Cannot access gmail on firefox through SQUID proxy server!

pradeepmenon777 · 05-14-2006, 03:09 AM

Hi friends ,
my problem is as follows ..

I have setup a proxy server on RHEL v4. I have allowed all websites for my internal network.
All pages load from internal network browser, but gmail cannot be accessed on my firefox,
Tried it out at my friend's place through windows also with the same proxy setup , cannot get gmail still in firefox.

But , it is possible to access the same page using internet explorer. Not making this post a pro-windows one , but telling you the various steps I tried out.

Do tell me the probable reasons behind this... Also , try to find me a solution for this....

Thanks in advance...

sonnik · 05-14-2006, 03:25 AM

It may not be squid as much as it is a really subtle firewall issue.

See if you have problems with other AJAX-based web sites through squid.

Try Google Maps or various applications at Google Labs...

Such as http://www.google.com/webhp?complete=1&hl=en

If you don't get a drop-down with suggested search terms, it's the same issue. I'm wondering if your browser is having trouble doing the behind the scenes data fetches...

pradeepmenon777 · 05-14-2006, 06:30 AM

I tried out as you said..
I am able to get to google maps , view maps , go to the google labs suggest page , I am able to get the drop down and all .. My doubt is why is it that I am not able to get gmail alone .. All the other google pages are available .. I am almost sure no one using SQUID is getting it on firefox..
Do comment...

sonnik · 05-14-2006, 10:17 AM

I turned on Squid (2.5) on my Fedora Core 5 box using Firefox 1.0.5.2 on a FC5 laptop. Gmail worked for me.

What version of Firefox is RHEL using?

Can you describe a little more of what is happening... like how far your usage of Gmail goes (Do you get the login page? Does it start to login and then stop?)

Part of the login process uses SSL, so it's possible something is getting confused in the https portioon of logging in (such as your particular Firefox configuration.)

pradeepmenon777 · 05-14-2006, 01:53 PM

I am using firefox 1.5.0.1 . I cannot even get to the login page.
I anticipate it not to be an SSL issue , as I am able to get to my ISP login page , which also includes an SSL certificate.

I use RHEL v4 on both my server and the internal network . I get this prob everywhere I try to implement a proxy server using SQUID 2.5 STABLE.

Do help me , and I appreciate the amount of time spent by you on this. Thanks a lot...

sonnik · 05-16-2006, 02:33 AM

Duplicate.

sonnik · 05-16-2006, 02:33 AM

I'm running low on ideas. The last thing I may suggest is looking to see what your Squid ACLs are, and what order they are in.

Check your /etc/squid/squid.conf file - Below is a default FC5 install with my private subnet added:

Code:

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
acl sonniknet src 192.168.1.140-192.168.1.161/255.255.255.0

I'm assuming you've already did it, but you'll probably need to scrutinize your squid.conf and firewall configuration more.

What are you routing through - perhaps there's a rule giving you problems there?

nabeelmoidu · 05-16-2006, 02:52 AM

Why do you insist in mentioning Squid repeatedly. Is it working on firefox when you try to access the net directly without squid?
BTW gmail has a non-ajax interface too, it in fact automatically redirects browsers that don't support AJAX to the simple HTML view
http://mail.google.com/support/bin/a...y?answer=15046

You can identify if its a port issue or a browser compatibility issue

pradeepmenon777 · 05-16-2006, 03:03 AM

yo man , i have configured squid neatly .

I do not find any probs with the acl entries.
The prob now is that I do not find a reason behind gmail prob...

Please find me a solution for this . .

None of my client machines have enjoyed the gmail messages for weeks.
Hope you understand the situation ...

Pradeep

panicbox · 05-17-2006, 12:56 AM

I have the same problem right now. I believe it's https issue.

@pradeepmenon777
have you tried to browse to other web base mail like yahoo or hotmail? can you connect?

If you ask me, I can't with my squid.

I'm searching the web right now. I'll post it here if I've found the solution.

Anyone have ideas please?

pradeepmenon777 · 05-17-2006, 06:05 AM

using SQUID stable 2.5 , I am able to get access to other mailing servers like .live.com and .yahoo.com
But , no gmail anyways ,
Do find me a solution , I am tired of looking for it online.

I tell you, it is a problem with the browser , I am able to access gmail through internet explorer.

pradeepmenon777 · 06-16-2006, 01:28 PM

Found out the solution today ,
it is not becoz of any squid problems , it was only becoz https and other secure socket connections could not established without setting the port for these services also in firefox.

What i did was , I added the proxy ip and port for other services in the firefox preferences. Now everything works fine . I can access gmail and other secured https websites.

scopiansl · 07-12-2010, 03:46 AM

thanks, i was finding a solution for this from a week and it worked. thanks again.