<div dir="ltr"><div class="gmail_default" style="font-family:georgia,serif">I accept <a href="http://download.newnext.me/spark.bin">http://download.newnext.me/spark.bin</a> to be a virus redirection, but not sure, and dint understand how it is so, i have checked the computer for any unwanted third party and were not found. <br></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><span style="font-family:georgia,serif"><b><span style="color:rgb(53,28,117)"><font size="2">T<font size="2">hanks and Regards<br></font>Vivek Kumar Singh<br>Mobile <div style="font-family:"georgia",serif;display:inline" class="gmail_default">+91</div>8902000538<br></font></span></b></span><br></div></div></div></div></div></div></div></div>
<br><div class="gmail_quote">On Fri, Dec 4, 2015 at 7:11 PM, vivek singh <span dir="ltr"><<a href="mailto:itpc.vivek@gmail.com" target="_blank">itpc.vivek@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div style="font-family:georgia,serif">please find below the access log while problem occur<br></div><div style="font-family:georgia,serif">1449226819.307: 0: TCP_DENIED/403: 4089: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449226828.671: 249222: TCP_TUNNEL/200: 6610: CONNECT: <a href="http://clients2.google.com:443" target="_blank">clients2.google.com:443</a>: -: HIER_DIRECT/<a href="http://216.58.196.110" target="_blank">216.58.196.110</a><br>1449226829.308: 0: TCP_DENIED/403: 4091: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449226839.323: 0: TCP_DENIED/403: 4091: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449226849.216: 0: TCP_DENIED/403: 4090: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449226859.119: 0: TCP_DENIED/403: 4091: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449226868.917: 0: TCP_DENIED/403: 4088: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449226878.635: 0: TCP_DENIED/403: 4089: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449226888.391: 0: TCP_DENIED/403: 4091: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449226898.104: 0: TCP_DENIED/403: 4091: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449226907.951: 0: TCP_DENIED/403: 4090: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449226917.685: 0: TCP_DENIED/403: 4090: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449226927.463: 0: TCP_DENIED/403: 4091: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449226937.162: 0: TCP_DENIED/403: 4090: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449226947.042: 0: TCP_DENIED/403: 4090: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449226956.901: 0: TCP_DENIED/403: 4090: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449226966.745: 0: TCP_DENIED/403: 4090: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449226976.559: 0: TCP_DENIED/403: 4091: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449226986.260: 0: TCP_DENIED/403: 4090: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449226996.214: 0: TCP_DENIED/403: 4091: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449227006.198: 0: TCP_DENIED/403: 4090: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449227016.198: 0: TCP_DENIED/403: 4091: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449227026.184: 0: TCP_DENIED/403: 4091: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449227036.072: 0: TCP_DENIED/403: 4089: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449227042.281: 791782: TCP_TUNNEL/200: 5014: CONNECT: <a href="http://mtalk.google.com:443" target="_blank">mtalk.google.com:443</a>: -: HIER_DIRECT/<a href="http://74.125.130.188" target="_blank">74.125.130.188</a><br>1449227042.537: 714649: TCP_TUNNEL/200: 7775: CONNECT: <a href="http://play.google.com:443" target="_blank">play.google.com:443</a>: -: HIER_DIRECT/<a href="http://216.58.196.110" target="_blank">216.58.196.110</a><br>1449227042.537: 68131: TCP_TUNNEL/200: 5813: CONNECT: <a href="http://lh3.googleusercontent.com:443" target="_blank">lh3.googleusercontent.com:443</a>: -: HIER_DIRECT/<a href="http://216.58.196.97" target="_blank">216.58.196.97</a><br>1449227042.538: 70423: TCP_TUNNEL/200: 2303: CONNECT: <a href="http://apis.google.com:443" target="_blank">apis.google.com:443</a>: -: HIER_DIRECT/<a href="http://216.58.196.110" target="_blank">216.58.196.110</a><br>1449227042.538: 184079: TCP_TUNNEL/200: 698: CONNECT: <a href="http://csi.gstatic.com:443" target="_blank">csi.gstatic.com:443</a>: -: HIER_DIRECT/<a href="http://216.58.211.3" target="_blank">216.58.211.3</a><br>1449227042.539: 190277: TCP_TUNNEL/200: 3353: CONNECT: <a href="http://ssl.gstatic.com:443" target="_blank">ssl.gstatic.com:443</a>: -: HIER_DIRECT/<a href="http://216.58.196.99" target="_blank">216.58.196.99</a><br>1449227042.539: 143474: TCP_TUNNEL/200: 723: CONNECT: <a href="http://clients5.google.com:443" target="_blank">clients5.google.com:443</a>: -: HIER_DIRECT/<a href="http://216.58.196.110" target="_blank">216.58.196.110</a><br>1449227042.539: 142248: TCP_TUNNEL/200: 5317: CONNECT: <a href="http://clients5.google.com:443" target="_blank">clients5.google.com:443</a>: -: HIER_DIRECT/<a href="http://216.58.196.110" target="_blank">216.58.196.110</a><br>1449227042.540: 165512: TCP_TUNNEL/200: 1107: CONNECT: <a href="http://clients1.google.com:443" target="_blank">clients1.google.com:443</a>: -: HIER_DIRECT/<a href="http://216.58.196.110" target="_blank">216.58.196.110</a><br>1449227042.540: 188929: TCP_TUNNEL/200: 7668: CONNECT: <a href="http://plus.google.com:443" target="_blank">plus.google.com:443</a>: -: HIER_DIRECT/<a href="http://216.58.196.110" target="_blank">216.58.196.110</a><br>1449227042.540: 388342: TCP_TUNNEL/200: 4996: CONNECT: <a href="http://clients6.google.com:443" target="_blank">clients6.google.com:443</a>: -: HIER_DIRECT/<a href="http://216.58.196.110" target="_blank">216.58.196.110</a><br>1449227042.540: 396197: TCP_TUNNEL/200: 2101: CONNECT: <a href="http://www.google.com:443" target="_blank">www.google.com:443</a>: -: HIER_DIRECT/<a href="http://216.58.196.100" target="_blank">216.58.196.100</a><br>1449227042.542: 106590: TCP_TUNNEL/200: 575: CONNECT: <a href="http://clients2.google.com:443" target="_blank">clients2.google.com:443</a>: -: HIER_DIRECT/<a href="http://216.58.196.110" target="_blank">216.58.196.110</a><br>1449227042.542: 88135: TCP_TUNNEL/200: 963: CONNECT: <a href="http://play.google.com:443" target="_blank">play.google.com:443</a>: -: HIER_DIRECT/<a href="http://216.58.196.110" target="_blank">216.58.196.110</a><br>1449227042.543: 6778: TCP_TUNNEL/200: 60202: CONNECT: <a href="http://www.google.co.in:443" target="_blank">www.google.co.in:443</a>: -: HIER_DIRECT/<a href="http://216.58.196.99" target="_blank">216.58.196.99</a><br>1449227042.543: 786962: TCP_TUNNEL/200: 16071: CONNECT: <a href="http://0.client-channel.google.com:443" target="_blank">0.client-channel.google.com:443</a>: -: HIER_DIRECT/<a href="http://74.125.200.189" target="_blank">74.125.200.189</a><br>1449227042.544: 6709: TCP_TUNNEL/200: 234: CONNECT: <a href="http://www.google.co.in:443" target="_blank">www.google.co.in:443</a>: -: HIER_DIRECT/<a href="http://216.58.196.99" target="_blank">216.58.196.99</a><br>1449227042.544: 6630: TCP_TUNNEL/200: 234: CONNECT: <a href="http://www.google.co.in:443" target="_blank">www.google.co.in:443</a>: -: HIER_DIRECT/<a href="http://216.58.196.99" target="_blank">216.58.196.99</a><br>1449227042.544: 6399: TCP_TUNNEL/200: 234: CONNECT: <a href="http://www.google.co.in:443" target="_blank">www.google.co.in:443</a>: -: HIER_DIRECT/<a href="http://216.58.196.99" target="_blank">216.58.196.99</a><br>1449227045.855: 0: TCP_DENIED/403: 4091: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449227055.855: 0: TCP_DENIED/403: 4091: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449227065.855: 0: TCP_DENIED/403: 4090: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449227075.855: 0: TCP_DENIED/403: 4090: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449227085.855: 0: TCP_DENIED/403: 4091: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449227095.855: 0: TCP_DENIED/403: 4090: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449227105.855: 0: TCP_DENIED/403: 4091: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449227115.855: 0: TCP_DENIED/403: 4090: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449227125.855: 0: TCP_DENIED/403: 4091: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449227135.855: 0: TCP_DENIED/403: 4091: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449227145.855: 0: TCP_DENIED/403: 4090: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449227155.855: 0: TCP_DENIED/403: 4091: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449227165.855: 0: TCP_DENIED/403: 4090: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449227175.855: 0: TCP_DENIED/403: 4091: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449227185.855: 0: TCP_DENIED/403: 4089: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449227195.855: 0: TCP_DENIED/403: 4089: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449227196.494: 0: TCP_DENIED/403: 3964: CONNECT: <a href="http://mtalk.google.com:5228" target="_blank">mtalk.google.com:5228</a>: -: HIER_NONE/-<br>1449227196.503: 0: TCP_DENIED/403: 3964: CONNECT: <a href="http://mtalk.google.com:5228" target="_blank">mtalk.google.com:5228</a>: -: HIER_NONE/-<br>1449227205.589: 0: TCP_DENIED/403: 4089: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449227207.642: 10969: TCP_TUNNEL/200: 4053: CONNECT: <a href="http://www.googleapis.com:443" target="_blank">www.googleapis.com:443</a>: -: HIER_DIRECT/<a href="http://216.58.197.42" target="_blank">216.58.197.42</a><br>1449227207.643: 10970: TCP_TUNNEL/200: 4053: CONNECT: <a href="http://www.googleapis.com:443" target="_blank">www.googleapis.com:443</a>: -: HIER_DIRECT/<a href="http://216.58.197.42" target="_blank">216.58.197.42</a><br>1449227215.671: 0: TCP_DENIED/403: 4090: GET: <a href="http://download.newnext.me/spark.bin" target="_blank">http://download.newnext.me/spark.bin</a>?: -: HIER_NONE/-<br>1449227215.935: 504: TCP_TUNNEL/200: 0: CONNECT: <a href="http://hangouts.google.com:443" target="_blank">hangouts.google.com:443</a>: -: HIER_DIRECT/<a href="http://216.58.196.110" target="_blank">216.58.196.110</a><br>1449227216.850: 10806: TCP_TUNNEL/200: 4045: CONNECT: <a href="http://ssl.gstatic.com:443" target="_blank">ssl.gstatic.com:443</a>: -: HIER_DIRECT/<a href="http://216.58.196.99" target="_blank">216.58.196.99</a><br>1449227217.642: 11363: TCP_TUNNEL/200: 4770: CONNECT: <a href="http://plus.google.com:443" target="_blank">plus.google.com:443</a>: -: HIER_DIRECT/<a href="http://216.58.196.110" target="_blank">216.58.196.110</a><br>1449227217.642: 13636: TCP_TUNNEL/200: 3993: CONNECT: <a href="http://ssl.gstatic.com:443" target="_blank">ssl.gstatic.com:443</a>: -: HIER_DIRECT/<a href="http://216.58.196.99" target="_blank">216.58.196.99</a><br><br></div><div style="font-family:georgia,serif"><br></div><div class="gmail_extra"><br clear="all"><div><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><span style="font-family:georgia,serif"><b><span style="color:rgb(53,28,117)"><font size="2"><span class="">T<font size="2">hanks and Regards<br></font>Vivek Kumar Singh<br></span>Mobile <font size="2"></font><div>+91</div>8902000538</font></span></b></span><br></div></div></div></div></div></div></div></div><div><div class="h5">
<br><div class="gmail_quote">On Fri, Dec 4, 2015 at 12:32 PM, Yuri Voinov <span dir="ltr"><<a href="mailto:yvoinov@gmail.com" target="_blank">yvoinov@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<br>
<br>
<div>04.12.15 12:59, vivek singh пишет:<br>
</div><span>
<blockquote type="cite">
<div dir="ltr">
<div style="font-family:georgia,serif">Thanks
a lot for you responses.<br>
</div>
<div style="font-family:georgia,serif">I
will update after doing more analysis.</div>
<div style="font-family:georgia,serif"><br>
</div>
<div style="font-family:georgia,serif"><b>@Amos
Jeffries :</b> </div>
<div style="font-family:georgia,serif">Q
. How does the IP correlate to the tv_ip, sysadmin_ip,<br>
workstation_ip ACLs above?</div>
<div style="font-family:georgia,serif">A.
these are separate text files in the same directory,
containing ip lists.</div>
<div style="font-family:georgia,serif">Q.
Any difference with how those machines are configured to use
the proxy</div>
<div style="font-family:georgia,serif">A.
all the machines are in the same domain and network.</div>
<div style="font-family:georgia,serif">Q.
what version of squid-3.5.x is being used</div>
<div style="font-family:georgia,serif">A.
Squid 3.5.0.2 on Redhat Linux , packaged rpm is used.</div>
<div style="font-family:georgia,serif">Q. His
squid.conf does not contain anything that obviously restricts
that.So I am suspecting the problems some old-ish browsers and
OS have with POST messages and Expect headers</div>
<div style="font-family:georgia,serif">A.
On the same machine if i change it to use another windows
proxy server, it works fine.</div>
<div style="font-family:georgia,serif"><br>
</div>
<div style="font-family:georgia,serif"><b>@
Eliezer Croitoru</b></div>
<div style="font-family:georgia,serif">Q.
slow uploads but in 3.5.X which I am almost sure was not fixed
yet</div>
<div style="font-family:georgia,serif">A.
while on other machines it is working fine.</div>
<div style="font-family:georgia,serif"><br>
</div>
<div style="font-family:georgia,serif"><b>@Yuri
Voinov</b><br>
</div>
<div style="font-family:georgia,serif">Q.
I suggest the problem just required to allow POST method from
LAN and/or to mail servers. Often this can help</div>
<div style="font-family:georgia,serif">A.
Do i explicitly need to do so, if yes please tell me how.</div>
</div>
</blockquote></span>
Example:<br>
<br>
# Adjust network as you need<br>
acl localnet src <a href="http://192.168.0.0/16" target="_blank">192.168.0.0/16</a> # RFC1918 possible internal
network<br>
acl POST method POST<br>
# Allow POST for localnet<br>
http_access allow POST localnet<span><br>
<br>
<blockquote type="cite">
<div dir="ltr">
<div class="gmail_extra"><br clear="all">
<div>
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div><span style="font-family:georgia,serif"><b><span style="color:rgb(53,28,117)"><font size="2">T<font size="2">hanks and
Regards<br>
</font>Vivek Kumar Singh<br>
</font></span></b><br>
</span><br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<div class="gmail_quote">On Thu, Dec 3, 2015 at 10:01 PM,
Eliezer Croitoru <span dir="ltr"><<a href="mailto:eliezer@ngtech.co.il" target="_blank"></a><a href="mailto:eliezer@ngtech.co.il" target="_blank">eliezer@ngtech.co.il</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Or it
could be the slow uploads but in 3.5.X which I am almost
sure was not fixed yet.<span><font color="#888888"><br>
<br>
Eliezer</font></span>
<div>
<div><br>
<br>
On 03/12/2015 12:24, Amos Jeffries wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
His squid.conf does not contain anything that
obviously restricts that.<br>
So I am suspecting the problems some old-ish
browsers and OS have with<br>
POST messages and Expect headers.<br>
<br>
Or that some of the machines have been configured in
a way that only<br>
partially configures the applictinos on it, leaving
some occasionally to<br>
not even find the proxy.<br>
<br>
Amos<br>
</blockquote>
<br>
_______________________________________________<br>
squid-users mailing list<br>
<a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br>
<a href="http://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</div>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
squid-users mailing list
<a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a>
<a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a>
</pre>
</blockquote>
<br>
</span></div>
<br>_______________________________________________<br>
squid-users mailing list<br>
<a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br>
<a href="http://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
<br></blockquote></div><br></div></div></div></div>
</blockquote></div><br></div></div>