> irst off, I'm new at this and I'm not a sysadmin so I may have
> overlooked/not understood how to do this based on the
> squid.confdocumentation.
>
> I'm on a corporate network behind a proxy that requires
> authentication, i'm using squid so that I don't have to go throught
> the head ache of configuring the authorization for each app.
>
> I've done the following (with my appropriate domain of course)
> acl local-servers dstdomain .foo.net
> acl all src 0.0.0.0/0.0.0.0
> never_direct deny local-servers
> never_direct allow all
>
> And everything works great, however when I try to use yum it tries to go
> direct and not through the parent. Here are some entries from access.log:
>
> 1136475166.948 0 127.0.0.1 TCP_HIT/200 1454 GET
> http://apt.sw.be/fedora/4/en/i386/dag/repodata/repomd.xml - NONE/-
> application/xml
> 1136474756.414 0 127.0.0.1 TCP_HIT/200 1454 GET
> http://apt.sw.be/fedora/4/en/i386/dag/repodata/repomd.xml - NONE/-
> application/xml
> 1136474775.362 0 127.0.0.1 TCP_HIT/200 1315 GET
> http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/i386/repodata/repomd.xml
> - NONE/- text/xml
> 1136474846.545 0 127.0.0.1 TCP_HIT/200 1454 GET
> http://apt.sw.be/fedora/4/en/i386/dag/repodata/repomd.xml - NONE/-
> application/xml
> 1136474964.462 0 127.0.0.1 TCP_HIT/200 1505 GET
> http://download.fedora.redhat.com/pub/fedora/linux/core/4/i386/os/repodata/
> repomd.xml
> - NONE/- text/xml
> 1136475035.703 0 127.0.0.1 TCP_HIT/200 1505 GET
> http://download.fedora.redhat.com/pub/fedora/linux/extras/4/i386/repodata/repomd.xml
> - NONE/- text/xml
>
These are hits. SQUID doesn´t need to contact the parent or the
remote weberver, because the object is already in the cache.
> i've noticed that occasionally one to gmail isn't through the parent either:
> 1136474609.793 0 127.0.0.1 TCP_MISS/000 0 POST
> http://mail.google.com/mail/? - NONE/- -
> 1136474671.377 0 127.0.0.1 TCP_MISS/000 0 POST
> http://mail.google.com/mail/? - NONE/- -
>
- Check your squid.conf thoroughly, make sure no other
http_access rules are in place , which could cause this.
- SQUID version ?
M.
Received on Fri Jan 06 2006 - 10:11:28 MST
This archive was generated by hypermail pre-2.1.9 : Wed Feb 01 2006 - 12:00:01 MST