Hi Amos I obfuscated the fully qual named of my proxy, so yes it is definitely from my proxy. "Clearswift SECURE Web Gateway" is the internal proxy system which chains to the Squid CSwebGW------------>Squid---------------------->http://www.microsofthup.com I have tried direct client to the Squid and same issues User------------>Squid---------------------->http://www.microsofthup.com thanks Ivan On Fri, Jun 17, 2011 at 11:49 AM, Amos Jeffries <squid3@xxxxxxxxxxxxx> wrote: > On 17/06/11 11:54, Ivan . wrote: >> >> Hi, >> >> I am having a issue accessing a MS site, which is actually hosted via >> Digitalriver content network, and via tcpdump I can see allot of >> redirects, 301 perm moved etc. So I am wondering if someone can try >> via their squid setup, or if any has any ideas what is at play. >> >> No issues when going to the site direct >> >> http://www.microsofthup.com/ >> >> Seem to have some load balancers at work " >> BIGipServerp-dc1-c9-commerce5-pod1-pool4=2654814218.20480.0000;" >> >> Some greps from the access log >> >> 1308202767.527 746 10.xxx.xxx.xxx TCP_MISS/301 728 GET >> http://microsofthup.com/ - DIRECT/209.87.184.136 text/html [Accept: >> image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, >> application/x-shockwave-flash, application/x-ms-application, >> application/x-ms-xbap, application/vnd.ms-xpsdocument, >> application/xaml+xml, application/vnd.ms-excel, >> application/vnd.ms-powerpoint, application/msword, >> */*\r\nAccept-Language: en-au\r\nUA-CPU: x86\r\nUser-Agent: >> Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; >> .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET >> CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2; .NET4.0C; >> .NET4.0E)\r\nHost: microsofthup.com\r\nCookie: >> op390chooserhomedefaultpagesgum=a0o51kr1uy275pp0hk3dqa2766p06y38i56d7; >> >> fcP=C=2&T=1307338680214&DTO=1306305944285&U=717377145&V=1307338680214\r\nVia: >> 1.0 Clearswift SECURE Web Gateway\r\n] [HTTP/1.0 301 Moved >> Permanently\r\nDate: Thu, 16 Jun 2011 05:16:24 GMT\r\nContent-Length: >> 191\r\nContent-Type: text/html\r\nCache-Control: >> no-cache\r\nConnection: keep-alive\r\nProxy-Connection: >> keep-alive\r\nServer: Microsoft-IIS/6.0\r\nPragma: >> no-cache\r\nLocation: >> http://www.microsofthup.com/hupus/chooser.aspx\r\nVia: 1.1 >> dc1c5cache01 (NetCache NetApp/6.0.3)\r\nSet-Cookie: >> BIGipServerp-dc1-c9-commerce5-pod1-pool4=2654814218.20480.0000; >> path=/\r\n\r] >> >> 1308202718.027 231 10.xxx.xxx.xxx TCP_MISS/200 2031 GET >> >> http://c5.img.digitalriver.com/gtimages/store-mc-uri/mshup/assets/local//en-US/css/style.css >> - DIRECT/122.252.43.91 text/css [Host: >> c5.img.digitalriver.com\r\nUser-Agent: Mozilla/5.0 (Windows; U; >> Windows NT 5.1; en-GB; rv:1.9.2.2) Gecko/20100316 Firefox/3.6.2 (.NET >> CLR 3.5.30729)\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: >> en-gb,en;q=0.5\r\nAccept-Charset: >> ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\nReferer: >> >> http://www.microsofthup.com/hupus/chooser.aspx?culture=en-US&resID=TfmRcwoHArEAADX4AfIAAAAb\r\nVia: >> 1.1 Clearswift SECURE Web Gateway\r\n] [HTTP/1.0 200 >> OK\r\nContent-Type: text/css\r\nLast-Modified: Fri, 17 Dec 2010 >> 09:15:43 GMT\r\nETag: "8089fcfaca9dcb1:384"\r\nServer: >> Microsoft-IIS/6.0\r\nX-Server-Name: dc1c5web07\r\nP3P: CP="CAO DSP >> TAIa OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA PRE >> LOC"\r\nX-Powered-By: ASP.NET\r\nDate: Thu, 16 Jun 2011 05:15:34 >> GMT\r\nContent-Length: 1531\r\nConnection: keep-alive\r\n\r] >> > > Both of those are successful transfers through your Squid. > >> >> This is the squid error >> >> >> ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ >> ERROR >> The requested URL could not be retrieved >> While trying to retrieve the URL: >> http://www.microsofthup.com/hupus/chooser.aspx? >> The following error was encountered: >> >> Read Error >> >> The system returned: >> (104) Connection reset by peer >> An error condition occurred while reading data from the network. >> Please retry your request. >> Your cache administrator is root. >> Generated Fri, 17 Jun 2011 00:03:18 GMT by proxy (squid/2.6.STABLE21) > > Are you sure this is being generated by your proxy? > "proxy" is not a FQDN indicating ownership, so it is a bit hard to tell who > it belongs to. > "root" is an ambiguous email address, so good luck getting in touch with > whoever runs it to report the problem. > > > Your log indicates requests/replies are coming through a proxy with domain > name "Clearswift SECURE Web Gateway" which is clearly also not available in > DNS. So it could be broken in any number of other ways than just its FQDN > hostname. > > > Amos > -- > Please be using > Current Stable Squid 2.7.STABLE9 or 3.1.12 > Beta testers wanted for 3.2.0.8 and 3.1.12.2 >
