Re: [squid-users] Problem with viewing http://wiki.mozilla-russia.org

Amos Jeffries пишет:
> Alex Gau wrote:
>> Amos Jeffries пишет:
>>> Alex Gau wrote:
>>>> Hello,
>>>> we use squid3.0 stable4 on SLES10.
>>>> It was compiled with followed parameters:
>>>>
>>>>
>>>> ./configure --prefix=/usr/local/squid3 --enable-icap-client
>>>> --enable-default-err-language=Russian-1251
>>>> --enable-err-languages="Russian-1251 Russian-koi8-r"
>>>> --enable-linux-netfilter --disable-ident-lookups
>>>> --with-default-user=drweb
>>>>
>>>>
>>>> When we try to view URL http://wiki.mozilla-russia.org through the
>>>> proxy, we receive error message.
>>>>
>>>> We enter squid in debug mode and receive followed messages:
>>>>
>>>>
>>>> 1208927537.022 505 xxx.xxx.xxx.xxx TCP_MISS/302 14865 GET
>>>> http://wiki.mozilla-russia.org/ - DIRECT/195.18.35.94
>>>> application/xhtml+xml [Host: wiki.mozilla-russia.org\r\nUser-Agent:
>>>> Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.8.1.12)
>>>> Gecko/20080201 Firefox/2.0.0.12\r\nAccept:
>>>> text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\nAccept-Language:
>>>> ru-ru,ru;q=0.8,en-us;q=0.5,en;q=0.3\r\nAccept-Encoding:
>>>> gzip,deflate\r\nAccept-Charset:
>>>> windows-1251,utf-8;q=0.7,*;q=0.7\r\nKeep-Alive:
>>>> 300\r\nProxy-Connection: keep-alive\r\n] [HTTP/1.1 302 Moved
>>>> Temporarily\r\nServer: nginx/0.6.29\r\nDate: Wed, 23 Apr 2008
>>>> 06:15:12 GMT\r\nContent-Type: application/xhtml+xml;
>>>> charset=UTF-8\r\nConnection: close\r\nX-Powered-By:
>>>> PHP/4.4.7\r\nSet-Cookie:
>>>> PHPSESSID=3118ffe35f83d8e5b71612b1752c3a92; path=/\r\nExpires: Thu,
>>>> 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache,
>>>> must-revalidate, post-check=0, pre-check=0\r\nPragma:
>>>> no-cache\r\nLocation:
>>>> http://aaa.bbb.ccc.ddd/index.php/ru/%25D0%2591%25D0%25B0%25D0%25B7%25D0%25B0%2520%25D0%25B7%25D0%25BD%25D0%25B0%25D0%25BD%25D0%25B8%25D0%25B9%2520%25D0%25BF%25D1%2580%25D0%25BE%25D0%25B5%25D0%25BA%25D1%2582%25D0%25B0%2520Mozilla%2520%25D0%25A0%25D0%25BE%25D1%2581%25D1%2581%25D0%25B8%25D1%258F\r\n\r]
>>>>
>>>> 1208927537.187 144 xxx.xxx.xxx.xxx TCP_MISS/503 1688 GET
>>>> http://aaa.bbb.ccc.ddd/index.php/ru/%D0%91%D0%B0%D0%B7%D0%B0%20%D0%B7%D0%BD%D0%B0%D0%BD%D0%B8%D0%B9%20%D0%BF%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B0%20Mozilla%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D1%8F
>>>> - DIRECT/aaa.bbb.ccc.ddd text/html [Host:
>>>> 77.108.86.4\r\nUser-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1;
>>>> ru; rv:1.8.1.12) Gecko/20080201 Firefox/2.0.0.12\r\nAccept:
>>>> text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\nAccept-Language:
>>>> ru-ru,ru;q=0.8,en-us;q=0.5,en;q=0.3\r\nAccept-Encoding:
>>>> gzip,deflate\r\nAccept-Charset:
>>>> windows-1251,utf-8;q=0.7,*;q=0.7\r\nKeep-Alive:
>>>> 300\r\nProxy-Connection: keep-alive\r\n] [HTTP/1.0 503 Service
>>>> Unavailable\r\nServer: squid/3.0.STABLE4\r\nMime-Version:
>>>> 1.0\r\nDate: Wed, 23 Apr 2008 05:12:17 GMT\r\nContent-Type:
>>>> text/html\r\nContent-Length: 1322\r\nExpires: Wed, 23 Apr 2008
>>>> 05:12:17 GMT\r\nX-Squid-Error: ERR_CONNECT_FAIL 111\r\n\r]
>>>>
>>>>
>>>> As you can see squid put IP: aaa.bbb.ccc.ddd (a squid ip address)
>>>> to the dynamic link instead of real domain name of the site
>>>> (wiki.mozilla-russia.org)
>>>>
>>>> We don't understand why?
>>>> Please, help us to solve this problem.
>>>>
>>>> Best Regards,
>>>>
>>>> Alex
>>>
>>> Not squids fault. The "Server: nginx/0.6.29" is sending a 302 out
>>> with bad information.
>>>
>>> What happening there is:
>>>
>>> -> First request has domain + URI.
>>> <- Squid contacts 195.18.35.94 for data
>>>
>>> -> 195.18.35.94 (nginx/0.6.29) redirects: 302
>>> http://aaa.bbb.ccc.ddd...
>>>
>>>
>>> -> Second request has aaa.bbb.ccc.ddd + new URI
>>> <- Squid contacts aaa.bbb.ccc.ddd for data
>>>
>>> -> failure.
>>>
>>> If the server 195.18.35.94 is yours it needs its redirector fixed.
>>>
>>> Amos
>> Hello, Amos.
>>
>> Thank you for your answer.
>>
>> The server 195.18.35.94 is not ours. It is
>> http://wiki.mozilla-russia.org.
>> We think that the problem in http://wiki.mozilla-russia.org, but we
>> are not sure.
>>
>> I allready understood that 195.18.35.94 redirect the request.
>>
>> I don't understand why.
>>
>> In direct request (without squid (aaa.bbb.ccc.ddd)) the server
>> 195.18.35.94 (http://wiki.mozilla-russia.org) redirect request to
>> itself:
>> http://wiki.mozilla-russia.org/index.php/ru/%D0%91%D0%B0%D0%B7%D0%B0%20%D0%B7%D0%BD%D0%B0%D0%BD%D0%B8%D0%B9%20%D0%BF%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B0%20Mozilla%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D1%8F
>> When we use squid it redirect to squid ip:
>> http://aaa.bbb.ccc.ddd/index.php/ru/%D0%91%D0%B0%D0%B7%D0%B0%20%D0%B7%D0%BD%D0%B0%D0%BD%D0%B8%D0%B9%20%D0%BF%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B0%20Mozilla%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D1%8F
>>
>> Of couse, the URL http://aaa.bbb.ccc.ddd/index.php/ru/...... is not
>> exist.
>>
>> Alex.
>>
>
> I managed to replicate the behaviour without using squid at all.
>
> The ngix server appear to be dying whenever it receives
> X-Forwarded-For: header.
>
> You can temporarily plug this break with:
>
> acl brokenXFF dstdomain .mozilla-russia.org
> request_header_access X-Forwarded-For deny brokenXFF
>
>
> Amos
Thank you for your answer, Amos.

After adding the acl you've wrote all works fine.
Received on Thu Apr 24 2008 - 08:43:26 MDT