Re: [squid-users] SquidNT TCP_DENIED

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Tue, 04 Nov 2008 11:35:22 +1300

Chris Lee wrote:
> Hi,
>
> Form the access.log of my new SquidNT (version 2.7.STABLE4) box, I got some
> TCP_DENIED entry, before the users can access the website.

SquidNT no longer exists. If you fetched it from a website claiming to
be SquidNT, please be aware there are now fraudulent distributions about
and you should obtain an official copy of 'Squid' for windows. They are
available through http://squid.acmeconsulting.it/

>
> 1225693114.517 10 10.1.10.147 TCP_DENIED/407 1721 CONNECT urs.microsoft.
> com:443 - NONE/- text/html
> 1225693114.547 30 10.1.10.147 TCP_DENIED/407 1933 CONNECT urs.microsoft.
> com:443 - NONE/- text/html
> 1225693114.577 240 10.1.10.147 TCP_MISS/200 6346 CONNECT
> urs.microsoft.com:443 domain_nt\osec DIRECT/207.46.50.124 -
>
> Why the first 2 entry does not go the domain\user info? Did I misconfigure
> something?

The first two are sent to proxy without that info. The proxy denies them
with "407 Authentication needed"

This is normal for NTLM handshakes during the auth procedure.

>
> Regards,
> Chris Lee
>

Amos

-- 
Please be using
  Current Stable Squid 2.7.STABLE5 or 3.0.STABLE10
  Current Beta Squid 3.1.0.1
Received on Mon Nov 03 2008 - 22:35:34 MST

This archive was generated by hypermail 2.2.0 : Tue Nov 04 2008 - 12:00:04 MST