[squid-users] TCP_MISS/502 - audio stream - none default http ports

[Dörfler, Andreas]

hello there,

i try to get mp3/audio streams working on a "kinda default" debian
stretch installation.

after i failed with the default debian squid configuration, i tried the
working config from the old proxy (Squid Cache: Version 3.1.20), 
but no luck either.

audio streams work when it's a web-based radio on port 80/443, but once
the radio leaves the default ports, it stops working.

since the new squid is 4 minor releases above the old server, i think
something major changed, but i have no clue, i touch the squid
configuration only once every few years...


###>
Squid Cache: Version 3.5.23
<###

config below is the one i copied from the old squid server, but as said,
it won't work. security is handled by the firewall, so "allow all" isn't
a issue.

###>config

acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1
acl SSL_ports port 443 9418 5001
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access allow all
http_port 8080
access_log /var/log/squid/access.log squid
debug_options ALL,1
coredump_dir /var/spool/squid
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
refresh_pattern .               0       20%     4320
                request_header_access From deny all
                request_header_access Referer deny all
                request_header_access Server deny all
                request_header_access WWW-Authenticate deny all
                request_header_access Link deny all
forwarded_for delete

<###


###>example stream
https://tunein.com/radio/Americana-Breakdown-s281469/
<###

###squid access.log errors

172.16.x.x TCP_MISS/502 4307 GET http://91.121.164.210:8104/ -
HIER_DIRECT/91.121.164.210 text/html

172.16.x.x TCP_MISS/502 4312 GET http://91.121.164.210:8104/; -
HIER_DIRECT/91.121.164.210 text/html
<###

and ideas?

thanks in advance,
andy
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 6343 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20180918/d1590847/attachment.bin>