[squid-users] Exchange ActiveSync and squid reverse proxy

Hi,

we are using squid as reverse proxy for Outlook RPC over HTTPS without
any problems. Today some iPhone users/customers wanted to use Exchange
ActiveSync as well so I decided to "simply" allow
/Microsoft-Server-ActiveSync/* as well and hoped all is well. Far from
it. The Exchange ActiveSync account on the iPhone can be setup without
problems and verifies. Sending E-Mails is no problem. However receiving
e-mails and e-mail push does not work at all. Whenever the user tries to
receive mails I see this in cache.log:

2008/11/25 11:28:26| The request OPTIONS
https://outlook.test.de:443/Microsoft-Server-ActiveSync is ALLOWED,
because it matched 'url_allow'
2008/11/25 11:28:26| The reply for OPTIONS
https://outlook.test.de/Microsoft-Server-ActiveSync is ALLOWED, because
it matched 'all'
2008/11/25 11:28:26| Invalid chunk header '
'
2008/11/25 11:28:26| clientWriteComplete: Object aborted
2008/11/25 11:28:27| The request POST
https://outlook.test.de:443/Microsoft-Server-ActiveSync?User=testuser&De
viceId=Appl88843DYCY7H&DeviceType=iPhone&Cmd=FolderSync is ALLOWED,
because it matched 'url_allow'
2008/11/25 11:28:27| clientReadBody: start fd=12 body_size=13
in.offset=13 cb=0x8088430 req=0x888c000
2008/11/25 11:28:27| clientProcessBody: start fd=12 body_size=13
in.offset=13 cb=0x8088430 req=0x888c000
2008/11/25 11:28:27| clientProcessBody: end fd=12 size=13 body_size=0
in.offset=0 cb=0x8088430 req=0x888c000
2008/11/25 11:28:27| The reply for POST
https://outlook.test.de/Microsoft-Server-ActiveSync?User=testuser&Device
Id=Appl88843DYCY7H&DeviceType=iPhone&Cmd=FolderSync is ALLOWED, because
it matched 'all'
2008/11/25 11:28:27| Invalid chunk header '
'
2008/11/25 11:28:27| clientWriteComplete: Object aborted

This seems to be the root of the problem but how do I fix it if I can
fix it at all? Customer is running squid-2.7.4 against Exchange 2003.

Any help greatly appreciated.

Regards,
  JP
Received on Tue Nov 25 2008 - 10:35:47 MST