �# RFC1918 possible internal network
> acl SSL_ports port 443
> acl Safe_ports port 80 � � � � �# http
> acl Safe_ports port 21 � � � � �# ftp
> acl Safe_ports port 443 � � � � # https
> acl Safe_ports port 70 � � � � �# gopher
> acl Safe_ports port 210 � � � � # wais
> acl Safe_ports port 1025-65535 �# unregistered ports
> acl Safe_ports port 280 � � � � # http-mgmt
> acl Safe_ports port 488 � � � � # gss-http
> acl Safe_ports port 591 � � � � # filemaker
> acl Safe_ports port 777 � � � � # multiling http
> acl CONNECT method CONNECT
> request_header_max_size 0
> request_body_max_size 0
> reply_header_max_size 0
> reply_body_max_size 0
> http_access allow manager localhost
> http_access deny manager
> http_access deny !Safe_ports
> http_access deny CONNECT !SSL_ports
> http_access allow localhost
> http_access allow localnet
> http_access allow all
> icp_access allow all
> htcp_access allow all
> http_port 3128 transparent
> hierarchy_stoplist cgi-bin ?
> cache_mem 1024 MB
> cache_dir ufs /var/spool/squid3 40960 16 256
> coredump_dir /var/spool/squid3
> refresh_pattern ^ftp: � � � � � 1440 � �20% � � 10080
> refresh_pattern ^gopher: � � � �1440 � �0% � � �1440
> refresh_pattern -i (/cgi-bin/|\?) 0 � � 0% � � �0
> refresh_pattern . � � � � � � � 0 � � � 40% � � 40320
> icp_port 0
> refresh_pattern -i \.index.(html|htm)$ 0 40% 10080
> refresh_pattern -i \.(html|htm|css|js)$ 1440 40% 40320
> refresh_pattern -i \.(gif|png|jpg|jpeg|ico)$ 10080 90% 43200
> override-expire ignore-no-cache ignore-no-store ignore-private
> refresh_pattern -i \.(iso|avi|wav|mp3|mp4|mpeg|swf|flv|x-flv)$ 43200
> 90% 432000 override-expire ignore-no-cache ignore-no-store
> ignore-private
> refresh_pattern -i
> \.(deb|rpm|exe|zip|tar|tgz|ram|rar|bin|ppt|doc|tiff)$ 10080 90% 43200
> override-expire ignore-no-cache ignore-no-store ignore-private
>
Received on Fri Jul 29 2011 - 19:32:09 MDT