RE: [squid-users] Zero Sized Reply [attn: long post]

Thanks Peter,

I have another squid box with the same squid.conf configuration (however,
it's transparent) at another location and it works fine with hotmail.
That's strange. It's running on port 3128 I wonder if the firewall (Cisco
PIX) needs to know about that port.

Regards,
Trevor.

-----Original Message-----
From: Peter Smith [mailto:peter.smith@utsouthwestern.edu]
Sent: Tuesday, December 09, 2003 10:41 AM
To: squid-users@squid-cache.org
Subject: Re: [squid-users] Zero Sized Reply [attn: long post]

I would like to say that I am using ~4 Squid-2.5.STABLE4's which have
about 190-250 users connected to each on average and haven't had any
problems with "Zero Sized Reply"s. I would probably suspect my
connection if that were the case. I'll post my squid.conf, however, so
you can look at it: (Hope it helps, sorry for the <censored>s)

hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY

acl virus1 urlpath_regex /readme\.exe$
http_access deny virus1

acl virus2a dstdomain us.f1.yahoofs.com
acl virus2b urlpath_regex /timeupdate\.exe$
http_access deny virus2a virus2b

acl virus3 urlpath_regex /explorer\.exe$
http_access deny virus3

acl virus4 dstdomain mars.raketti.net
http_access deny virus4

acl all src 0.0.0.0/0.0.0.0
acl CONNECT method CONNECT
http_access allow all

# ICP Peer:
acl peer1 src <censored>
cache_peer <censored> sibling 3128 3130 proxy-only weight=3
cache_peer_access <censored> deny QUERY
cache_peer_access <censored> allow all
acl peer2 src <censored>
cache_peer <censored> sibling 3128 3130 proxy-only weight=2
cache_peer_access <censored> deny QUERY
cache_peer_access <censored> allow all
acl peer3 src <censored>
cache_peer <censored> sibling 3128 3130 proxy-only weight=1
cache_peer_access <censored> deny QUERY
cache_peer_access <censored> allow all
icp_access allow all

# SNMP:
acl snmppublic <censored>
snmp_access allow snmppublic
snmp_access deny all

# Timeouts:
read_timeout 5 minutes
request_timeout 30 seconds
pconn_timeout 60 seconds
half_closed_clients on

shutdown_lifetime 0 seconds
negative_ttl 30 seconds
icp_query_timeout 1000 milliseconds

cache_effective_user squid
cache_effective_group squid
cache_dir aufs /cache1 4096 64 64
cache_dir aufs /cache2 4096 64 64
cache_dir aufs /cache3 4096 64 64
cache_mem 256 MB
maximum_object_size 256 MB
minimum_object_size 0
request_body_max_size 0
request_header_max_size 64 KB

# Just in case, skew the cache registration to go NOWHERE:
announce_host localhost

visible_hostname <censored>

http_port 3128

cache_mgr <censored>

append_domain <censored>

cache_store_log none
strip_query_terms off

ftp_user <censored>

acl admin src <censored>

fqdncache_size 0

extension_methods SEARCH BPROPFIND
acl PURGE method PURGE
acl localhost src 127.0.0.1
http_access allow PURGE localhost
http_access deny PURGE

coredump_dir /
log_icp_queries off

Peter

Trevor wrote:

>Hello,
>
>We use squid 2.5-STABLE-3 (port 3128) to connect to the Internet via
>traditional browser proxy configuration. Everything works great except for
>specific sites (yahoo mail, aol mail, hotmail, and sometimes mapquest).
>These sites return a "Zero Sized Reply" error message. Disabling squid
>allows traffic through.
>
>Was this problem ever addressed? HotMail fails with that message every
>time. Sometimes mapquest works, but other times it fails as well.
>
>I have looked at http://www.squid-cache.org/Doc/FAQ/FAQ-11.html#ss11.51 to
>see if there is any information that can solve my "Zero Sized Reply"
>problem. It looks like nobody knows what is going on, as it's full of
>speculation. I have deleted cookies, disabled persitance connections, and
>ensured that ECN is set to "0". Nothing. The problem is still here.
>
>I think I have read every single post on "Zero Sized Reply" on google. Why
>is this problem all over the place and why can't anybody figure it out?
>It's a very common problem. Hopefully, someone here can spot what's wrong.
>I really would appreciate solving this issue. I'd be happy do document and
>post any additional information to the FAQ so that other people in the
>future can fix their configurations.
>
>Below is my squid.conf configuration:
><SNIP>
>
>Regards,
>Trevor.
>
>
>
>
>
Received on Tue Dec 09 2003 - 10:55:04 MST