<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
-----BEGIN PGP SIGNED MESSAGE----- <br>
Hash: SHA256 <br>
<br>
Be careful, guys. Via is reauired to HTTP by RFC.<br>
<br>
<br>
24.06.2016 21:40, Ozgur Batur пишет:<br>
<span style="white-space: pre;">> Hi Rafael, Yuri,<br>
><br>
> Thank you very much, "via off" did the trick. It is probably
a server specific issue as you said.<br>
><br>
> Best Regards,<br>
><br>
> On Fri, Jun 24, 2016 at 6:29 PM, Rafael Akchurin
<<a class="moz-txt-link-abbreviated" href="mailto:rafael.akchurin@diladele.com">rafael.akchurin@diladele.com</a>
<a class="moz-txt-link-rfc2396E" href="mailto:rafael.akchurin@diladele.com"><mailto:rafael.akchurin@diladele.com></a>> wrote:<br>
><br>
> Hello Ozgur, Yuri,<br>
><br>
> <br>
><br>
> I also see this error. Actually it is even present on
videos.yahoo.com <a class="moz-txt-link-rfc2396E" href="http://videos.yahoo.com"><http://videos.yahoo.com></a> if I am not
mistaken.<br>
><br>
> The reason for this is unclear for me (incorrect handling
of “Via” header by some of back office servers of Yahoo???)<br>
><br>
> <br>
><br>
> I was able to fix it by setting “via off” in squid.conf.
I am not sure if this is the recommended way ( I presume not) and
how to disable Via only for yahoo servers. Hopefully Amos has
better answers.<br>
><br>
> <br>
><br>
> Via looks like:<br>
><br>
> <br>
><br>
> Via:"http/1.1 fts110.flickr.bf1.yahoo.com
<a class="moz-txt-link-rfc2396E" href="http://fts110.flickr.bf1.yahoo.com"><http://fts110.flickr.bf1.yahoo.com></a> (ApacheTrafficServer
[cMs f ]), http/1.1 r02.ycpi.ams.yahoo.net
<a class="moz-txt-link-rfc2396E" href="http://r02.ycpi.ams.yahoo.net"><http://r02.ycpi.ams.yahoo.net></a> (ApacheTrafficServer [cMsSf
]), 1.1 qlproxy (squid/3.3.8)"<br>
><br>
> <br>
><br>
> Best regards,<br>
><br>
> Rafael Akchurin<br>
><br>
> Diladele B.V.<br>
><br>
> <br>
><br>
> *From:*squid-users
[<a class="moz-txt-link-freetext" href="mailto:squid-users-bounces@lists.squid-cache.org">mailto:squid-users-bounces@lists.squid-cache.org</a>
<a class="moz-txt-link-rfc2396E" href="mailto:squid-users-bounces@lists.squid-cache.org"><mailto:squid-users-bounces@lists.squid-cache.org></a>] *On
Behalf Of *Ozgur Batur<br>
> *Sent:* Friday, June 24, 2016 4:23 PM<br>
> *To:* Yuri <<a class="moz-txt-link-abbreviated" href="mailto:yvoinov@gmail.com">yvoinov@gmail.com</a>
<a class="moz-txt-link-rfc2396E" href="mailto:yvoinov@gmail.com"><mailto:yvoinov@gmail.com></a>><br>
> *Cc:* <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<a class="moz-txt-link-rfc2396E" href="mailto:squid-users@lists.squid-cache.org"><mailto:squid-users@lists.squid-cache.org></a><br>
> *Subject:* Re: [squid-users] flickr.com
<a class="moz-txt-link-rfc2396E" href="http://flickr.com"><http://flickr.com></a> redirect error<br>
><br>
> <br>
><br>
> Hi Yuri,<br>
><br>
> <br>
><br>
> Thank you. I put the #301 loop directives and restarted
squid unfortunately result is the same. Here is the access logs:<br>
><br>
> <br>
><br>
> 1466777191.791 235 ::1 TCP_MISS/301 987 GET
<a class="moz-txt-link-freetext" href="https://www.flickr.com/">https://www.flickr.com/</a> - HIER_DIRECT/188.125.93.100
<a class="moz-txt-link-rfc2396E" href="http://188.125.93.100"><http://188.125.93.100></a> text/html<br>
><br>
> 1466777192.031 237 ::1 TCP_MISS/301 987 GET
<a class="moz-txt-link-freetext" href="https://www.flickr.com/">https://www.flickr.com/</a> - HIER_DIRECT/188.125.93.100
<a class="moz-txt-link-rfc2396E" href="http://188.125.93.100"><http://188.125.93.100></a> text/html<br>
><br>
> 1466777192.386 352 ::1 TCP_MISS/301 987 GET
<a class="moz-txt-link-freetext" href="https://www.flickr.com/">https://www.flickr.com/</a> - HIER_DIRECT/188.125.93.100
<a class="moz-txt-link-rfc2396E" href="http://188.125.93.100"><http://188.125.93.100></a> text/html<br>
><br>
> 1466777192.612 223 ::1 TCP_MISS/301 987 GET
<a class="moz-txt-link-freetext" href="https://www.flickr.com/">https://www.flickr.com/</a> - HIER_DIRECT/188.125.93.100
<a class="moz-txt-link-rfc2396E" href="http://188.125.93.100"><http://188.125.93.100></a> text/html<br>
><br>
> ...<br>
><br>
> <br>
><br>
> As I understand all responses are from origin server,
there is no cache hit with or without store_miss and send_hit.
Confusing part is when directly connected to server without proxy,
flickr server does not send 301 response. When squid sends the
same request somehow flickr server returns 301 with same URL. <br>
><br>
> <br>
><br>
> Ozgur<br>
><br>
> <br>
><br>
> <br>
><br>
> On Fri, Jun 24, 2016 at 3:50 PM, Yuri
<<a class="moz-txt-link-abbreviated" href="mailto:yvoinov@gmail.com">yvoinov@gmail.com</a> <a class="moz-txt-link-rfc2396E" href="mailto:yvoinov@gmail.com"><mailto:yvoinov@gmail.com></a>> wrote:<br>
><br>
> Try to do something like:<br>
><br>
> <br>
><br>
> # 301 loop<br>
> acl text_mime rep_mime_type text/html text/plain<br>
><br>
> acl http301 http_status 301<br>
><br>
> store_miss deny text_mime http301<br>
> send_hit deny text_mime http301<br>
><br>
> <br>
><br>
> 24.06.2016 18:14, Ozgur Batur пишет:<br>
><br>
> I receive too many redirects(301 responses with
same page URL) error on browser when opening
<a class="moz-txt-link-freetext" href="https://www.flickr.com">https://www.flickr.com</a> via Squid 3.5 proxy with SSL interception.
If I connect to flickr website directly without Squid error does
not happen. <br>
><br>
> <br>
><br>
> I tested it on two different systems one is
Centos other is Ubuntu. There is no acl, redirect or any other
configuration in squid.conf except enabling SSL interception.<br>
><br>
> <br>
><br>
> I opened
<a class="moz-txt-link-freetext" href="http://bugs.squid-cache.org/show_bug.cgi?id=4537">http://bugs.squid-cache.org/show_bug.cgi?id=4537</a> for this issue
but later thought it is better to ask if you also experience the
same issue.<br>
><br>
> <br>
><br>
> <br>
><br>
> Ozgur<br>
><br>
> <br>
><br>
> _______________________________________________<br>
><br>
> squid-users mailing list<br>
><br>
> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<a class="moz-txt-link-rfc2396E" href="mailto:squid-users@lists.squid-cache.org"><mailto:squid-users@lists.squid-cache.org></a><br>
><br>
> <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a><br>
><br>
> <br>
><br>
><br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<a class="moz-txt-link-rfc2396E" href="mailto:squid-users@lists.squid-cache.org"><mailto:squid-users@lists.squid-cache.org></a><br>
> <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a><br>
><br>
> <br>
><br>
><br>
><br>
><br>
> -- <br>
> H Özgür Batur</span><br>
<br>
-----BEGIN PGP SIGNATURE-----
<br>
Version: GnuPG v2
<br>
<br>
iQEcBAEBCAAGBQJXbVmoAAoJENNXIZxhPexGPFgH/ib6RKjQ/JhhnvTtBQnM6euV
<br>
+F6e/rrf6B295OpsrUgqFdogmCshJZGivdSBd8266KPOlvxE3I0F01SNBtAt96wC
<br>
1pL3Sam+TmFwbOGa5vYStQ+ZAkn5ReiSHppKVdeR1lXxBlMuhcDJovIxDtXvVV5G
<br>
SZcmJWT1q+LS8vcS+mGybXOt0H7J32sSUyor+qJ0CZEfG5HEPb1XKjave1mJNxUj
<br>
JEwsL0/B5zVw8LtL2yOzZY7E3ERY0r2ieGqQ4GpzYUVoDwoc5q8xwKaU08j5qyrP
<br>
iS2fW8wbAZ2RoZmvJRxnFpFKel0NgzwrAOUeSAs8hPONUUpWaklFTL55lezNY+A=
<br>
=t07f
<br>
-----END PGP SIGNATURE-----
<br>
<br>
</body>
</html>