Re: [squid-users] Problems with google ...

Chris Robertson wrote:
> Ramiro Sabastta wrote:
>> Hi !!!
>>
>> I've installed a Squid box transparent mode (3STABLE7) with Debian. A
>> router send all the request to the port 80 to my squid box on 3128
>> port.
>>
>> I've problems with google pages. Sometimes when somedy try to sail in
>> google the result is a http://www.google.com.ar/sorry/?.
>
> "strip_query_terms off" in your Squid.conf will allow you to see the
> text after the question mark.
>
>> This page say
>> something like the ip origin maybe is a malicious source, like a virus
>> or spyware.
>>
>> I put in my squid.conf exepcions to google:
>>
>> acl exepciones dstdomain "/usr/local/squid/etc/exepciones"
>> always_direct allow exepciones
>>
>
> *sigh*
> http://www.squid-cache.org/Versions/v3/3.0/cfgman/always_direct.html
>
> And I quote...
>
> Here you can use ACL elements to specify requests which should
> ALWAYS be forwarded by Squid to the origin servers without using any
> peers. For example, to always directly forward requests for local
> servers ignoring any parents or siblings you may have use something
> like...
>
>
> The important bits are "by Squid" and "without using any peers". Once
> the traffic has been handed to Squid (be it via specifying the proxy
> explicitly in the browser, using WPAD or interception) Squid has to
> handle that traffic. If you want to bypass Squid for some Internet
> traffic don't send that traffic to Squid.
>
>> and the exepciones file is as follws:
>>
>> .google.com
>> .google.com.ar
>> .gmail.com
>>
>> but nothing changes.
>>
>> Any idea?
>>
>
> Set your router up to pass traffic destined to Google directly to Google
> (and not to Squid). Otherwise track down and eliminate the traffic that
> is causing Google to view your clients with suspicion.
>
>> Is posible than a lot of requeriments with the same ip (the proxy ip)
>> causes this behavior?

Not unless its a very large amount of requests.
But a lesser amount of requests doing abusive behavior from one IP, or
anonymous proxy might also cause this.
I've usually found squid being blocked by google to be open-proxies with
spammers playing around.

We'll be happy to check your config and point out security hole if you
don't mind sharing it.

Amos

-- 
Please use Squid 2.7.STABLE3 or 3.0.STABLE8