On Mon, 21 Feb 2011 16:19:53 +0200, Ümit Kablan wrote:
> Hi Everyone,
>
> I am trying to run Squid in my network on a Windows XP machine.
> Everything is fine when working from localhost; on other localnet
> machines I cant make a search on google because I consistently get
> Invalid Request reply from it when I type the search phrase and hit
> enter. I added:
>
> acl our_networks src 192.168.1.0/24 192.168.2.0/24
> http_access allow our_networks
> http_access allow localhost
>
> to the default configuration shipped with the package.
>
> When I sniffed the packets I saw nothing weirdly different between
> two
> scenarios (localhost/localnet). The localhost request:
>
> --------
> GET http://www.google.com/ HTTP/1.1
> Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg,
> application/x-shockwave-flash, application/vnd.ms-excel,
> application/vnd.ms-powerpoint, application/msword, */*
> Accept-Language: tr
> User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1;
> Trident/4.0; InfoPath.1)
> Accept-Encoding: gzip, deflate
> Proxy-Connection: Keep-Alive
> Host: www.google.com
> Cookie:
>
> PREF=ID=dd606040da0d8736:FF=0:TM=1296985527:LM=1296985527:S=3UKPrP8nnNe2fLU9;
>
> NID=43=V-i2VvjJgtzg4gSPwejBGd7y1kf43Cq_6052JRulbB0NJBRCsAB-sOiPPUn1ludDLP-CPoIydDYvb3JqoYE3ppUI3dYGgDu4RwbzqdkAVRuEQ3UNdcAcXnBqkyIzbimF
> --------
>
> and this works fine. The localnet counterpart:
>
> -------
> GET
>
> /search?hl=tr&source=hp&biw=1276&bih=823&q=eee+ktu&aq=0&aqi=g10&aql=&oq=eee&fp=64d53dfd7a69225a&tch=3&ech=1ψ=6UBOTbHmCtah_Aa2haXRDw12969740590425&wrapid=tlif129697480915821&safe=active
> HTTP/1.1
Note the missing http://domain details in the URL. This is not a
browser->proxy HTTP request. It is a browsers->origin request.
IIRC interception of this type of request does not work in Windows,
since the kernel NAT details are not available without proprietary
third-party network drivers. Look at WPAD configuration of the localnet
browsers instead, that way they will send browser->proxy requests
nicely.
Amos
Received on Mon Feb 21 2011 - 21:43:19 MST
This archive was generated by hypermail 2.2.0 : Tue Feb 22 2011 - 12:00:02 MST