Mark, This hasn't worked. I think I will try a system with a 2.6 kernel next. Most posts point to the MTU needing to be reduced, and although I have done that, I am still encountering the problem. Currently I use the wccp module, I understand that the gre module already has the reduced MTU size configured and will hopefully work right out of the box. Thanks, Bryan -----Original Message----- From: Mark Elsen [mailto:mark.elsen@xxxxxxxxx] Sent: March 13, 2006 8:58 AM To: Shoebottom, Bryan Cc: squid-users@xxxxxxxxxxxxxxx Subject: Re: FW: Hotmail login issue > > I have read a number of posts on how to resolve the hotmail login issues > with an interception web cache but nothing has worked. I have tried the > following 3 configurations in squid.conf, but after you enter your > username and password then select sign-in, it goes to a blank page. > > header_access Accept-Encoding deny all What worked for us is : acl hotmail_domains dstdomain .hotmail.msn.com header_access Accept-Encoding deny hotmail_domains Please try, this; literally in squid.conf. Don't forget : % squid -k reconfigure afterwards. And or first check squid.conf with : % squid -k parse (too). (before reconfigure) > > > acl hotmail_domains dstdomain .hotmail.msn.com .hotmail.com > acl ie6 browser MSIE[[:space:]]6 > header_access Accept-Encoding deny ie6 hotmail_domains > > > acl hotmail dstdomain .hotmail.com > always_direct allow hotmail > This is probably meaningless; it is only valid when parent and or peers are being used. > I have also tried the iptables command to change the MTU size: > /sbin/iptables -t nat -A POSTROUTING -p tcp -m tcp --tcp-flags SYN,RST > SYN -j TCPMSS --set-mss 1476 > > When I direct the browser to the proxy it works fine, but I > unfortunately must use an interception proxy. Has anyone got this > fixed? > > > Thanks, > Bryan >
