RE: [squid-users] Squid and Symantec Web Security

From: Greg Shepherd <Greg.Shepherd@dont-contact.us>
Date: Thu, 23 Dec 2004 23:05:32 -0500

Sorry Lucio. I mis-sent it directly to you instead of to the list.

It appears that I can telnet to port 3128. I telnet to the port from the SWS
server, but it is just blank with no prompts or anything. After typing in
quit, exit, etc. I see the following text:

HTTP/1.0 400 Bad Request
Server: squid/2.5.STABLE5
Mime-Version: 1.0
Date: Fri, 24 Dec 2004 03:54:48 GMT
Content-Type: text/html
Content-Length: 1203
Expires: Fri, 24 Dec 2004 03:54:48 GMT
X-Squid-Error: ERR_INVALID_REQ 0
X-Cache: MISS from igateway.kings
X-Cache-Lookup: NONE from igateway.kings:3128
Proxy-Connection: close

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://
g/TR/html4/loose.dtd">
                      <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTE
html; charset=iso-8859-1">
                          <TITLE>ERROR: The requested URL could not be
</TITLE>
        <STYLE type="text/css"><!--BODY{background-color:#ffffff;font-f
dana,sans-serif}PRE{font-family:sans-serif}--></STYLE>
                                                      </HEAD><BODY>
                                                                   <H1>
>
 <H2>The requested URL could not be retrieved</H2>
                                                  <HR noshade size="1px

e trying to process the request:
                                <PRE>
                                     /
/quiot
/exit
exit
quit

</PRE>
      <P>
         The following error was encountered:
                                             <UL>
                                                 <LI>
                                                     <STRONG>
                                                             Invalid Re

RONG>
     </UL>

          <P>
             Some aspect of the HTTP Request is invalid. Possible prob

<LI>Missing or unknown request method
                                     <LI>Missing URL
                                                    <LI>Missing HTTP Id
(HTTP/1.0)
          <LI>Request is too large
                                  <LI>Content-Length missing for POST o
uests
     <LI>Illegal character in hostname; underscores are not allowed
                                                                   </UL

cache administrator is <A HREF="mailto:webmaster">webmaster</A>.

                                                                 <BR cl
>
 <HR noshade size="1px">
                        <ADDRESS>
                                 Generated Fri, 24 Dec 2004 03:54:48 GM
eway.kings (squid/2.5.STABLE5)
                              </ADDRESS>
                                        </BODY></HTML>

Connection to host lost.

Is that expected?

I tested with a regular system by pointing my browser to 3128 and it worked
fine.

My next step was pointing SWS to 3128 by configuring within SWS 3.0 for
NT/2000 to point to a proxy server (10.0.0.102:3128 on the internal NIC).

SWS does work (it has been working fine for over a year) directly to the
Internet and through a firewall with NAT as well. No problems with that
part.

Just pointing SWS to go to the squid on the SuSe box is where I am having
problems.

I haven't contacted Symantec yet.

Any suggestions?

Greg

-----Original Message-----
From: Lucio Jankok [mailto:lj@2u2.nu]
Sent: Thursday, December 23, 2004 9:23 PM
To: Greg.Shepherd@netmanaged.com
Subject: Re: [squid-users] Squid and Symantec Web Security

Yes we did. Can you do a telnet squid-ip-address 3128 on the SWS ?

On 12/24/04 1:42 AM, "Greg Shepherd" <Greg.Shepherd@netmanaged.com> wrote:

> Hello all,
>
> I attempted the following configuration:
>
> Clients --> Symantec Web Security --> Squid 2.5STABLE5.
>
> The SWS server has the capability to forward requests to an upstream proxy
> server (Squid in this case).
>
> It only fails with a timeout error message from SWS.
>
> I didn't see any issues with this on the Symantec Support site nor in
> googling except for a single old reference in 2001.
>
> Has anyone successfully configured what I am attempting to do?
>
> Please help.
>
> Thanks,
>
> Greg
>
Received on Thu Dec 23 2004 - 21:05:20 MST

This archive was generated by hypermail pre-2.1.9 : Sat Jan 01 2005 - 12:00:03 MST