Re: [squid-users] Re: Not seeing internal icons

RW wrote:
> On Thu, 20 Mar 2008 00:34:36 +1300
> Amos Jeffries <squid3@treenet.co.nz> wrote:
>
>> RW wrote:
>>> I don't have any of the internal icons showing in browsers. With
>>> wget -S, I'm seeing a 404 and X-Squid-Error: ERR_INVALID_REQ 0 on
>>> the icon urls.
>>
>> What does your access.log say?
>
> 1205930725.472 4 127.0.0.1 TCP_MISS/404 1627 GET ftp://ftp.freebsd.org/squid-internal-static/icons/anthony-dir.gif - NONE/- text/html
>
>
>> Failing that your cache.log?
>
> 2008/03/19 12:45:25| internalStart: unknown request:
> Client: 127.0.0.1 http_port: 127.0.0.1:3128
> GET internal://gumby.homeunix.com/squid-internal-static/icons/anthony-dir.gif HTTP/1.0
> User-Agent: Wget/1.11
> Accept: */*
> Host: ftp.freebsd.org

Aha!. Thats a bug. The Host: is being set badly.
Can you file all these details in a bug report please so we don't loose
it and someone who knows the error-paths can get onto it.

Amos

>
>> I suspect you are blocking certain types of file or request.
>
> Commenting-out adzap was one of the first things I tried, and I don't
> have any other such blocking:
>
> $ grep -oE "^[^#]+" /usr/local/etc/squid/squid.conf
> http_port 3128
> hierarchy_stoplist cgi-bin ?
> acl apache rep_header Server ^Apache
> broken_vary_encoding allow apache
> maximum_object_size 25 MB
> cache_replacement_policy lru
> cache_dir aufs /usr/local/squid/cache-N 4000 16 256 max-size=650000
> cache_dir aufs /usr/local/squid/cache-L 600 16 256 min-size=500000
> cache_swap_low 90
> cache_swap_high 98
> cache_mem 6 MB
> memory_replacement_policy heap GDSF
> maximum_object_size_in_memory 200 KB
> dns_nameservers 127.0.0.1
> pipeline_prefetch on
> logfile_rotate 5
> access_log /usr/local/squid/logs/access.log squid
> strip_query_terms off
> refresh_pattern -i ^ftp: 1440 5% 10000
> refresh_pattern -i ^gopher: 1440 0% 1000
> refresh_pattern -i http://(image|pic)s?\..+\? 30 50% 19999 ignore-private
> refresh_pattern -i \?.*\.(png|jpe?g|gif|ico|css)$ 30 30% 9999 ignore-private
> refresh_pattern -i \? 0 0% 0
> refresh_pattern -i \.(zip|rar|bz2|gz|pdf|ps|css|js|swf)$ 30 30% 9999 ignore-private
> refresh_pattern -i \.(avi|divx|mpe?g|mp.|ra|rm|wma|wmv|swv)$ 9999 30% 100000 ignore-private
> refresh_pattern -i \.(png|jpe?g|gif|tif+|ico)$ 9999 50% 300000 ignore-private
> refresh_pattern . 5 30% 9999
> quick_abort_min 50 KB
> quick_abort_max 200 KB
> quick_abort_pct 30
> range_offset_limit 128 KB
> acl all src 0.0.0.0/0.0.0.0
> acl manager proto cache_object
> acl localhost src 127.0.0.1/255.255.255.255
> acl to_localhost dst 127.0.0.0/8
> acl SSL_ports port 443
> acl SSL_ports port 993
> acl Safe_ports port 800
> acl Safe_ports port 80
> acl Safe_ports port 21
> acl Safe_ports port 443
> acl Safe_ports port 70
> acl Safe_ports port 210
> acl Safe_ports port 1025-65535
> acl Safe_ports port 280
> acl Safe_ports port 488
> acl Safe_ports port 591
> acl Safe_ports port 777
> acl CONNECT method CONNECT
> http_access allow manager localhost
> http_access deny manager
> http_access deny !Safe_ports
> http_access deny CONNECT !SSL_ports
> acl mylan src 192.168.1.0/255.255.255.0
> http_access allow mylan
> http_access allow localhost
> http_access deny all
> http_reply_access allow all
> icp_access allow all
> coredump_dir /usr/local/squid
> icon_directory /usr/local/etc/squid/icons
> short_icon_urls off
>
>
>

-- 
Please use Squid 2.6STABLE17+ or 3.0STABLE1+
There are serious security advisories out on all earlier releases.