Re: [squid-users] NEGATIVE_HIT & TCP_IMS_HIT

On Friday 06 June 2003 08.10, Dean Wolmarans \(Border Internet\)
wrote:
> I get the following errors in the access file when I try to access
> a bank site that runs java
>
> 1054818135.567 0 127.0.0.1 TCP_NEGATIVE_HIT/404 542 GET
> http://www.whatever.com
> but.class masanaboj NONE/- text/html

This is a file which was not found on the web server in the prior
request.

If you think this is related to the problem then you can try disabling
negative caching in Squid. See squid.conf.

> 1054818164.223 14 127.0.0.1 TCP_IMS_HIT/304 208 GET
> http://www.whatever.com masanaboj NONE/- text/html
>
> The site just freezes and will not load the java script and allow
> the client to log on. The bank says that ports 1500 -1510 must be
> open , and they are.

Such applications is always fishy via proxies. The reason is because
these "ports that must be open" usually indicates traffic which is
not HTTP based and instead direct communication between a client
program (either binary or Java appled) and the server.

If you have a network where the proxy must be used then these
applications usually can't be made to work unless redesigned to use
the browser to connect to these ports via the CONNECT method rather
than connecting directly, and the proxy reconfigured to allow CONNECT
to these ports. This does not seem to be your case, as in such case
the CONNECT request will be logged in Squid access.log even if
denied.

If you have a network where the client stations can connect directly
to these ports at the requested server then it might be a issue of
reconfiguring the browsers to allow Java applets downloaded via a
proxy to connect to the network. Some web browsers deny this by
default when using a proxy unless the applet is signed for direct
network access.

Regards
Henrik

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org
If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, info@marasystems.com