squid - TCP_DENIED/400 error:invalid-request
 

I have squid 2.6stable18 on a debian sarge box in non-transparent mode. I also have apache web server setup on this box and it works fine - when the browser is pre-configured for the proxy.

I have some people come in and use their laptops from time to time so I need a way to automatically direct them to the proxy server. I've read about wpad.dat and proxy.pac and tried setting that up but I always get the TCP_DENIED/400 error:invalid-request in the access.log.

When I pre-configure the browser for the proxy, the wpad.dat page shows me the javascript which from what I've read is what it's supposed to do when I put the URL in the address bar: http://192.168.1.1/wpad.dat.

When I configure the browser to use a automatic configuration script with that URL, I get the TCP_DENIED/400 errors again.

I must be missing something, but I've read everything I could find. Is it an acl that I'm missing?

Can someone please help me out?

Thank you in advance.

Here is my squid.conf:

memory_pools off
httpd_suppress_version_string on
cache_effective_user squid
cache_effective_group squid
http_port 3128

cache_access_log /usr/local/squid/var/logs/access.log
cache_log /usr/local/squid/var/logs/cache.log
mime_table /usr/local/squid/etc/mime.conf
log_mime_hdrs on
useragent_log /usr/local/squid/var/logs/useragent.log

url_rewrite_program /usr/local/squid/bin/ufdbgclient -l
/usr/local/squid/var/logs
url_rewrite_children 16

#ACL's
acl all src 0/0
no_cache deny all
acl internal_net src 192.168.1.0/24

acl ok_downloads dstdomain "/var/domains.txt"

acl SSL_ports port 443
acl CONNECT method CONNECT

http_access allow internal_net
http_access allow ok_downloads internal_net

http_reply_access allow internal_net ok_downloads
http_reply_access allow internal_net
http_access deny all

ok, is this an error from squid or apache? on a seperate linux box, run "wget -v http://192.168.1.1/wpad.dat" and show us the FULL output.