RE: [squid-users] Windows Updates on 3.2.6

Well, I'm not too familiar with tcpdump. It was tcpdump -i any host 10.0.2.150 -w tcpdump.txt

I'll be glad to remove the range_offset_limit -1 line. I'd added it because the Squid wiki page @ http://wiki.squid-cache.org/SquidFaq/WindowsUpdate specifies it when wanting to cache updates. I wasn't after caching -- only after "working" so I thought I'd try it either way.

-----Original Message-----
From: Eliezer Croitoru [mailto:eliezer_at_ngtech.co.il]
Sent: Thursday, January 31, 2013 4:38 PM
To: squid-users_at_squid-cache.org
Subject: Re: [squid-users] Windows Updates on 3.2.6

On 1/31/2013 6:11 PM, Dave Burkholder wrote:
> Here are links to squid access.log
>
> www.thinkwelldesigns.com/access_log.txt
Ok seems like pretty normal to me from squid point of view.
I have the same lines which windows tries to access and dosn't exist.

>
> And tcpdump for 10.0.2.150
>
> www.thinkwelldesigns.com/tcpdump.zip
In what format is it? I have tried to read it with wireshark and it seems like corrupted or something.
I think I do understand what is the problem from squid.conf.

range_offset_limit -1

Remove it..
try to make the proxy as simple as it is.

The above can cause windows to not fetch objects and when fails tries to use SSL which I dont know if it can or cannot use.

Eliezer

>
> Thanks,
>
> Dave
>
> -----Original Message-----
> From: Dave Burkholder
> Sent: Thursday, January 31, 2013 10:29 AM
> To: Eliezer Croitoru; squid-users_at_squid-cache.org
> Subject: RE: [squid-users] Windows Updates on 3.2.6
>
> Hello Eliezer,
>
> Thank you for your reply. My exact problem is that Windows Updates do not install or even download at all.
>
> The squid RPMs were built by my partner in 2 architectures: Centos 5 i386 and Centos 6 x86_64. Same nonfunctioning behavior in both.
>
> I didn't realize you had a squid repo; I'd be glad to try your builds if they're compatible. Where is your repo hosted?
>
>
> I had included the conf file in my first email, but a link would be better:
>
> www.thinkwelldesigns.com/squid_conf.txt
>
>
> ######################################################################
> #########
> squid -v: (Centos 6 x86_64)
> ----------------------------------------------------------------------
> ---------
> Squid Cache: Version 3.2.6
> configure options: '--host=x86_64-unknown-linux-gnu' '--build=x86_64-unknown-linux-gnu' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib64' '--libexecdir=/usr/libexec' '--sharedstatedir=/var/lib' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--exec_prefix=/usr' '--libexecdir=/usr/lib64/squid' '--localstatedir=/var' '--datadir=/usr/share/squid' '--sysconfdir=/etc/squid' '--with-logdir=$(localstatedir)/log/squid' '--with-pidfile=$(localstatedir)/run/squid.pid' '--disable-dependency-tracking' '--enable-arp-acl' '--enable-follow-x-forwarded-for' '--enable-auth' '--enable-auth-basic=DB,LDAP,MSNT,MSNT-multi-domain,NCSA,NIS,PAM,POP3,RADIUS,SASL,SMB,getpwnam' '--enable-auth-ntlm=smb_lm,fake' '--enable-auth-digest=file,LDAP,eDirectory' '--enable-auth-negotiate=kerberos' '--enable-exte
 rn
> al-acl-helpers=ip_user,ldap_group,session,unix_group,wbinfo_group' '--enable-cache-digests' '--enable-cachemgr-hostname=localhost' '--enable-delay-pools' '--enable-epoll' '--enable-http-violations' '--enable-icap-client' '--enable-ident-lookups' '--enable-linux-netfilter' '--enable-referer-log' '--enable-removal-policies=heap,lru' '--enable-snmp' '--enable-ssl' '--enable-ssl-crtd' '--enable-storeio=aufs,diskd,ufs' '--enable-useragent-log' '--enable-wccpv2' '--enable-esi' '--enable-ecap' '--with-aio' '--with-default-user=squid' '--with-filedescriptors=16384' '--with-dl' '--with-openssl' '--with-pthreads' 'build_alias=x86_64-unknown-linux-gnu' 'host_alias=x86_64-unknown-linux-gnu' 'CFLAGS=-O2 -g -fpie' 'CXXFLAGS=-O2 -g -fpie' 'PKG_CONFIG_PATH=/usr/lib64/pkgconfig:/usr/share/pkgconfig'
>
> ######################################################################
> #########
> squid -v: (Centos 5 i386)
> ----------------------------------------------------------------------
> ---------
> Squid Cache: Version 3.2.6
> configure options: '--host=i686-redhat-linux-gnu' '--build=i686-redhat-linux-gnu' '--target=i386-redhat-linux' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib' '--libexecdir=/usr/libexec' '--sharedstatedir=/usr/com' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--exec_prefix=/usr' '--libexecdir=/usr/lib/squid' '--localstatedir=/var' '--datadir=/usr/share/squid' '--sysconfdir=/etc/squid' '--with-logdir=$(localstatedir)/log/squid' '--with-pidfile=$(localstatedir)/run/squid.pid' '--disable-dependency-tracking' '--enable-arp-acl' '--enable-follow-x-forwarded-for' '--enable-auth' '--enable-auth-basic=LDAP,MSNT,NCSA,PAM,SMB,YP,getpwnam,multi-domain-NTLM,SASL,DB,POP3,squid_radius_auth' '--enable-auth-ntlm=smb_lm,no_check,fakeauth' '--enable-auth-digest=password,ldap,eDirectory' '--
 en
> able-auth-negotiate=squid_kerb_auth' '--enable-external-acl-helpers=ip_user,ldap_group,session,unix_group,wbinfo_group' '--enable-cache-digests' '--enable-cachemgr-hostname=localhost' '--enable-delay-pools' '--enable-epoll' '--enable-icap-client' '--enable-ident-lookups' '--with-large-files' '--enable-linux-netfilter' '--enable-referer-log' '--enable-removal-policies=heap,lru' '--enable-snmp' '--enable-ssl' '--enable-ssl-crtd' '--enable-storeio=aufs,diskd,ufs' '--enable-underscores' '--enable-useragent-log' '--enable-wccpv2' '--enable-esi' '--with-aio' '--with-default-user=squid' '--with-filedescriptors=16384' '--with-dl' '--with-openssl' '--with-pthreads' '--with-winbind-auth-challenge' '--enable-http-violations' 'CFLAGS=-march=i686' 'CXXFLAGS=-march=i686' 'build_alias=i686-redhat-linux-gnu' 'host_alias=i686-redhat-linux-gnu' 'target_alias=i386-redhat-linux' 'LDFLAGS=-pie' 'PKG_CONFIG_PATH=/usr/lib/pkgconfig:/usr/share/pkgconfig' --enabl
 e-l
> td l-convenience
>
> I'll send access.log data in a few minutes.
>
> Again, thank you so much for your reply.
>
> Dave
>
>
> -----Original Message-----
> From: Eliezer Croitoru [mailto:eliezer_at_ngtech.co.il]
> Sent: Thursday, January 31, 2013 10:04 AM
> To: squid-users_at_squid-cache.org
> Subject: Re: [squid-users] Windows Updates on 3.2.6
>
> Squid access logs?
> What is the exact problem? you can't download at all or there is a problem?
> Please share your squid.conf and "squid -v" output.
> Where did you got your RPM? from my repo?
>
> Please share more info and if you can get tcpdump output this can really help to find your problem.
> Note that I am using 3.2.6 + 3.3 + 3.HEAD on CentOS 6 and it works fine with windows updates as for right now.
>
> Regards,
> Eliezer
>
> On 1/31/2013 4:54 PM, Dave Burkholder wrote:
>> Are there any comments here? I've tried adding the following options
>> fromhttp://wiki.squid-cache.org/SquidFaq/WindowsUpdate (even though
>> I don't especially want to cache updates)
>>
>> range_offset_limit -1
>> maximum_object_size 200 MB
>> quick_abort_min -1
>>
>> No joy. I've tried transparent & standard proxy modes. Not using authentication anywhere. I've now tested on 4 LANs behind Squid 3.2.6 on CentOS 5 & 6 machines and WU isn't working on any of them.
>>
>> On one machine I downgraded to 3.2.0.18 and was able to get WU to work. Was there a regression since 3.2.0.18?
>>
>> Thanks,
>>
>> Dave
>

--
Eliezer Croitoru