The NZ Linux Resource
From: Chris Hodgetts (chris@archnetnz.com)
Date: Tue 09 Nov 2004 - 09:42:39 NZDT


No, however this is what we have determined... 

Its most likely not a Squid issue but a Redirector issue..

We butcher URLS as they come in and re-write them to internal hosts..

-

>From /tmp/dump.txt:

This is a request that will be wrongly redirected:

Pre: http://www.energyintellect.com/html/products.html 
192.168.0.37/server5.metering.co.nz - GET
Result: http://server5/energyintellect/ei_bounce_products.html

This is what every other seemingly sane machine does:

Pre: http://office.microsoft.com/_Services/Ont/images/topnav3r.gif 
192.168.0.57/- - GET
 Result: http://office.microsoft.com/_Services/Ont/images/topnav3r.gif 
192.168.0.57/- - GET

The difference is the existence of the extra 'server5.metering.co.nz' in
the GET request line sent to SQUID. 

The redirector scripts regular expressions match this 'phrase' and 
assume the request is bound for metering.co.nz.

Of course subsequent requests (as made by the REFRESH tag also get 
rewritten in the same way, so the REFRESH url never actually gets
called.

This problem can be fixed by modifying the regular expressions to match 
only the URL portion of the GET request, not the 'Requested by'
section. 
It can probably also be fixed by stopping those machines sending 
'xxx.metering.co.nz' in their HTTP requests. you can probly do this by 
mucking around with their DNS settings somehow.


On Tue, 2004-11-09 at 08:13 +1300, Ralph Loader wrote:
> There was a change to the kernel error reporting around 2.6.9 that broke
> squid 
> 
> http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136049
> 
> You're not being hit by that are you?
> 
> Cheers,
> Ralph.
> 
> 
> On Mon, 2004-11-08 at 16:44 +1300, Chris Hodgetts wrote:
> > I am getting the following error in a squid log:
> > 
> > 1099888172.821    180 192.168.0.37 TCP_SWAPFAIL_MISS/200 440 GET
> > http://google.com/ - DIRECT/192.168.0.37 text/html
> > 
> > This only happens to 6 machines, and when they access any pages that
> > would pass squid, it takes them to that DIRECT and the page there, for
> > some reason or another , has a meta-refresh in it... so is constantly
> > refreshing the page.
> > 
> > I have stopped squid, and restarted it this problem goes away for about
> > 2 minutes, then appearers again..
> > 
> > Just wondering, there is not a lot on google to try and resolve this
> > problem, so I was wondering if anyone has come across it before.
> > 
> 
> -------------------------------------------------------------------
> To remove yourself from this list, email nzlug-request@linux.net.nz
> with "unsubscribe" in the body of the message.
> 
-- 
Chris Hodgetts <chris@archnetnz.com>

-------------------------------------------------------------------
To remove yourself from this list, email nzlug-request@linux.net.nz
with "unsubscribe" in the body of the message.



Valid HTML 4.0! If you have any questions or comments about this page, email the Webmaster
Copyright © 1998-2002 Linux.net.nz