Well, I'm not too familiar with tcpdump. It was tcpdump -i any host 10.0.2.150 -w tcpdump.txt I'll be glad to remove the range_offset_limit -1 line. I'd added it because the Squid wiki page @ http://wiki.squid-cache.org/SquidFaq/WindowsUpdate specifies it when wanting to cache updates. I wasn't after caching -- only after "working" so I thought I'd try it either way. -----Original Message----- From: Eliezer Croitoru [mailto:eliezer@xxxxxxxxxxxx] Sent: Thursday, January 31, 2013 4:38 PM To: squid-users@xxxxxxxxxxxxxxx Subject: Re: Windows Updates on 3.2.6 On 1/31/2013 6:11 PM, Dave Burkholder wrote: > Here are links to squid access.log > > www.thinkwelldesigns.com/access_log.txt Ok seems like pretty normal to me from squid point of view. I have the same lines which windows tries to access and dosn't exist. > > And tcpdump for 10.0.2.150 > > www.thinkwelldesigns.com/tcpdump.zip In what format is it? I have tried to read it with wireshark and it seems like corrupted or something. I think I do understand what is the problem from squid.conf. range_offset_limit -1 Remove it.. try to make the proxy as simple as it is. The above can cause windows to not fetch objects and when fails tries to use SSL which I dont know if it can or cannot use. Eliezer > > Thanks, > > Dave > > -----Original Message----- > From: Dave Burkholder > Sent: Thursday, January 31, 2013 10:29 AM > To: Eliezer Croitoru; squid-users@xxxxxxxxxxxxxxx > Subject: RE: Windows Updates on 3.2.6 > > Hello Eliezer, > > Thank you for your reply. My exact problem is that Windows Updates do not install or even download at all. > > The squid RPMs were built by my partner in 2 architectures: Centos 5 i386 and Centos 6 x86_64. Same nonfunctioning behavior in both. > > I didn't realize you had a squid repo; I'd be glad to try your builds if they're compatible. Where is your repo hosted? > > > I had included the conf file in my first email, but a link would be better: > > www.thinkwelldesigns.com/squid_conf.txt > > > ###################################################################### > ######### > squid -v: (Centos 6 x86_64) > ---------------------------------------------------------------------- > --------- > Squid Cache: Version 3.2.6 > configure options: '--host=x86_64-unknown-linux-gnu' '--build=x86_64-unknown-linux-gnu' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib64' '--libexecdir=/usr/libexec' '--sharedstatedir=/var/lib' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--exec_prefix=/usr' '--libexecdir=/usr/lib64/squid' '--localstatedir=/var' '--datadir=/usr/share/squid' '--sysconfdir=/etc/squid' '--with-logdir=$(localstatedir)/log/squid' '--with-pidfile=$(localstatedir)/run/squid.pid' '--disable-dependency-tracking' '--enable-arp-acl' '--enable-follow-x-forwarded-for' '--enable-auth' '--enable-auth-basic=DB,LDAP,MSNT,MSNT-multi-domain,NCSA,NIS,PAM,POP3,RADIUS,SASL,SMB,getpwnam' '--enable-auth-ntlm=smb_lm,fake' '--enable-auth-digest=file,LDAP,eDirectory' '--enable-auth-negotiate=kerberos' '--enable-exte rn > al-acl-helpers=ip_user,ldap_group,session,unix_group,wbinfo_group' '--enable-cache-digests' '--enable-cachemgr-hostname=localhost' '--enable-delay-pools' '--enable-epoll' '--enable-http-violations' '--enable-icap-client' '--enable-ident-lookups' '--enable-linux-netfilter' '--enable-referer-log' '--enable-removal-policies=heap,lru' '--enable-snmp' '--enable-ssl' '--enable-ssl-crtd' '--enable-storeio=aufs,diskd,ufs' '--enable-useragent-log' '--enable-wccpv2' '--enable-esi' '--enable-ecap' '--with-aio' '--with-default-user=squid' '--with-filedescriptors=16384' '--with-dl' '--with-openssl' '--with-pthreads' 'build_alias=x86_64-unknown-linux-gnu' 'host_alias=x86_64-unknown-linux-gnu' 'CFLAGS=-O2 -g -fpie' 'CXXFLAGS=-O2 -g -fpie' 'PKG_CONFIG_PATH=/usr/lib64/pkgconfig:/usr/share/pkgconfig' > > ###################################################################### > ######### > squid -v: (Centos 5 i386) > ---------------------------------------------------------------------- > --------- > Squid Cache: Version 3.2.6 > configure options: '--host=i686-redhat-linux-gnu' '--build=i686-redhat-linux-gnu' '--target=i386-redhat-linux' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib' '--libexecdir=/usr/libexec' '--sharedstatedir=/usr/com' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--exec_prefix=/usr' '--libexecdir=/usr/lib/squid' '--localstatedir=/var' '--datadir=/usr/share/squid' '--sysconfdir=/etc/squid' '--with-logdir=$(localstatedir)/log/squid' '--with-pidfile=$(localstatedir)/run/squid.pid' '--disable-dependency-tracking' '--enable-arp-acl' '--enable-follow-x-forwarded-for' '--enable-auth' '--enable-auth-basic=LDAP,MSNT,NCSA,PAM,SMB,YP,getpwnam,multi-domain-NTLM,SASL,DB,POP3,squid_radius_auth' '--enable-auth-ntlm=smb_lm,no_check,fakeauth' '--enable-auth-digest=password,ldap,eDirectory' '-- en > able-auth-negotiate=squid_kerb_auth' '--enable-external-acl-helpers=ip_user,ldap_group,session,unix_group,wbinfo_group' '--enable-cache-digests' '--enable-cachemgr-hostname=localhost' '--enable-delay-pools' '--enable-epoll' '--enable-icap-client' '--enable-ident-lookups' '--with-large-files' '--enable-linux-netfilter' '--enable-referer-log' '--enable-removal-policies=heap,lru' '--enable-snmp' '--enable-ssl' '--enable-ssl-crtd' '--enable-storeio=aufs,diskd,ufs' '--enable-underscores' '--enable-useragent-log' '--enable-wccpv2' '--enable-esi' '--with-aio' '--with-default-user=squid' '--with-filedescriptors=16384' '--with-dl' '--with-openssl' '--with-pthreads' '--with-winbind-auth-challenge' '--enable-http-violations' 'CFLAGS=-march=i686' 'CXXFLAGS=-march=i686' 'build_alias=i686-redhat-linux-gnu' 'host_alias=i686-redhat-linux-gnu' 'target_alias=i386-redhat-linux' 'LDFLAGS=-pie' 'PKG_CONFIG_PATH=/usr/lib/pkgconfig:/usr/share/pkgconfig' --enabl e-l > td l-convenience > > I'll send access.log data in a few minutes. > > Again, thank you so much for your reply. > > Dave > > > -----Original Message----- > From: Eliezer Croitoru [mailto:eliezer@xxxxxxxxxxxx] > Sent: Thursday, January 31, 2013 10:04 AM > To: squid-users@xxxxxxxxxxxxxxx > Subject: Re: Windows Updates on 3.2.6 > > Squid access logs? > What is the exact problem? you can't download at all or there is a problem? > Please share your squid.conf and "squid -v" output. > Where did you got your RPM? from my repo? > > Please share more info and if you can get tcpdump output this can really help to find your problem. > Note that I am using 3.2.6 + 3.3 + 3.HEAD on CentOS 6 and it works fine with windows updates as for right now. > > Regards, > Eliezer > > On 1/31/2013 4:54 PM, Dave Burkholder wrote: >> Are there any comments here? I've tried adding the following options >> fromhttp://wiki.squid-cache.org/SquidFaq/WindowsUpdate (even though >> I don't especially want to cache updates) >> >> range_offset_limit -1 >> maximum_object_size 200 MB >> quick_abort_min -1 >> >> No joy. I've tried transparent & standard proxy modes. Not using authentication anywhere. I've now tested on 4 LANs behind Squid 3.2.6 on CentOS 5 & 6 machines and WU isn't working on any of them. >> >> On one machine I downgraded to 3.2.0.18 and was able to get WU to work. Was there a regression since 3.2.0.18? >> >> Thanks, >> >> Dave > -- Eliezer Croitoru
