Re: Error tcp_negative on web server in DMZ

["sasa" <sasa@xxxxxxxxxxxx>]

Hi,
this problem is present only request at my server http and windows update, 
for all other sites it's all ok, and this problem is present on all my 
machine.
Thanks.

------
Salvatore.

----- Original Message ----- 
From: "sasa" <sasa@xxxxxxxxxxxx>
To: <squid-users@xxxxxxxxxxxxxxx>
Sent: Wednesday, November 23, 2005 7:37 PM
Subject: Re:  Error tcp_negative on web server in DMZ


> Hi, I have tried with another cache directory (and then squid -z) but the 
> result isn't changed, how this is possible ?
> thanks again.
>
> ------
> Salvatore.
>
> ----- Original Message ----- 
> From: "sasa" <sasa@xxxxxxxxxxxx>
> To: <squid-users@xxxxxxxxxxxxxxx>
> Sent: Wednesday, November 23, 2005 3:47 PM
> Subject: Re:  Error tcp_negative on web server in DMZ
>
>
> > Hi,
> > also with:
> >
> > acl internalsite dstdomain www.mysite.com
> > no_cache deny internalsite
> >
> > .. in the log file I have:
> >
> > tcp_miss/403 4174 get http://www.mysite.com direct /10.0.0.121
> > tcp_negative_hit/403 GET http://www.mysite.com
> >
> > ..but with parameter no_cache I not use the squid cache or no ??
> > thanks again.
> >
> > ------
> > Salvatore.
> >
> >
> >
> > ----- Original Message ----- 
> > From: "sasa" <sasa@xxxxxxxxxxxx>
> > To: <squid-users@xxxxxxxxxxxxxxx>
> > Sent: Wednesday, November 23, 2005 1:48 PM
> > Subject: Re:  Error tcp_negative on web server in DMZ
> >
> >
> > > Hi,
> > > the same configuration with old proxy server machine is ok but with new 
> > > machine (always the same version of Fedora, Squid and SquidGuard) not 
> > > functionally !!
> > > thanks again.
> > >
> > > ------
> > > Salvatore.
> > >
> > > ----- Original Message ----- 
> > > From: "sasa" <sasa@xxxxxxxxxxxx>
> > > To: <squid-users@xxxxxxxxxxxxxxx>
> > > Sent: Tuesday, November 22, 2005 1:15 PM
> > > Subject: Re:  Error tcp_negative on web server in DMZ
> > >
> > >
> > > > ..sorry but I have forget in squid.conf:
> > > >
> > > > redirect_program /usr/bin/squidGuard
> > > >
> > > > ..thanks again.
> > > >
> > > > ------
> > > > Salvatore.
> > > >
> > > >
> > > > ----- Original Message ----- 
> > > > From: "sasa" <sasa@xxxxxxxxxxxx>
> > > > To: <squid-users@xxxxxxxxxxxxxxx>
> > > > Sent: Tuesday, November 22, 2005 1:12 PM
> > > > Subject:  Error tcp_negative on web server in DMZ
> > > >
> > > >
> > > > > Hi, I use squid on Fedora Core 1:
> > > > >
> > > > > squid-2.5.STABLE3-2
> > > > > squidguard-1.2.0-2
> > > > >
> > > > > .. my squid.conf is:
> > > > >
> > > > > http_port 10.0.0.121:3128
> > > > > acl QUERY urlpath_regex cgi-bin \?
> > > > > no_cache deny QUERY
> > > > > acl windowsupdate dstdomain .windowsupdate.microsoft.com
> > > > > no_cache deny windowsupdate
> > > > > acl all src 0.0.0.0/0.0.0.0
> > > > > acl manager proto cache_object
> > > > > acl Safe_ports port 80       # http
> > > > > acl CONNECT method CONNECT
> > > > > acl local_net src 10.0.0.0/255.255.255.0
> > > > > http_access deny !Safe_ports
> > > > > http_access deny CONNECT !SSL_ports
> > > > > http_access deny to_localhost
> > > > > acl our_networks src 10.0.0.0/24
> > > > > http_access allow our_networks
> > > > > http_access allow local_net
> > > > > http_access allow localhost
> > > > > http_access deny all
> > > > > http_reply_access allow all
> > > > >
> > > > > ..but on internal client of my LAN when I try in the web browser (IE):
> > > > > http://www.mysite.com
> > > > > ..the dns resolutions is ok and the ip address of my webserver is:
> > > > > 10.0.1.2
> > > > > ..and I visualize only Fedora Core Test Page.
> > > > >
> > > > > In the log I have:
> > > > >
> > > > > tcp_negative_hit/403 GET http://www.mysite.com
> > > > >
> > > > > ..where is my error ?
> > > > > thanks.
> > > > >
> > > > > ------
> > > > > Salvatore.