Amos Jeffries пишет:
Alex Gau wrote:
Amos Jeffries пишет:
Alex Gau wrote:
Hello,
we use squid3.0 stable4 on SLES10.
It was compiled with followed parameters:
./configure --prefix=/usr/local/squid3 --enable-icap-client
--enable-default-err-language=Russian-1251
--enable-err-languages="Russian-1251 Russian-koi8-r"
--enable-linux-netfilter --disable-ident-lookups
--with-default-user=drweb
When we try to view URL http://wiki.mozilla-russia.org through the
proxy, we receive error message.
We enter squid in debug mode and receive followed messages:
1208927537.022 505 xxx.xxx.xxx.xxx TCP_MISS/302 14865 GET
http://wiki.mozilla-russia.org/ - DIRECT/195.18.35.94
application/xhtml+xml [Host: wiki.mozilla-russia.org\r\nUser-Agent:
Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.8.1.12)
Gecko/20080201 Firefox/2.0.0.12\r\nAccept:
text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\nAccept-Language:
ru-ru,ru;q=0.8,en-us;q=0.5,en;q=0.3\r\nAccept-Encoding:
gzip,deflate\r\nAccept-Charset:
windows-1251,utf-8;q=0.7,*;q=0.7\r\nKeep-Alive:
300\r\nProxy-Connection: keep-alive\r\n] [HTTP/1.1 302 Moved
Temporarily\r\nServer: nginx/0.6.29\r\nDate: Wed, 23 Apr 2008
06:15:12 GMT\r\nContent-Type: application/xhtml+xml;
charset=UTF-8\r\nConnection: close\r\nX-Powered-By:
PHP/4.4.7\r\nSet-Cookie:
PHPSESSID=3118ffe35f83d8e5b71612b1752c3a92; path=/\r\nExpires: Thu,
19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache,
must-revalidate, post-check=0, pre-check=0\r\nPragma:
no-cache\r\nLocation:
http://aaa.bbb.ccc.ddd/index.php/ru/%25D0%2591%25D0%25B0%25D0%25B7%25D0%25B0%2520%25D0%25B7%25D0%25BD%25D0%25B0%25D0%25BD%25D0%25B8%25D0%25B9%2520%25D0%25BF%25D1%2580%25D0%25BE%25D0%25B5%25D0%25BA%25D1%2582%25D0%25B0%2520Mozilla%2520%25D0%25A0%25D0%25BE%25D1%2581%25D1%2581%25D0%25B8%25D1%258F\r\n\r]
1208927537.187 144 xxx.xxx.xxx.xxx TCP_MISS/503 1688 GET
http://aaa.bbb.ccc.ddd/index.php/ru/%D0%91%D0%B0%D0%B7%D0%B0%20%D0%B7%D0%BD%D0%B0%D0%BD%D0%B8%D0%B9%20%D0%BF%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B0%20Mozilla%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D1%8F
- DIRECT/aaa.bbb.ccc.ddd text/html [Host:
77.108.86.4\r\nUser-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1;
ru; rv:1.8.1.12) Gecko/20080201 Firefox/2.0.0.12\r\nAccept:
text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\nAccept-Language:
ru-ru,ru;q=0.8,en-us;q=0.5,en;q=0.3\r\nAccept-Encoding:
gzip,deflate\r\nAccept-Charset:
windows-1251,utf-8;q=0.7,*;q=0.7\r\nKeep-Alive:
300\r\nProxy-Connection: keep-alive\r\n] [HTTP/1.0 503 Service
Unavailable\r\nServer: squid/3.0.STABLE4\r\nMime-Version:
1.0\r\nDate: Wed, 23 Apr 2008 05:12:17 GMT\r\nContent-Type:
text/html\r\nContent-Length: 1322\r\nExpires: Wed, 23 Apr 2008
05:12:17 GMT\r\nX-Squid-Error: ERR_CONNECT_FAIL 111\r\n\r]
As you can see squid put IP: aaa.bbb.ccc.ddd (a squid ip address)
to the dynamic link instead of real domain name of the site
(wiki.mozilla-russia.org)
We don't understand why?
Please, help us to solve this problem.
Best Regards,
Alex
Not squids fault. The "Server: nginx/0.6.29" is sending a 302 out
with bad information.
What happening there is:
-> First request has domain + URI.
<- Squid contacts 195.18.35.94 for data
-> 195.18.35.94 (nginx/0.6.29) redirects: 302
http://aaa.bbb.ccc.ddd...
-> Second request has aaa.bbb.ccc.ddd + new URI
<- Squid contacts aaa.bbb.ccc.ddd for data
-> failure.
If the server 195.18.35.94 is yours it needs its redirector fixed.
Amos
Hello, Amos.
Thank you for your answer.
The server 195.18.35.94 is not ours. It is
http://wiki.mozilla-russia.org.
We think that the problem in http://wiki.mozilla-russia.org, but we
are not sure.
I allready understood that 195.18.35.94 redirect the request.
I don't understand why.
In direct request (without squid (aaa.bbb.ccc.ddd)) the server
195.18.35.94 (http://wiki.mozilla-russia.org) redirect request to
itself:
http://wiki.mozilla-russia.org/index.php/ru/%D0%91%D0%B0%D0%B7%D0%B0%20%D0%B7%D0%BD%D0%B0%D0%BD%D0%B8%D0%B9%20%D0%BF%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B0%20Mozilla%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D1%8F
When we use squid it redirect to squid ip:
http://aaa.bbb.ccc.ddd/index.php/ru/%D0%91%D0%B0%D0%B7%D0%B0%20%D0%B7%D0%BD%D0%B0%D0%BD%D0%B8%D0%B9%20%D0%BF%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B0%20Mozilla%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D1%8F
Of couse, the URL http://aaa.bbb.ccc.ddd/index.php/ru/...... is not
exist.
Alex.
I managed to replicate the behaviour without using squid at all.
The ngix server appear to be dying whenever it receives
X-Forwarded-For: header.
You can temporarily plug this break with:
acl brokenXFF dstdomain .mozilla-russia.org
request_header_access X-Forwarded-For deny brokenXFF
Amos
Thank you for your answer, Amos.
After adding the acl you've wrote all works fine.