LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   squid help - activate windows (https://www.linuxquestions.org/questions/linux-networking-3/squid-help-activate-windows-769471/)

jrmontg 11-16-2009 11:48 AM

squid help - activate windows
 
I am trying to activate a windows PC and I am getting these lines in my log:

1258355374.182 0 10.1.1.44 TCP_DENIED/407 1744 GET http://wpa.one.microsoft.com/ - NONE/- text/html
1258355374.185 0 10.1.1.44 TCP_DENIED/407 1743 GET http://wpa.one.microsoft.com/ - NONE/- text/html
1258355374.187 0 10.1.1.44 TCP_DENIED/407 1743 GET http://wpa.one.microsoft.com/ - NONE/- text/html
1258355374.193 0 10.1.1.44 TCP_DENIED/407 1744 GET http://wpa.one.microsoft.com/ - NONE/- text/html
1258355374.195 0 10.1.1.44 TCP_DENIED/407 1743 GET http://wpa.one.microsoft.com/ - NONE/- text/html
1258355374.197 0 10.1.1.44 TCP_DENIED/407 1743 GET http://wpa.one.microsoft.com/ - NONE/- text/html

How can I allow this? Side note. My username has access to go to anywhere on the web.

Thanks

zulfilee 11-17-2009 07:17 AM

Looks like your squid server is blocking non standard ports and windows activation requires these ports to work.

In squid.conf file, add the ports 182,185,187,... and do a service squid reload.Try activating windows after that.

AlainODea 02-25-2013 12:11 PM

Quote:

Originally Posted by zulfilee (Post 3759905)
Looks like your squid server is blocking non standard ports and windows activation requires these ports to work.

In squid.conf file, add the ports 182,185,187,... and do a service squid reload.Try activating windows after that.

For the benefit of future readers 182,185,187,... are not port numbers they are milliseconds. Windows Activation uses standard ports.

Here is the ACL I use to cover Windows Activation and Windows Update:
Code:

acl windowsupdate dstdomain windowsupdate.microsoft.com
acl windowsupdate dstdomain .update.microsoft.com
acl windowsupdate dstdomain download.microsoft.com
acl windowsupdate dstdomain download.windowsupdate.com
acl windowsupdate dstdomain redir.metaservices.microsoft.com
acl windowsupdate dstdomain images.metaservices.microsoft.com
acl windowsupdate dstdomain c.microsoft.com
acl windowsupdate dstdomain www.download.windowsupdate.com
acl windowsupdate dstdomain wustat.windows.com
acl windowsupdate dstdomain crl.microsoft.com
acl windowsupdate dstdomain sls.microsoft.com
acl windowsupdate dstdomain productactivation.one.microsoft.com
acl windowsupdate dstdomain go.microsoft.com
acl windowsupdate dstdomain activation.sls.microsoft.com
acl windowsupdate dstdomain ntservicepack.microsoft.com

That is a mess I'll admit, but there are several sites involves in updates and it varies by Windows release. Windows Server 2008 R2 POSTs something to go.microsoft.com and then goes to activation.sls.microsoft.com if that succeeds.


All times are GMT -5. The time now is 10:05 AM.