My apologies, I just realized the change to user:password wasn't in effect. With that change in effect, the same issue arises: 2022/07/15 15:18:52.583 kid1| 11,2| HttpTunneler.cc(328) handleResponse: Tunnel Server conn714 local=10.56.1.3:41778 remote=18.213.126.143:443 FIRSTUP_PARENT FD 16 flags=1 2022/07/15 15:18:52.583 kid1| 11,2| HttpTunneler.cc(329) handleResponse: Tunnel Server RESPONSE: --------- HTTP/1.1 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="Secure Browsing" Date: Fri, 15 Jul 2022 15:18:52 GMT Content-Length: 0 Connection: close ---------- 2022/07/15 15:18:52.583 kid1| 83,3| HttpTunneler.cc(350) bailOnResponseError: unsupported CONNECT response status code [state:w FD 16 job1409] 2022/07/15 15:18:52.583 kid1| TCP connection to gateway.goguardian.com/443 failed current master transaction: master457 Tunnel Server REQUEST is not found in the last 1024 lines of the cache. 657898392.220 119 10.125.15.10 TCP_TUNNEL/407 0 CONNECT aus5.mozilla.org:443 johnathan.hasty@xxxxxxxxxxxxxxxxxxxxxxx FIRSTUP_PARENT/52.204.217.22 - "ws-iid=187" "ws-mac=00:00:00:00:00:00" "ws-duration=59" "ws-timing=0" "ws-mtime=0" "ws-scanflags=63" "ws-categories=70368744177664" "ws-trusted=1" "ws-level=1" "ws-verdict=0" "ws-policy=default" "ws-member=default" "ws-module=2" "ws-msgtype=2" "ws-param1=None" "ws-param2=None" "ws-debug=None" "squid-gt-st=0" 1657898392.220 0 10.125.15.10 NONE_NONE/000 0 - error:transaction-end-before-headers - HIER_NONE/- - "ws-iid=-" "ws-mac=-" "ws-duration=-" "ws-timing=-" "ws-mtime=-" "ws-scanflags=-" "ws-categories=-" "ws-trusted=-" "ws-level=-" "ws-verdict=-" "ws-policy=-" "ws-member=-" "ws-module=-" "ws-msgtype=-" "ws-param1=-" "ws-param2=-" "ws-debug=-" "squid-gt-st=197" 1657898428.972 274 10.125.15.10 TCP_MISS/407 314 GET http://detectportal.firefox.com/canonical.html johnathan.hasty@xxxxxxxxxxxxxxxxxxxxxxx FIRSTUP_PARENT/52.204.217.22 - "ws-iid=186" "ws-mac=00:00:00:00:00:00" "ws-duration=59831" "ws-timing=0" "ws-mtime=0" "ws-scanflags=63" "ws-categories=8589934592" "ws-trusted=0" "ws-level=1" "ws-verdict=0" "ws-policy=default" "ws-member=default" "ws-module=2" "ws-msgtype=3" "ws-param1=None" "ws-param2=None" "ws-debug=None" "squid-gt-st=334" 1657898429.063 22 10.125.15.10 TCP_MISS/407 314 GET http://detectportal.firefox.com/canonical.html johnathan.hasty@xxxxxxxxxxxxxxxxxxxxxxx FIRSTUP_PARENT/52.204.217.22 - "ws-iid=190" "ws-mac=00:00:00:00:00:00" "ws-duration=90" "ws-timing=0" "ws-mtime=0" "ws-scanflags=63" "ws-categories=8589934592" "ws-trusted=0" "ws-level=1" "ws-verdict=0" "ws-policy=default" "ws-member=default" "ws-module=2" "ws-msgtype=3" "ws-param1=None" "ws-param2=None" "ws-debug=None" "squid-gt-st=334" This is new, now that basic auth is being used: 2022/07/15 15:23:22.652 kid1| 11,2| HttpTunneler.cc(177) writeRequest: Tunnel Server REQUEST: conn858 local=10.56.1.3:40518 remote=52.44.107.1:443 FIRSTUP_PARENT FD 12 flags=1: ---------- CONNECT spocs.getpocket.com:443 HTTP/1.1 Host: spocs.getpocket.com:443 Via: 1.1 poc-websafety.usi.uncommonschools.org (squid/5.5) X-Forwarded-For: 10.125.15.10 Proxy-Authorization: Basic [redacted] Cache-Control: max-age=259200 Connection: close ---------- Best Regards, Johnathan _______________________________________________________ Johnathan Hasty Senior DevOps Engineer Uncommon Schools C: 989.366.1672 Uncommon Schools | Change History Website | Facebook | Twitter | LinkedIn | Apply Now -----Original Message----- From: squid-users <squid-users-bounces@xxxxxxxxxxxxxxxxxxxxx> On Behalf Of Johnathan Hasty Sent: Friday, July 15, 2022 11:12 AM To: Alex Rousskov <rousskov@xxxxxxxxxxxxxxxxxxxxxxx>; squid-users@xxxxxxxxxxxxxxxxxxxxx Subject: Re: Upstream Proxy Hi Alex, thank you so much for the response! I've changed to user:password and still face the same issues. Here's Tunnel Server REQUEST from last 1024 lines 2022/07/15 14:55:52.281 kid1| 11,2| https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fHttpTunneler.cc&c=E,1,Z9dzp5fOyrtq9H8SuN_kjWUwA9meKEw9YTNtJOtZVua0QbLoGTcYZB0Juot-nDUHTBGxoVRIL66C5TwGbWyaIFcbtuVTOJ8OQJBO20Yw&typo=1(177) writeRequest: Tunnel Server REQUEST: conn886 local=10.56.1.3:40264 remote=52.44.107.1:443 FIRSTUP_PARENT FD 12 flags=1: 2022/07/15 14:55:52.656 kid1| 11,2| https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fHttpTunneler.cc&c=E,1,HY07zjejV4QLH46NO0UbipDxK32eEyC-_XWuIrR56wOokWY-W6vp5jCHPesccsEACLeQmAh8tZaTWiB4Pxj5mMRuXoW4kvIxV6tFCfs-bQzMmVyBFTZr&typo=1(177) writeRequest: Tunnel Server REQUEST: conn898 local=10.56.1.3:41554 remote=18.213.126.143:443 FIRSTUP_PARENT FD 12 flags=1: 2022/07/15 14:55:52.736 kid1| 11,2| https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fHttpTunneler.cc&c=E,1,on0TtYjsox8RcNeGWrDAl740DeE4uLoTByykbkBq42LUtj0Sry9O6BgaZIYYr1hYC488GKo6Mj2WJOMXP_1t-Mb0SAYPJZo24YeWRjHkBs1e&typo=1(328) handleResponse: Tunnel Server conn898 local=10.56.1.3:41554 remote=18.213.126.143:443 FIRSTUP_PARENT FD 12 flags=1 2022/07/15 14:55:52.736 kid1| 11,2| https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fHttpTunneler.cc&c=E,1,gHGxITMcEdqRsSj7pIyD37m9ggrul1QhDGuEvGiY8VhK8PyNJgJ-GrMOe-Y2P22_PgWhQ74-Jd3khuClFNFesAh5mQdLkylOM39HidSecLGnP7yqMg,,&typo=1(329) handleResponse: Tunnel Server RESPONSE: --------- HTTP/1.1 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="Secure Browsing" Date: Fri, 15 Jul 2022 14:55:52 GMT Content-Length: 0 Connection: close ---------- 2022/07/15 14:55:52.736 kid1| 83,3| https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fHttpTunneler.cc&c=E,1,OfKfh6KVQ4Zg9b4OcbJfAV3TjbqMtmIWTStHRwfB5Q7H0T22Wm1vUPBcyy0E-42jPvhHKe_7ff8l60HXzIMTg2W2Z-WXDrPaKJydxT9MglsyXbq_9A,,&typo=1(350) bailOnResponseError: unsupported CONNECT response status code [state:w FD 12 job1778] 2022/07/15 14:55:52.736 kid1| TCP connection to https://linkprotect.cudasvc.com/url?a=https%3a%2f%2f%2f%2fgateway.goguardian.com%2f443&c=E,1,Y076ZQWwoNFj_D-NMFmLm-CdcOxbvA0LdZvQUwK9KwDdNMa-GTwlM9mtuJ1ODpTlDCr9h0eoBw6Cjopn5_OSLGO7BwdrfGZMcmbJcKqz-XI,&typo=1 failed current master transaction: master584 2022/07/15 14:55:52.736 kid1| 5,3| https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fcomm.cc&c=E,1,L4rV40LaPYwokyYaPk3qQTS8hrCmiW_HWq8hVp64-WMs1uaDRlbLyKMuJGrDBKatDLoy0Yx99-T797SfhDGNKQfbslPfTaHNYOzqkUbQnkAJqYCXbMJpoeQS&typo=1(597) commUnsetConnTimeout: Remove timeout for conn898 local=10.56.1.3:41554 remote=18.213.126.143:443 FIRSTUP_PARENT FD 12 flags=1 2022/07/15 14:55:52.736 kid1| 5,3| https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fcomm.cc&c=E,1,zWT3K3_c9lemfAx22YB73QSI-HefXjfwOYeXxOFglfVKtYKv1R4x8kvfNmhPJz3gsFiu4DvAVfLl-aE5jgI298VNSjgwNloSL0CT4jaZl1UPaqI_GDRpEKiW&typo=1(571) commSetConnTimeout: conn898 local=10.56.1.3:41554 remote=18.213.126.143:443 FIRSTUP_PARENT FD 12 flags=1 timeout -1 1657896950.569 75 10.125.15.10 NONE_NONE/200 0 CONNECT content-signature-2.cdn.mozilla.net:443 johnathan.hasty@xxxxxxxxxxxxxxxxxxxxxxx HIER_NONE/- - "ws-iid=191" "ws-mac=00:00:00:00:00:00" "ws-duration=144" "ws-timing=1" "ws-mtime=0" "ws-scanflags=63" "ws-categories=70368744177664" "ws-trusted=1" "ws-level=1" "ws-verdict=0" "ws-policy=default" "ws-member=default" "ws-module=2" "ws-msgtype=2" "ws-param1=None" "ws-param2=None" "ws-debug=None" "squid-gt-st=3252" 1657896950.575 215 10.125.15.10 TCP_MISS/407 314 GET https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fdetectportal.firefox.com%2fcanonical.html&c=E,1,x9JEJRejqd7-bYl4jZp1ckxC2ZGlbdi_UQPpq6hge5yRQMX85D-dtgFjvQyNaG2pqqGTUedTgAU3y1dLdSi2VR4lBQ17zSzKw4emVG9gDg,,&typo=1 johnathan.hasty@xxxxxxxxxxxxxxxxxxxxxxx FIRSTUP_PARENT/52.204.217.22 - "ws-iid=184" "ws-mac=00:00:00:00:00:00" "ws-duration=2864" "ws-timing=0" "ws-mtime=0" "ws-scanflags=63" "ws-categories=8589934592" "ws-trusted=0" "ws-level=1" "ws-verdict=0" "ws-policy=default" "ws-member=default" "ws-module=2" "ws-msgtype=3" "ws-param1=None" "ws-param2=None" "ws-debug=None" "squid-gt-st=3331" 1657896951.018 288 10.125.15.10 TCP_MISS/407 314 GET https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fdetectportal.firefox.com%2fcanonical.html&c=E,1,8pVmhR-qRuZ17zuQsuL9C-Jmr_jfpuoQjWKehR3jxDlILGeouM1igPMKABi4IoX8pnbEuLx7ePCYJM8CVME2wVp5IyWKLgwkk-Qt9pvyP3AZ&typo=1 johnathan.hasty@xxxxxxxxxxxxxxxxxxxxxxx FIRSTUP_PARENT/52.204.217.22 - "ws-iid=194" "ws-mac=00:00:00:00:00:00" "ws-duration=445" "ws-timing=0" "ws-mtime=0" "ws-scanflags=63" "ws-categories=8589934592" "ws-trusted=0" "ws-level=1" "ws-verdict=0" "ws-policy=default" "ws-member=default" "ws-module=2" "ws-msgtype=3" "ws-param1=None" "ws-param2=None" "ws-debug=None" "squid-gt-st=334" 1657896951.082 2 10.125.15.10 TCP_DENIED/407 4390 GET https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fdetectportal.firefox.com%2fcanonical.html&c=E,1,I6mgvjdyuvjzSYC9zixVVoCWTsi8K4Eodu57TsF02izb474NFQv2bYZ9SkSW7ByIa3uCmaaFUkqX8F6qkLsadHEqQHEMzjkWBJMOLBM02G1FHLr1IdcS228KMX0,&typo=1 - HIER_NONE/- text/html "ws-iid=-" "ws-mac=00:00:00:00:00:00" "ws-duration=-" "ws-timing=-" "ws-mtime=-" "ws-scanflags=-" "ws-categories=-" "ws-trusted=-" "ws-level=-" "ws-verdict=-" "ws-policy=-" "ws-member=-" "ws-module=-" "ws-msgtype=-" "ws-param1=-" "ws-param2=-" "ws-debug=-" "squid-gt-st=334" 1657896951.388 820 10.125.15.10 TCP_TUNNEL/407 0 CONNECT content-signature-2.cdn.mozilla.net:443 johnathan.hasty@xxxxxxxxxxxxxxxxxxxxxxx FIRSTUP_PARENT/18.213.126.143 - "ws-iid=192" "ws-mac=00:00:00:00:00:00" "ws-duration=65" "ws-timing=0" "ws-mtime=0" "ws-scanflags=63" "ws-categories=70368744177664" "ws-trusted=1" "ws-level=1" "ws-verdict=0" "ws-policy=default" "ws-member=default" "ws-module=2" "ws-msgtype=2" "ws-param1=None" "ws-param2=None" "ws-debug=None" "squid-gt-st=0" 1657896951.389 0 10.125.15.10 NONE_NONE/000 0 - error:transaction-end-before-headers - HIER_NONE/- - "ws-iid=-" "ws-mac=-" "ws-duration=-" "ws-timing=-" "ws-mtime=-" "ws-scanflags=-" "ws-categories=-" "ws-trusted=-" "ws-level=-" "ws-verdict=-" "ws-policy=-" "ws-member=-" "ws-module=-" "ws-msgtype=-" "ws-param1=-" "ws-param2=-" "ws-debug=-" "squid-gt-st=517" 1657896951.468 211 10.125.15.10 TCP_MISS/407 314 GET https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fdetectportal.firefox.com%2fcanonical.html&c=E,1,m6f0ut953qjWTR0yIgxVVetjMjKfJGpwvKazqFCK77Li8y-m5jvK1tJrnk2ADc5EDKV0m-YcDqvoiIcsieBuzl1mVtfR9OaE4rq3rcCI_sc1&typo=1 johnathan.hasty@xxxxxxxxxxxxxxxxxxxxxxx FIRSTUP_PARENT/52.204.217.22 - "ws-iid=196" "ws-mac=00:00:00:00:00:00" "ws-duration=448" "ws-timing=0" "ws-mtime=0" "ws-scanflags=63" "ws-categories=8589934592" "ws-trusted=0" "ws-level=1" "ws-verdict=0" "ws-policy=default" "ws-member=default" "ws-module=2" "ws-msgtype=3" "ws-param1=None" "ws-param2=None" "ws-debug=None" "squid-gt-st=3331" Best Regards, Johnathan _______________________________________________________ Johnathan Hasty Senior DevOps Engineer Uncommon Schools C: 989.366.1672 Uncommon Schools | Change History Website | Facebook | Twitter | LinkedIn | Apply Now -----Original Message----- From: squid-users <squid-users-bounces@xxxxxxxxxxxxxxxxxxxxx> On Behalf Of Alex Rousskov Sent: Friday, July 15, 2022 10:14 AM To: squid-users@xxxxxxxxxxxxxxxxxxxxx Subject: Re: Upstream Proxy On 7/15/22 09:51, Johnathan Hasty wrote: > I’ve been trying to hand off credentials to our upstream proxy > GoGuardian and have been facing many issues. What HTTP authentication method(s) or scheme(s) does your upstream proxy support or require? > HTTP/1.1 407 Proxy Authentication Required > Proxy-Authenticate: Basic realm="Secure Browsing" This is not my area of expertise, but the above error message suggests that the proxy wants to do HTTP Basic authentication, but you are configuring Squid to use NEGOTIATE, so perhaps you should switch to Basic as the next step in your triage, just to get something working (cache_peer ... login=user:password)? Sharing what CONNECT request headers Squid sends to the parent proxy may be useful as well, but do not use any secrets in your test traffic if you are going to share such details. If you still have that cache.log, look for "Tunnel Server REQUEST" associated with conn2126. HTH, Alex. > Has anyone gotten Squid to successfully hand off to GoGuardian as > their upstream proxy? > > Advanced ACLs: > cache_peer > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgateway.goguardian > .com&c=E,1,4mgHTezdkg3XvogUnlMp7R_aPvVQ_k4b-ypUDY-r87n90TNewVfWO2G7yD8 > KkbTZsmGhDBWiU-1QXOx9rTzbo3OKnuac4cWw9FtJNrmREkILe6q5FyICs2IE&typo=1 > parent 443 0 no-query no-digest no-netdb-exchange connect-timeout=60 > default tls login=NEGOTIATE:principal_name > sslcapath=/usr/local/share/ca-certificates/ > > cache_peer_access > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgateway.goguardian > .com&c=E,1,tXvnr1Bt31o7q-hOKeOXTPxzXW9DCW5ZYUwuJ7_zipiM8d7kDnxhExjas6S > ZtisCB5rLGfXHr7wV5cw2SA_mQkr1n51atsqVDx1MnZZDHTRyJzW3bUc,&typo=1 allow > all > > never_direct allow all > > Log snipit: > 2022/06/30 15:22:49.198 kid1| 5,3| > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fIoCallback.cc&c=E, > 1,wvOZEJacIjm7MMfIw4zokPxqyPEbXkGtlZd2OjPZnBaBwKYd4JhEY7iqqSOFpOEQkLML > LliW5vfaXpVJZzleoEi_t79ZlTQE310p_aOzboKLmD8,&typo=1 > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fIoCallback.cc&c=E > ,1,tkT-dyHiVAqZoP7tVfxLk3RVYLyb_avXd27fXGqjJMTzNKPAGHmmvW9pXYcC425jST0 > ZYFFPwV4uHf3fKHuux40xkg9kXWTzOHPdGV5BNGbILyA,&typo=1&ancr_add=1>(112) > finish: called for conn2126 local=10.56.1.3:59674 > <http://10.56.1.3:59674> remote=18.213.126.143:443 > <http://18.213.126.143:443> FIRSTUP_PARENT FD 24 flags=1 (0, 0) > > 2022/06/30 15:22:49.198 kid1| 93,3| > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fAsyncCall.cc&c=E,1 > ,_WyCB5FW8TPrE8VlwBDvbPPARxLAWIrkTCRh_yGS49ECyfGVDnBZtgXtv-rdu8B0ze3XP > Z3nmMQ54CyPGOek_nP2SCr-pr0gbcacRhSqdvzu&typo=1 > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fAsyncCall.cc&c=E, > 1,DRAaKArrkDvBn0UuKG4CO_yXvblIrZBSYHpMpA4H7oRhEraoEzGxMCRwZJpYUsTM63vF > W1Co7R0A33jgXq0EZyS1JcelCRUFXLjE5tQ-siWuoU0bbvc,&typo=1&ancr_add=1>(96 > ) > ScheduleCall: > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fIoCallback.cc&c=E, > 1,CLrXyrjHJJLEUyDzFLyORoYkOc6dPPoPy8mcoj1pWEKli7eNc4SROUZ17OioxqFJZTmw > KRRZPrkGHOKwEkKLPrjc6G5CJ49ccON5eC_SpzBM9RV52CvFHg,,&typo=1 > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fIoCallback.cc&c=E > ,1,bCxz0FVR5jkr6lvnOvzW7e6G8tQBNRlVCCbel3ASQC74rRdj29Wxcj66G7Jit7W9Qdb > z8catGFZxEEbA6bR1lmzxqhKOAxPRfaraHkB0Kq0,&typo=1&ancr_add=1>(131) > will call Http::Tunneler::handleReadyRead(conn2126 > local=10.56.1.3:59674 <http://10.56.1.3:59674> > remote=18.213.126.143:443 <http://18.213.126.143:443> FIRSTUP_PARENT > FD 24 flags=1, > data=0x55849f4926c8) [call548666] > > 2022/06/30 15:22:49.198 kid1| 93,3| > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fAsyncCallQueue.cc& > c=E,1,UGKeO2qrCPs6m2GXyLlhHHkuRUPt2cGShW7xdl1TzFHGzrrU9aCKd6DcFICzKY0F > 2-1vU7bOY71MSvAXS0vdAxZGyOUU9cucfyHU4997ePtvtjXY1YJx&typo=1 > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fAsyncCallQueue.cc > &c=E,1,Ne0y7JJW7fBc_1MyCR5zK2LlFshqIfjXRI-DDHdH5PeY44sZtFyGkRMXgYLpMqH > Yj17Z8PToa57tNyAfAp6EUkVwM3SHgK37ObzCJYBj&typo=1&ancr_add=1>(59) > fireNext: entering Http::Tunneler::handleReadyRead(conn2126 > local=10.56.1.3:59674 <http://10.56.1.3:59674> > remote=18.213.126.143:443 <http://18.213.126.143:443> FIRSTUP_PARENT > FD 24 flags=1, > data=0x55849f4926c8) > > 2022/06/30 15:22:49.198 kid1| 93,3| > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fAsyncCall.cc&c=E,1 > ,0QLPJSskintC4NgwcvTUsoIWjY3qwFYZUU1K2zkIbJ9ApLohmZ0jnOQwLqm3rvsIX3QvY > mtEc3ULAUby0qHSuTA6kfd_J5THUpYmykwPyyr9jlJi&typo=1 > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fAsyncCall.cc&c=E, > 1,o0OzDC7879yEvRQoXyqb11XnNW2f6RJwmh1OP5vYSK4ukmnOFcBmRwtorjA94HFXF2MO > 38TdGcH68cNv4LkX122TcPK1Gwh5xQXTTnzhZCk0N4c,&typo=1&ancr_add=1>(41) > make: make call Http::Tunneler::handleReadyRead [call548666] > > 2022/06/30 15:22:49.198 kid1| 93,3| > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fAsyncJob.cc&c=E,1, > cutfUKQzcFc8e83JGLpUqZzQ5vCaW2rceWZI6_tL1mRPFEUxoNV2bmGFagx9y3wKCmcjXf > T9VZ4000RPweRM3s91K0PDFBkVEIn0GzE2gdmQctpotwQ,&typo=1 > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fAsyncJob.cc&c=E,1 > ,0XdqwD1hHo1N94DousFFhRiwV1YBiWmgmGgnmN3ivpK14dkV-pET6DcSkS2X_BoPOU0rc > ff0Z8GMOM6Se71G_crDtF1V4AWKNym2mjdbxuqKI47TC0GqeVQ,&typo=1&ancr_add=1> > (123) > callStart: Http::Tunneler status in: [state:w FD 24 job3836] > > 2022/06/30 15:22:49.198 kid1| 83,3| > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fSession.cc&c=E,1,p > 7LN0t2ClO-5Nl7j3E3wm40eWwqhcGz_6XzDNmr0Y75br1dSliqvHiNj1GUhOu6kNMD5SgJ > 3gF_MOIcA9eubIR_v1k918fdLhCAgE1mGDPTKBVSZJr0,&typo=1 > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fSession.cc&c=E,1, > 5pwOO8oysGpMl2UW2Xm5P9KkR_3HsM1xcAdWaqJ5W67u3ht9dZCWWqKu-yt1JrDyn7NvUN > MMfVsPhYQQ6rNYqmGGLwDuReUm7h6KmDVvRXk9hFQ,&typo=1&ancr_add=1>(36) > tls_read_method: started for session=0x55849f86d970 > > 2022/06/30 15:22:49.198 kid1| 5,3| > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fRead.cc&c=E,1,yB97 > lUNthiucTCUWsSMfvAziT5CLZb1OZogmu8ScWQnCNzUbYMQw1Zbn2OccWJTYDMmlA6u5-3 > vkeWyX6fQZOx1KGAdNoCK6r23yucjU&typo=1 > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fRead.cc&c=E,1,YRn > dcJz2bAhwR1PdmoQI8sRvkmjGdcO5EIyIIpp4iqwmuG7h-eaf-3lfNBR39-ZO7iGAxJ7K0 > S_cHbSgNtNlm0fjWnm8WFDq58f6THu4DI699rCS7t0,&typo=1&ancr_add=1>(93) > ReadNow: conn2126 local=10.56.1.3:59674 <http://10.56.1.3:59674> > remote=18.213.126.143:443 <http://18.213.126.143:443> FIRSTUP_PARENT > FD > 24 flags=1, size 65535, retval 172, errno 0 > > 2022/06/30 15:22:49.198 kid1| 11,2| > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fHttpTunneler.cc&c= > E,1,qiS1pPbfXZ_Aobf_tcSVbmPX5IRTWWzk7rZklKhiXmyryzKUOjlZnh25vZMqWotwsh > BOfFMiyTiQ2vxFbWn1PAo4Nk9yKW8OYdXAkAEpZg2YDOH4Jb4Fxtuu&typo=1 > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fHttpTunneler.cc&c > =E,1,7NW0kgZsy7tR63h5jeGLIfWqkf7MZMOiNKoehdSMu4P8C_Cyj5_2ApYRUA6cZWFOq > SGAjikQJc_BpXOW4-kzssgabw7mHmj9JehJw69jCPqdH0f2XA,,&typo=1&ancr_add=1> > (328) > handleResponse: Tunnel Server conn2126 local=10.56.1.3:59674 > <http://10.56.1.3:59674> remote=18.213.126.143:443 > <http://18.213.126.143:443> FIRSTUP_PARENT FD 24 flags=1 > > 2022/06/30 15:22:49.198 kid1| 11,2| > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fHttpTunneler.cc&c= > E,1,yOUqRcgTyDqJM4As1g9no_2ivGGU2GU0PGsvC0nQjDk9PDDcutm2vFsyn3JmbEXXs1 > HYXQGoS7iH5h6BRNLNShj9pIEFQzE6dYrY1Eqblw2VBYg,&typo=1 > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fHttpTunneler.cc&c > =E,1,3NizLysV5Gx9r_j5gTGoxUw_3T9zdjGtQ-DV4EhtvlwXKEzULXHluYnJByOJiEPPn > VnNQqchSO6-31x_mXrtC-9VAHF1Rvi3G4KI9KdJOjbjUelpts2rPuVSNQ,,&typo=1&anc > r_add=1>(329) > handleResponse: Tunnel Server RESPONSE: > > --------- > > HTTP/1.1 407 Proxy Authentication Required > > Proxy-Authenticate: Basic realm="Secure Browsing" > > Date: Thu, 30 Jun 2022 15:22:49 GMT > > Content-Length: 0 > > Connection: close > > ---------- > > 2022/06/30 15:22:49.198 kid1| 83,3| > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fHttpTunneler.cc&c= > E,1,pufqpHpI8C7rAUfy9Tq2mNp2OZ1XMTAI6fkixf_-ua2kK8YpFPUMWFzh0rWHf9g0Ws > uV3pIArjpDXfXhm2XC6M9Irhro_TxF-__TcOmuBGULF-f070nvp3mjpLM,&typo=1 > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fHttpTunneler.cc&c > =E,1,GviZgdhx9RYhEwKjYE8dVgxbEl8iol-igCMYAgae4yqcKPIFswYtt6EwZhF84hnL- > ef9RpuZwEHsx85Xll9B5Gfbg7d2dHfIF34rKZsAxv6qOdMumpxPDQ,,&typo=1&ancr_ad > d=1>(350) > bailOnResponseError: unsupported CONNECT response status code [state:w > FD 24 job3836] > > 2022/06/30 15:22:49.198 kid1| TCP connection to > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2f%2f%2fgateway.gogu > ardian.com%2f443&c=E,1,UusqMjgeT_UOKD1S9PrgXx6upenAYP-hT7yGJTEnspLqlnS > awFcJbipDzT1VUHjpy2b-j-nAl50SEUaFLAkQda-Y8KqaSsR9kCUbXTeurg,,&typo=1 > <https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fgateway.goguardian > .com%2f443&c=E,1,uAPXOfc9RgeMJ4nUQAbfSdcSO5Uq43sRY-gZmY85itIayxn-UVioU > UW3XRszjHa-yYb6rECJlsja0UO3JoB46gLeuYZSjXkRbee8lCx9qDg8UMVty1UFtdYA&ty > po=1> > failed > > current master transaction: master1228 > > 2022/06/30 15:22:49.198 kid1| 15,2| > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fneighbors.cc&c=E,1 > ,9ofiQEX_0QnggaY8xoZN6SuZPZwmqJoD1GNQ655oW2gywmEKyxLVKHrM4Ac6gBgcTtgDb > uQcMGF0tup6n1llH-TGgGu4Ts6AJeKlaza1vvG52A1mXJmoxnRvCQ,,&typo=1 > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fneighbors.cc&c=E, > 1,A9XtxL5DCKCd251CIXugkhx4aCzF9hXbpTke-TobSR1fyAJvDoqwTFq1cEcOoZJtiMbG > KIRMTAdNo4BJFSkXvu8VJe16TUWacR3bLvbydug1knZSGkBYCZ0,&typo=1&ancr_add=1 > >(1284) > peerConnectFailedSilent: TCP connection to > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2f%2f%2fgateway.gogu > ardian.com%2f443&c=E,1,is4BqJ6V4Qdfc04VYlolwa5QuKFNfTygVBDVwtBqmsf41gL > UQI3CKcnxrF9sHxTsXgK3UQPazoH2N4bwj7wGWZ4IFpRpHOrLTaHLEg3riYlP&typo=1 > <https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fgateway.goguardian > .com%2f443&c=E,1,dGVDR_a1JorHZeL7cCLZZYEKPcdKNP8q3xqZrI0znu3mp7ytE8irV > nBC73FhdcWJ5M0-LWIn2Mn0GzYRz6V0M_GYqDtl_rvKTY_dWhrXIAFI1UpgdRqKz0hp&ty > po=1> > dead > > 2022/06/30 15:22:49.198 kid1| 5,3| > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fcomm.cc&c=E,1,wVzz > fX9UMqeQdfmj9Yh-eEQTkXfgpAsRIs1xVjE6wsFdGqLtci-hbG5hqOsir3jaz800ooUnT6 > 02gcZzpoNCotYfELUz8GbehnzI-szfn_9t4ygswhCtKyiXsKtO&typo=1 > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fcomm.cc&c=E,1,_FS > TyaiA0rkYHZ4Z7eAL4TwtVx69LC8zbzD277h9yuyffbapL47ZpB_oWH20eRbFct1TQy0vm > I_r1caTRPIqNuxhiZ7iYIATofZyGH8m1ZkJn-_Pj74,&typo=1&ancr_add=1>(597) > commUnsetConnTimeout: Remove timeout for conn2126 > local=10.56.1.3:59674 <http://10.56.1.3:59674> > remote=18.213.126.143:443 <http://18.213.126.143:443> FIRSTUP_PARENT > FD 24 flags=1 > > 2022/06/30 15:22:49.198 kid1| 5,3| > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fcomm.cc&c=E,1,6_Om > _qoW-p_W0CpO2EJHb7WhzwjJyFKkENF0xzjkBzWhiNEeuxQa8cl337nnoOOK7tey-YPgOv > tYw-Asoq_RGiBrHLG1-3UZX9uG33SD1of4jv5b7QjHUPI,&typo=1 > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fcomm.cc&c=E,1,2X_ > UeJ7syPVMh46zfITvmAcOXeJskvfXEcgk8IyJC4YzRQfPu92bh2NzVodZ0n4ZRK7THXkr0 > YSUqM7xqyqJCvdnyd9FAu6HfF5w6S0BZI45WZI8zKdCZe8,&typo=1&ancr_add=1>(571 > ) > commSetConnTimeout: conn2126 local=10.56.1.3:59674 > <http://10.56.1.3:59674> remote=18.213.126.143:443 > <http://18.213.126.143:443> FIRSTUP_PARENT FD 24 flags=1 timeout -1 > > 2022/06/30 15:22:49.198 kid1| 5,3| > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fcomm.cc&c=E,1,f3jm > C5svmDm2UMZPFo_bJ6TZqPvD1V85OGT0cw_YxUApcig2_G0CQ5uf8vaKUSpMHT2E-flXvO > 3DJ81-xeFxHAoC3qOIK7wJYSws9qhHhgSW1R8n3Slt&typo=1 > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fcomm.cc&c=E,1,Ffk > Oe7rgvl24KtYbMnfkVwBEdxcDHC1Qli-TWnd49Qh8gDEi83POkLUjbin88NBj9wz0eUa5E > XJAjwxomX4QO4zLvkDabeKXKYlG6AdnYeWwBQX65a999EDQfHg,&typo=1&ancr_add=1> > (877) > _comm_close: start closing FD 24 by > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fConnection.cc%3a10 > 8&c=E,1,p118dKeMyqtNGmJDUQfl3bqlowxip-f5vvzF5BGVoRt6v1MWaolkRXvJ3Ptu_b > DI934lLcugy51gOKePiLt9X39tc9I-WvaSTfDN4UnHRAU,&typo=1 > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fConnection.cc%3a1 > 08&c=E,1,WyC_uIlGcAERUMOzZEzNpvTD0VNtdyMCu8_98mxi45Tfb8tS1Sk-xPVV7uo29 > dppxC6E7neNtZYKqy1MhMyuLt8f0VUXYaTTfg2ke0mgXESQjraUm9zxRlRV&typo=1&anc > r_add=1> > > 2022/06/30 15:22:49.198 kid1| 5,3| > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fcomm.cc&c=E,1,4wEE > ydLqZtbeDc5YHCkgy5GsRjJ3_cLzlCGjyzHOV-hTEVEIsy3mNyF5ICP27wwTmSGp6ze8y2 > vdbqkthwhZqwWvH_jduoEypTSS0y2ytmL7&typo=1 > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fcomm.cc&c=E,1,3Gy > 87egR90ZnusSy5exBZU0res4kBdHXTtCKE_jPDFJ67k-PY9AWyJYQlbMs93MRcEX4tmriD > wIFkUn6n7F57YT-OWPTUDgMXKLJDMijoQr3ETZ_4qmLyO3mxoc,&typo=1&ancr_add=1> > (558) > commUnsetFdTimeout: Remove timeout for FD 24 > > > Best Regards, > > Johnathan > > *_______________________________________________________* > > ** > > *Johnathan Hasty* > > Senior DevOps Engineer > > Uncommon Schools > > C: 989.366.1672 > > *Un*common Schools | Change History > > Website > <https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fwww.uncommonschool > s.org%2f&c=E,1,cWhZ9NA37cAb3SSkIYkr5EbwjBXA_1ECEBWI1BpFOMixjdXiqIYF5NH > _rpjuRqGzBt9Av6GCLPt7UYFH62vFjyLlBBvmIAwJtSORWZeE&typo=1> | Facebook > <http://www.facebook.com/uncommonschools> | Twitter > <http://www.twitter.com/uncommonschools> | LinkedIn > <http://www.linkedin.com/company/124759?trk=tyah> | Apply Now > <https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fwww.uncommonschool > s.org%2fcareers&c=E,1,rgbpQND7NOQlb8Jv2r2mLOBnCdzuRSxPkW0uIyooMP2TwhUo > tzeHZQjvRKQyUr3gDLWXSyG1jhOH92Ub7jL9_5wTQc42_HkbPCyQS5oyArE,&typo=1> > > > _______________________________________________ > squid-users mailing list > squid-users@xxxxxxxxxxxxxxxxxxxxx > https://linkprotect.cudasvc.com/url?a=http%3a%2f%2flists.squid-cache.o > rg%2flistinfo%2fsquid-users&c=E,1,J4_sclj9gC817Tmu9bhrA3OR4TSSruJYfYUM > 6RkEXWZjj9XbwbXxgeS2yApz2pngh07velawZHPZD2mJFvgfC8P764tli3XXTMvKbYgp&t > ypo=1 _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx https://linkprotect.cudasvc.com/url?a=http%3a%2f%2flists.squid-cache.org%2flistinfo%2fsquid-users&c=E,1,6nL_4Gs08LWJUKqb_q0ngPSzWGNPU1hDuBFl2fe6WS9B5z0mUCKS0CWyT3EUxoD8qdoRz_4UaAxr3vVuAUQCLDB05Yj639MDRp6MdlpX_jSXFtjL1Z2wKw,,&typo=1 CAUTION : This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx https://linkprotect.cudasvc.com/url?a=http%3a%2f%2flists.squid-cache.org%2flistinfo%2fsquid-users&c=E,1,_gt5RuG6OnpL5wNbM1Dzv4nuJJRVHT3EToMZP5hSDVox-iP_NPzQaaSo8V_f1XPFpn8T_C2R18Hum-eShKhL1zRxyXViMkrpo3iT-m1r&typo=1 CAUTION : This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users