Re: [squid-users] ideas?

When everything is working I get this in access.log:

1116970534.920 116 127.0.0.1 TCP_MISS/000 415 GET http://www.playboy.com/
famtest NONE/- -
1116970535.447 196 127.0.0.1 TCP_MISS/200 4449 GET
http://propel.familink.com/controlcenter/rcgi-bin/block.cgi? famtest
DIRECT/64.119.36.218 text/html

When it is not working I get this:

1116922487.121 19 71.32.44.33 TCP_MISS/000 414 GET
http://www.playboy.com/tools/css/homepage.css ryan NONE/- -
1116922487.139 17 71.32.44.33 TCP_MISS/000 440 GET
http://www.playboy.com/tools/js/homepage.js ryan NONE/- -
1116922487.404 24 71.32.44.33 TCP_MISS/000 438 GET
http://propel.familink.com/controlcenter/rcgi-bin/block.cgi? ryan NONE/- -
1116922487.746 340 71.32.44.33 TCP_MISS/200 4513 GET
http://propel.familink.com/controlcenter/rcgi-bin/block.cgi? ryan
DIRECT/64.119.36.218 text/html
1116922487.746 1258 71.32.44.33 TCP_MISS/200 32992 GET
http://www.playboy.com/ ryan DIRECT/216.163.137.3 text/html
1116922488.051 339 71.32.44.33 TCP_MISS/200 4507 GET
http://propel.familink.com/controlcenter/rcgi-bin/block.cgi? ryan
DIRECT/64.119.36.218 text/html
1116922490.603 1572 71.32.44.33 TCP_MISS/200 39036 GET
http://www.playboy.com/tools/js/dd_menu.js ryan DIRECT/216.163.137.3
application/x-javascript
1116922491.455 204 71.32.44.33 TCP_MISS/000 437 GET
http://pei-ads.playboy.com/RealMedia/ads/adstream_mjx.ads/www.playboy.com/index.html/1369541183@top728x90-2,middle120x240a-2,middle120x60a-2,middle
160x600a-1,topright120x60-2,btmright120x60-2,speciala,specialb,specialc,speciald,speciale,specialf,specialg,popunder,popup2?
ryan NONE/- -
1116922491.684 26 71.32.44.33 TCP_MISS/000 676 GET
http://propel.familink.com/controlcenter/rcgi-bin/block.cgi? ryan NONE/- -
1116922492.257 349 71.32.44.33 TCP_MISS/302 597 GET
http://propel.familink.com/controlcenter/rcgi-bin/block.cgi? ryan
DIRECT/64.119.36.218 text/html
1116922492.484 19 71.32.44.33 TCP_MEM_HIT/200 1335 GET
http://propel.familink.com/controlcenter/graphics/transparent.gif ryan
NONE/- image/gif
1116922493.561 18 71.32.44.33 TCP_MISS/000 439 GET
http://www.playboy.com/imx/redesign/header_email_txt.gif ryan NONE/- -
1116922493.579 17 71.32.44.33 TCP_MISS/000 451 GET
http://www.playboy.com/imx/redesign/header_nospam_txt.gif ryan NONE/- -
1116922493.597 17 71.32.44.33 TCP_MISS/000 452 GET
http://www.playboy.com/imx/redesign/header_yes.gif ryan NONE/- -
1116922493.616 9 71.32.44.33 TCP_MISS/000 445 GET
http://www.playboy.com/imx/frontpage/lead_head.gif ryan NONE/- -
1116922493.634 17 71.32.44.33 TCP_MISS/000 445 GET
http://www.playboy.com/imx/frontpage/lead-baseballsuites0523.jpg ryan
NONE/- -
1116922493.659 24 71.32.44.33 TCP_MISS/000 459 GET
http://www.playboy.com/imx/frontpage/vegasmayor0523.jpg ryan NONE/- -
1116922493.664 153 71.32.44.33 TCP_MISS/200 5898 GET
http://www.playboy.com/imx/redesign/logo.gif ryan DIRECT/216.163.137.3
image/gif
1116922493.677 12 71.32.44.33 TCP_MISS/000 450 GET
http://www.playboy.com/imx/frontpage/pmoy0516.jpg ryan NONE/- -
1116922493.699 21 71.32.44.33 TCP_MISS/000 444 GET
http://www.playboy.com/imx/frontpage/runwaymodels0517.jpg ryan NONE/- -
1116922493.717 17 71.32.44.33 TCP_MISS/000 452 GET
http://www.playboy.com/imx/frontpage/cos0523.jpg ryan NONE/- -
1116922493.735 17 71.32.44.33 TCP_MISS/000 443 GET
http://www.playboy.com/imx/frontpage/breasttest0505.jpg ryan NONE/- -
1116922493.753 18 71.32.44.33 TCP_MISS/000 450 GET
http://www.playboy.com/imx/frontpage/spotlight-bottom.gif ryan NONE/- -
1116922493.771 17 71.32.44.33 TCP_MISS/000 452 GET
http://www.playboy.com/imx/frontpage/cotw0519.jpg ryan NONE/- -
1116922493.793 19 71.32.44.33 TCP_MISS/000 444 GET
http://www.playboy.com/imx/frontpage/current_issue.gif ryan NONE/- -
1116922493.814 19 71.32.44.33 TCP_MISS/000 449 GET
http://www.playboy.com/imx/frontpage/askhef_top.gif ryan NONE/- -
1116922493.836 19 71.32.44.33 TCP_MISS/000 446 GET
http://www.playboy.com/imx/frontpage/review_music.jpg ryan NONE/- -
1116922493.858 19 71.32.44.33 TCP_MISS/000 448 GET
http://www.playboy.com/imx/frontpage/review_booze.jpg ryan NONE/- -
1116922493.879 19 71.32.44.33 TCP_MISS/000 448 GET
http://www.playboy.com/imx/frontpage/review_game.jpg ryan NONE/- -
1116922494.116 25 71.32.44.33 TCP_MISS/000 447 GET
http://propel.familink.com/controlcenter/rcgi-bin/block.cgi? ryan NONE/- -
1116922496.259 2112 71.32.44.33 TCP_MISS/200 4549 GET
http://propel.familink.com/controlcenter/rcgi-bin/block.cgi? ryan
DIRECT/64.119.36.218 text/html

SCC has not got back to me with an answer yet.

Ryan Lamberton

----- Original Message -----
From: "Kevin" <kkadow@gmail.com>
To: <squid-users@squid-cache.org>
Cc: "Ryan Lamberton" <ryan@familink.com>
Sent: Tuesday, May 24, 2005 1:40 PM
Subject: Re: [squid-users] ideas?

On 5/24/05, Ryan Lamberton <ryan@familink.com> wrote:
> I am running squid 2.5 stable 3 and using smartfilter (SecureComputing) to
> block the bad stuff. This works great but lately I have noticed that if
> you
> go to a bad site the proxy will return part of it and then stop. If I
> refresh I get the block page that I am suppose to get. It is like the bad
> site is getting leaked past the filter and then stopped. I reboot and
> everything is working correctly again. Any ideas what might be doing
> this?

That's an interesting bug. I've seen exactly this behavior with WebSense,
but never with SmartFilter. What does SCC have to say?

Can you post a sample of the access.log showing the request(s) that made
it through, and then the refresh request that gets blocked?

Thanks,

Kevin Kadow

--
Unofficial SCC Sidewinder Users group:
http://groups.yahoo.com/group/sidewinder-users/