SV: Re: FTP Query

Hmmm...

Whenever I access ftp://ftp.something.... I get this in the syslog:

"Mar 8 12:07:48 <hostname> squid[445]: internalStart: unknown request:
GET /squid-i
nternal-static/icons/anthony-unknown.gif HTTP/1.0^M Referer:
ftp://ftp.sunet.se^
M Proxy-Connection: Keep-Alive^M User-Agent: Mozilla/4.08 [en] (X11; I;
Linux 2.
0.36 i586)^M Host: <hostname>:808^M Accept: image/gif, image/x-xbitmap
, image/jpeg, image/pjpeg image/png^M Accept-Encoding: gzip^M
Accept-Language: e
n^M Accept-Charset: iso-8859-1,*,utf-8^M ^M"

(hostname removed)

and I get no icons... what's up? Have I goofed somewhere or what is
this? This is squid 2.1-PATCH2 with Henrik's recommended patches,
OS=FreeBSD 2.2.8. The icons are there and are owned by the user running
squid, path is not changed from the default.

Regards,

/Per

Richard Stagg wrote:
>
> > > look at the source and they're "http://dmz_proxy.eu.csc.com:3128/
> > > squid-internal-static/icons/anthony-text.gif" or whatever.

> Doh! Of course:
> "s/dmz_proxy\.eu\.csc\.com/int_proxy\.eu\.csc\.com/;"
> Works like a charm.

Should not be needed or even help. Squid is designed to intercept all
squid-internal-static objects regardless of the server name or port
used.

Two things which comes to my mind are:
1. ACLs. Is the client allowed to fetch icons from the inner proxy?
2. no-proxy browser settings. It may be that the client tries to fetch
the icons directly fron the outer proxy, bypassing the inner proxy.

The fix to case 1 is obvious.

The fix to case 2 is less obvious, but there are several.
2a) Configure the outer proxy to use a visible hostname which resolves
to an alias for the inner proxy.
2b) Configure browsers to correctly contact the inner proxy for requests
to DMZ servers.
2c) Allow clients to fetch icons directly from the DMZ proxy.

---
Henrik Nordstrom
Spare time Squid hacker
 <<Fil: Re_ FTP Query.TXT>>