Internet Explorer not working in squid-2.6.STABLE6-4.el5
 

Hi i am using Redhat EL5 proxy server. Squid + dansguardian and SARG
windows XP clint,all are use to Internet explorer 6.0

The following error was encountered:

* Invalid Request

Some aspect of the HTTP Request is invalid. Possible problems:

* Missing or unknown request method
* Missing URL
* Missing HTTP Identifier (HTTP/1.0)
* Request is too large
* Content-Length missing for POST or PUT requests
* Illegal character in hostname; underscores are not allowed

Your cache administrator is root.
Generated Wed, 06 May 2009 09:27:25 GMT by proxy.server1.com (squid/2.6.STABLE6)


My Squid configuration

http_port 3128
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
cache_mem 50 MB
access_log /var/log/squid/access.log squid
auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/.passwd
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
acl ppts proxy_auth REQUIRED
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 143 # for mail
acl Safe_ports port 110 # for mail
acl Safe_ports port 25 # smtp
acl Safe_ports port 21 # ftp
acl Safe_ports port 22 # ftp data
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 5100
acl Safe_ports port 5101
acl Safe_ports port 5050
acl Safe_ports port 5000-5010
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow ppts
http_access deny all
http_reply_access allow all
icp_access allow all
coredump_dir /var/spool/squid


--------

And Dansguardian configuration
Dansguardian listen 8080,i mention proxy port 3128

I am using one lancard

iptables configuration
iptables -t nat -A PREROUTING -p tcp -s 192.168.1.0/24 --dport 80 -j REDIRECT --to-port 8080
--------
Firefox working but https page not working
Ex
www.gotomeeting.com
this web not working in firefox

Error message
connection intrupted

I feel your pain - maybe now is the time to get everyone to upgrade - at least to a recent IE though a free software browser would be preferable.

Note there are serious IE6 security holes which will never be patched - the fix is to use IE8 or another browser. It does nobody any good to help people continue to use any broken browser.

http://www.internetnews.com/security...le.php/3374931

http://www.byebyeinternetexplorer.org/en

http://www.msversus.org/microsoft-ve...ware-bugs.html


You are getting an invalid request out of IE6 and a time-out for firefox. Have you investigated the suggestions in the error message?

As i seen your configuration your proxy listening on port 3128 but you are redirecting all http traffic to port 8080 then how is this proxy setup work??

Do you plan to setup squid as a transparent proxy?, if not then you dont need this PREROUTING rule, just ask your clients to add proxy settings on their web browser(ip & port)
And you cant redirect https traffics to another port(443--->another port) it wont work.

I am Using Dansguardian
 

Thank you for reply,
I am using Dansguardian for Webcontent filtering.
I am Using Squid authendication proxy.