<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:"Arial Rounded MT Bold";}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0cm;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
span.EmailStyle17
        {mso-style-type:personal-reply;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
@page WordSection1
        {size:612.0pt 792.0pt;
        margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Hey Ahmad,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Try the new version of ms-updates from:<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://ngtech.co.il/ms-updates-store/">http://ngtech.co.il/ms-updates-store/</a><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://www1.ngtech.co.il/wpe/?page_id=301">http://www1.ngtech.co.il/wpe/?page_id=301</a><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Since you are using an armX based system.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>From my point of view on things I do not see the difference between other traffic to MS updates.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Windows Updates are HTTP requests and responses which are identical to other objects.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>When a proxy or a service starts to see these things with "new" perspective my assumption is that something with either RAM or CPU or DISK is wrong and couple simple objects will clear out things about the proxy state.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><br>What I need is a testing use case from the squid world jargon.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Are you using an Intercept proxy?<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>If so what type of Interception? Tproxy or Intercept?<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>What objects did you tried until now? Only Windows Updates?<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Do you have a dump of these requests?(you can use <a href="http://wiki.squid-cache.org/KnowledgeBase/DebugSections">http://wiki.squid-cache.org/KnowledgeBase/DebugSections</a>)<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>The dumps should be using section 11 ie: debug_options ALL,1 11,6<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>With these dumps we need the corresponding access.log.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>These should be enough to think about things and maybe re-test them.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Also What OS are you using?<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Eliezer<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Arial Rounded MT Bold","sans-serif";color:#1F497D'>----<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Arial Rounded MT Bold","sans-serif";color:#1F497D'><a href="http://ngtech.co.il/lmgtfy/"><span style='color:#0563C1'>Eliezer Croitoru</span></a><br>Linux System Administrator<br>Mobile: +972-5-28704261<br>Email: eliezer@ngtech.co.il<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><img border=0 width=183 height=69 id="Picture_x0020_1" src="cid:image002.png@01D20EDD.A8517E40"><o:p></o:p></span></p></div><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>From:</span></b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'> squid-users [mailto:squid-users-bounces@lists.squid-cache.org] <b>On Behalf Of </b>--Ahmad--<br><b>Sent:</b> Tuesday, September 6, 2016 8:08 PM<br><b>To:</b> Yuri Voinov<br><b>Cc:</b> squid-users@lists.squid-cache.org<br><b>Subject:</b> Re: [squid-users] windows update not working squid 3.5.2<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>/driver/drvs/2015/10/200006767_cec6101480492a8c7be6e668ff3284626a787359.cab - ORIGINAL_DST/8.253.13.30 application/octet-stream<br>1473181228.768   1202 192.168.0.10 TCP_MISS/206 1049144 GET <a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe</a> - ORIGINAL_DST/8.253.70.206 application/octet-stream<br>1473181229.117   1159 192.168.0.10 TCP_MISS/206 1049146 GET <a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/driver/drvs/2015/10/200006767_cec6101480492a8c7be6e668ff3284626a787359.cab">http://fg.v4.download.windowsupdate.com/d/msdownload/update/driver/drvs/2015/10/200006767_cec6101480492a8c7be6e668ff3284626a787359.cab</a> - ORIGINAL_DST/8.253.70.206 application/octet-stream<br>1473181229.265    984 192.168.0.10 TCP_MISS/206 1049144 GET <a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe</a> - ORIGINAL_DST/8.253.13.46 application/octet-stream<br>1473181229.525   1207 192.168.0.10 TCP_MISS/206 1049144 GET <a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe</a> - ORIGINAL_DST/8.253.13.46 application/octet-stream<br>1473181230.066   1314 192.168.0.10 TCP_MISS/206 1049146 GET <a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/driver/drvs/2015/10/200006767_cec6101480492a8c7be6e668ff3284626a787359.cab">http://fg.v4.download.windowsupdate.com/d/msdownload/update/driver/drvs/2015/10/200006767_cec6101480492a8c7be6e668ff3284626a787359.cab</a> - ORIGINAL_DST/8.253.70.206 application/octet-stream<br>1473181230.147    913 192.168.0.10 TCP_MISS/206 1049146 GET <a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/driver/drvs/2015/10/200006767_cec6101480492a8c7be6e668ff3284626a787359.cab">http://fg.v4.download.windowsupdate.com/d/msdownload/update/driver/drvs/2015/10/200006767_cec6101480492a8c7be6e668ff3284626a787359.cab</a> - ORIGINAL_DST/8.253.13.46 application/octet-stream<br>1473181230.166   1659 192.168.0.10 TCP_MISS/206 1049144 GET <a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/driver/drvs/2015/10/200006767_cec6101480492a8c7be6e668ff3284626a787359.cab">http://fg.v4.download.windowsupdate.com/d/msdownload/update/driver/drvs/2015/10/200006767_cec6101480492a8c7be6e668ff3284626a787359.cab</a> - ORIGINAL_DST/8.253.13.30 application/octet-stream<br>1473181230.438   1233 192.168.0.10 TCP_MISS/206 1049144 GET <a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe</a> - ORIGINAL_DST/8.253.13.30 application/octet-stream<br>1473181230.461   1569 192.168.0.10 TCP_MISS/206 1049146 GET <a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe</a> - ORIGINAL_DST/8.253.13.46 application/octet-stream<br>1473181230.621   1023 192.168.0.10 TCP_MISS/206 1049144 GET <a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/driver/drvs/2015/10/200006767_cec6101480492a8c7be6e668ff3284626a787359.cab">http://fg.v4.download.windowsupdate.com/d/msdownload/update/driver/drvs/2015/10/200006767_cec6101480492a8c7be6e668ff3284626a787359.cab</a> - ORIGINAL_DST/8.253.13.46 application/octet-stream<br>1473181231.143   1219 192.168.0.10 TCP_MISS/206 1049144 GET <a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe</a> - ORIGINAL_DST/8.253.13.46 application/octet-stream<br>1473181231.166   1212 192.168.0.10 TCP_MISS/206 1049144 GET <a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe</a> - ORIGINAL_DST/8.253.13.46 application/octet-stream<br>1473181231.528   1131 192.168.0.10 TCP_MISS/206 1049142 GET <a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/driver/drvs/2015/10/200006767_cec6101480492a8c7be6e668ff3284626a787359.cab">http://fg.v4.download.windowsupdate.com/d/msdownload/update/driver/drvs/2015/10/200006767_cec6101480492a8c7be6e668ff3284626a787359.cab</a> - ORIGINAL_DST/8.253.13.46 application/octet-stream<br>1473181231.601   1416 192.168.0.10 TCP_MISS/206 1049146 GET <a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/driver/drvs/2015/10/200006767_cec6101480492a8c7be6e668ff3284626a787359.cab">http://fg.v4.download.windowsupdate.com/d/msdownload/update/driver/drvs/2015/10/200006767_cec6101480492a8c7be6e668ff3284626a787359.cab</a> - ORIGINAL_DST/8.253.13.30 application/octet-stream<br>1473181231.784    938 192.168.0.10 TCP_MISS/206 1049144 GET <a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe</a> - ORIGINAL_DST/8.253.13.46 application/octet-stream<br>1473181232.102   1565 192.168.0.10 TCP_MISS/206 1049142 GET <a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe</a> - ORIGINAL_DST/8.253.70.206 application/octet-stream<br>1473181232.330   1453 192.168.0.10 TCP_MISS/206 1049146 GET <a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/driver/drvs/2015/10/200006767_cec6101480492a8c7be6e668ff3284626a787359.cab">http://fg.v4.download.windowsupdate.com/d/msdownload/update/driver/drvs/2015/10/200006767_cec6101480492a8c7be6e668ff3284626a787359.cab</a> - ORIGINAL_DST/8.253.70.206 application/octet-stream<br><br><br>with squid.conf :<br>#########<br>acl windowsupdate dstdomain <a href="http://windowsupdate.microsoft.com">windowsupdate.microsoft.com</a><br>acl windowsupdate dstdomain .<a href="http://update.microsoft.com">update.microsoft.com</a><br>acl windowsupdate dstdomain <a href="http://download.windowsupdate.com">download.windowsupdate.com</a><br>acl windowsupdate dstdomain <a href="http://redir.metaservices.microsoft.com">redir.metaservices.microsoft.com</a><br>acl windowsupdate dstdomain <a href="http://images.metaservices.microsoft.com">images.metaservices.microsoft.com</a><br>acl windowsupdate dstdomain <a href="http://c.microsoft.com">c.microsoft.com</a><br>acl windowsupdate dstdomain <a href="http://www.download.windowsupdate.com">www.download.windowsupdate.com</a><br>acl windowsupdate dstdomain <a href="http://wustat.windows.com">wustat.windows.com</a><br>acl windowsupdate dstdomain <a href="http://crl.microsoft.com">crl.microsoft.com</a><br>acl windowsupdate dstdomain <a href="http://sls.microsoft.com">sls.microsoft.com</a><br>acl windowsupdate dstdomain <a href="http://productactivation.one.microsoft.com">productactivation.one.microsoft.com</a><br>acl windowsupdate dstdomain <a href="http://ntservicepack.microsoft.com">ntservicepack.microsoft.com</a><br><br>acl CONNECT method CONNECT<br>acl wuCONNECT dstdomain <a href="http://www.update.microsoft.com">www.update.microsoft.com</a><br>acl wuCONNECT dstdomain <a href="http://sls.microsoft.com">sls.microsoft.com</a><br><br>#http_access allow CONNECT wuCONNECT localnet<br>#http_access allow windowsupdate localnet<br>#######################<br># Updates: Windows<br>refresh_pattern -i <a href="http://windowsupdate.com/.*">windowsupdate.com/.*</a>\.(cab|exe|ms[i|u|f|p]|[ap]sf|wm[v|a]|dat|zip|psf) 43200 80% 129600 reload-into-ims<br>refresh_pattern -i <a href="http://microsoft.com/.*">microsoft.com/.*</a>\.(cab|exe|ms[i|u|f|p]|[ap]sf|wm[v|a]|dat|zip|psf) 43200 80% 129600 reload-into-ims<br>refresh_pattern -i <a href="http://windows.com/.*">windows.com/.*</a>\.(cab|exe|ms[i|u|f|p]|[ap]sf|wm[v|a]|dat|zip|psf) 43200 80% 129600 reload-into-ims<br>refresh_pattern -i <a href="http://microsoft.com.akadns.net/.*">microsoft.com.akadns.net/.*</a>\.(cab|exe|ms[i|u|f|p]|[ap]sf|wm[v|a]|dat|zip|psf) 43200 80% 129600 reload-into-ims<br>refresh_pattern -i <a href="http://deploy.akamaitechnologies.com/.*">deploy.akamaitechnologies.com/.*</a>\.(cab|exe|ms[i|u|f|p]|[ap]sf|wm[v|a]|dat|zip|psf) 43200 80% 129600 reload-into-ims<br>###########<br>#refresh_pattern -i <a href="http://microsoft.com/.*">microsoft.com/.*</a>\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims<br>#refresh_pattern -i <a href="http://windowsupdate.com/.*">windowsupdate.com/.*</a>\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims<br>#refresh_pattern -i <a href="http://windows.com/.*">windows.com/.*</a>\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims<br># DONT MODIFY THESE LINES<br>refresh_pattern \^ftp:           1440    20%     10080<br>refresh_pattern \^gopher:        1440    0%      1440<br>refresh_pattern -i (/cgi-bin/|\?) 0     0%      0<br>refresh_pattern .               0       20%     4320<br>#################################################################<br>###########################<br>#<br># Recommended minimum configuration:<br>#<br><br># Example rule allowing access from your local networks.<br># Adapt to list your (internal) IP networks from where browsing<br># should be allowed<br>acl localnet src 10.0.0.0/8     # RFC1918 possible internal network<br>acl localnet src 172.16.0.0/12  # RFC1918 possible internal network<br>acl localnet src 192.168.0.0/16 # RFC1918 possible internal network<br>acl localnet src fc00::/7       # RFC 4193 local private network range<br>acl localnet src fe80::/10      # RFC 4291 link-local (directly plugged) machines<br><br>acl SSL_ports port 443<br>acl Safe_ports port 80          # http<br>acl Safe_ports port 21          # ftp<br>acl Safe_ports port 443         # https<br>acl Safe_ports port 70          # gopher<br>acl Safe_ports port 210         # wais<br>acl Safe_ports port 1025-65535  # unregistered ports<br>acl Safe_ports port 280         # http-mgmt<br>acl Safe_ports port 488         # gss-http<br>acl Safe_ports port 591         # filemaker<br>acl Safe_ports port 777         # multiling http<br>acl CONNECT method CONNECT<br><br>#<br># Recommended minimum Access Permission configuration:<br>#<br># Deny requests to certain unsafe ports<br>http_access allow CONNECT wuCONNECT localnet<br>http_access allow windowsupdate localnet<br>http_access deny !Safe_ports<br><br># Deny CONNECT to other than secure SSL ports<br>http_access deny CONNECT !SSL_ports<br><br># Only allow cachemgr access from localhost<br>http_access allow localhost manager<br>http_access deny manager<br><br># We strongly recommend the following be uncommented to protect innocent<br># web applications running on the proxy server who think the only<br># one who can access services on "localhost" is a local user<br>#http_access deny to_localhost<br><br>#<br># INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS<br>#<br><br># Example rule allowing access from your local networks.<br># Adapt localnet in the ACL section to list your (internal) IP networks<br># from where browsing should be allowed<br>http_access allow localnet<br>http_access allow localhost<br><br># And finally deny all other access to this proxy<br>http_access deny all<br><br># Squid normally listens to port 3128<br>http_port 192.168.0.1:3128<br><br># Uncomment and adjust the following to add a disk cache directory.<br>cache_dir ufs /var/cache/squid 20000 16 256<br><br># Leave coredumps in the first cache dir<br>coredump_dir /var/cache/squid<br><br>#<br># Add any of your own refresh_pattern entries above these.<br>#<br>#refresh_pattern ^ftp:          1440    20%     10080<br>#refresh_pattern ^gopher:       1440    0%      1440<br>#refresh_pattern -i (/cgi-bin/|\?) 0    0%      0<br>#refresh_pattern .              0       20%     4320<br>#############<br>range_offset_limit 5 Gb windowsupdate<br>maximum_object_size 5 Gb<br>quick_abort_min -1<br>#########<br>http_port 3129 intercept<br>#####################<o:p></o:p></p><div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal>On Sep 6, 2016, at 6:01 PM, Yuri Voinov <<a href="mailto:yvoinov@gmail.com">yvoinov@gmail.com</a>> wrote:<o:p></o:p></p></div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal><br>-----BEGIN PGP SIGNED MESSAGE-----<br>Hash: SHA256<br><br><a href="http://wiki.squid-cache.org/ConfigExamples/Caching/WindowsUpdates">http://wiki.squid-cache.org/ConfigExamples/Caching/WindowsUpdates</a><br><br>Did you read this?<br><br><br>06.09.2016 20:59, --Ahmad-- пишет:<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>hi squid users .<br><br>I’m trying to catch windows updates as cached object<br>im testing with  windows 10 pc<br><br>i see all request as tcp_miss and the caching store is not getting<o:p></o:p></p></blockquote><p class=MsoNormal>increase .<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal><br>=========<br>1473173748.014   3603 192.168.0.10 TCP_MISS/206 1049229 GET<o:p></o:p></p></blockquote><p class=MsoNormal><a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf</a><br>- ORIGINAL_DST/13.107.4.50 application/octet-stream<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>1473173748.022  12146 192.168.0.10 TCP_MISS/206 1049229 GET<o:p></o:p></p></blockquote><p class=MsoNormal><a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf</a><br>- ORIGINAL_DST/13.107.4.50 application/octet-stream<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>1473173748.057   5321 192.168.0.10 TCP_MISS/206 1049229 GET<o:p></o:p></p></blockquote><p class=MsoNormal><a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf</a><br>- ORIGINAL_DST/13.107.4.50 application/octet-stream<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>1473173748.155   3684 192.168.0.10 TCP_MISS/206 1049229 GET<o:p></o:p></p></blockquote><p class=MsoNormal><a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf</a><br>- ORIGINAL_DST/13.107.4.50 application/octet-stream<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>1473173748.355   4832 192.168.0.10 TCP_MISS/206 1049229 GET<o:p></o:p></p></blockquote><p class=MsoNormal><a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf</a><br>- ORIGINAL_DST/13.107.4.50 application/octet-stream<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>1473173748.612  12645 192.168.0.10 TCP_MISS/206 1049229 GET<o:p></o:p></p></blockquote><p class=MsoNormal><a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf</a><br>- ORIGINAL_DST/13.107.4.50 application/octet-stream<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>1473173748.650   7276 192.168.0.10 TCP_MISS/206 1049229 GET<o:p></o:p></p></blockquote><p class=MsoNormal><a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf</a><br>- ORIGINAL_DST/13.107.4.50 application/octet-stream<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>1473173748.720  12654 192.168.0.10 TCP_MISS/206 1049229 GET<o:p></o:p></p></blockquote><p class=MsoNormal><a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf</a><br>- ORIGINAL_DST/13.107.4.50 application/octet-stream<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>1473173748.816   5064 192.168.0.10 TCP_MISS/206 1049229 GET<o:p></o:p></p></blockquote><p class=MsoNormal><a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf</a><br>- ORIGINAL_DST/13.107.4.50 application/octet-stream<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>1473173749.022   4159 192.168.0.10 TCP_MISS/206 1049229 GET<o:p></o:p></p></blockquote><p class=MsoNormal><a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf</a><br>- ORIGINAL_DST/13.107.4.50 application/octet-stream<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>1473173749.048   5618 192.168.0.10 TCP_MISS/206 1049229 GET<o:p></o:p></p></blockquote><p class=MsoNormal><a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf</a><br>- ORIGINAL_DST/13.107.4.50 application/octet-stream<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>1473173749.177   7817 192.168.0.10 TCP_MISS/206 1049229 GET<o:p></o:p></p></blockquote><p class=MsoNormal><a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf</a><br>- ORIGINAL_DST/13.107.4.50 application/octet-stream<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>1473173749.208   3383 192.168.0.10 TCP_MISS/206 1049229 GET<o:p></o:p></p></blockquote><p class=MsoNormal><a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf</a><br>- ORIGINAL_DST/13.107.4.50 application/octet-stream<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>1473173749.318   5096 192.168.0.10 TCP_MISS/206 1049229 GET<o:p></o:p></p></blockquote><p class=MsoNormal><a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf</a><br>- ORIGINAL_DST/13.107.4.50 application/octet-stream<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>1473173749.395   3986 192.168.0.10 TCP_MISS/206 1049229 GET<o:p></o:p></p></blockquote><p class=MsoNormal><a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf</a><br>- ORIGINAL_DST/13.107.4.50 application/octet-stream<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>1473173749.850  13837 192.168.0.10 TCP_MISS/206 1049229 GET<o:p></o:p></p></blockquote><p class=MsoNormal><a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf</a><br>- ORIGINAL_DST/13.107.4.50 application/octet-stream<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>1473173750.015    914 192.168.0.10 TCP_MISS/206 1049229 GET<o:p></o:p></p></blockquote><p class=MsoNormal><a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf</a><br>- ORIGINAL_DST/13.107.4.50 application/octet-stream<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>1473173750.029   1365 192.168.0.10 TCP_MISS/206 1049229 GET<o:p></o:p></p></blockquote><p class=MsoNormal><a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf</a><br>- ORIGINAL_DST/13.107.4.50 application/octet-stream<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>1473173750.420   7126 192.168.0.10 TCP_MISS/206 1049229 GET<o:p></o:p></p></blockquote><p class=MsoNormal><a href="http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf">http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf</a><br>- ORIGINAL_DST/13.107.4.50 application/octet-stream<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal><br>=======================<br><br>root@raspberrypi:~# du -sh /var/cache/squid/<br>17M     /var/cache/squid/<br>root@raspberrypi:~# du -sh /var/cache/squid/<br>17M     /var/cache/squid/<br>root@raspberrypi:~# du -sh /var/cache/squid/<br>17M     /var/cache/squid/<br>root@raspberrypi:~# du -sh /var/cache/squid/<br>17M     /var/cache/squid/<br>root@raspberrypi:~# du -sh /var/cache/squid/<br>17M     /var/cache/squid/<br>root@raspberrypi:~# du -sh /var/cache/squid/<br>17M     /var/cache/squid/<br>root@raspberrypi:~# du -sh /var/cache/squid/<br>17M     /var/cache/squid/<br>root@raspberrypi:~# du -sh /var/cache/squid/<br>17M     /var/cache/squid/<br>root@raspberrypi:~# du -sh /var/cache/squid/<br>17M     /var/cache/squid/<br>root@raspberrypi:~# du -sh /var/cache/squid/<br>17M     /var/cache/squid/<br>root@raspberrypi:~# du -sh /var/cache/squid/<br>17M     /var/cache/squid/<br>root@raspberrypi:~# du -sh /var/cache/squid/<br>17M     /var/cache/squid/<br>root@raspberrypi:~# du -sh /var/cache/squid/<br>17M     /var/cache/squid/<br>root@raspberrypi:~#<br><br>==============<br>here is squid config :<br><br>root@raspberrypi:~# cat /etc/squid/squid.conf<br>#########<br>acl windowsupdate dstdomain windowsupdate.microsoft.com<br>acl windowsupdate dstdomain .update.microsoft.com<br>acl windowsupdate dstdomain download.windowsupdate.com<br>acl windowsupdate dstdomain redir.metaservices.microsoft.com<br>acl windowsupdate dstdomain images.metaservices.microsoft.com<br>acl windowsupdate dstdomain c.microsoft.com<br>acl windowsupdate dstdomain <a href="http://www.download.windowsupdate.com">www.download.windowsupdate.com</a><br>acl windowsupdate dstdomain wustat.windows.com<br>acl windowsupdate dstdomain crl.microsoft.com<br>acl windowsupdate dstdomain sls.microsoft.com<br>acl windowsupdate dstdomain productactivation.one.microsoft.com<br>acl windowsupdate dstdomain ntservicepack.microsoft.com<br><br>acl CONNECT method CONNECT<br>acl wuCONNECT dstdomain <a href="http://www.update.microsoft.com">www.update.microsoft.com</a><br>acl wuCONNECT dstdomain sls.microsoft.com<br><br>#######################<br>refresh_pattern -i<o:p></o:p></p></blockquote><p class=MsoNormal>microsoft.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80%<br>43200 reload-into-ims<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>refresh_pattern -i<o:p></o:p></p></blockquote><p class=MsoNormal>windowsupdate.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320<br>80% 43200 reload-into-ims<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>refresh_pattern -i<o:p></o:p></p></blockquote><p class=MsoNormal>windows.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80%<br>43200 reload-into-ims<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal># DONT MODIFY THESE LINES<br>refresh_pattern \^ftp:           1440    20%     10080<br>refresh_pattern \^gopher:        1440    0%      1440<br>refresh_pattern -i (/cgi-bin/|\?) 0     0%      0<br>refresh_pattern .               0       20%     4320<br>#################################################################<br>###########################<br>#<br># Recommended minimum configuration:<br>#<br><br># Example rule allowing access from your local networks.<br># Adapt to list your (internal) IP networks from where browsing<br># should be allowed<br>acl localnet src 10.0.0.0/8     # RFC1918 possible internal network<br>acl localnet src 172.16.0.0/12  # RFC1918 possible internal network<br>acl localnet src 192.168.0.0/16 # RFC1918 possible internal network<br>acl localnet src fc00::/7       # RFC 4193 local private network range<br>acl localnet src fe80::/10      # RFC 4291 link-local (directly<o:p></o:p></p></blockquote><p class=MsoNormal>plugged) machines<br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal><br>acl SSL_ports port 443<br>acl Safe_ports port 80          # http<br>acl Safe_ports port 21          # ftp<br>acl Safe_ports port 443         # https<br>acl Safe_ports port 70          # gopher<br>acl Safe_ports port 210         # wais<br>acl Safe_ports port 1025-65535  # unregistered ports<br>acl Safe_ports port 280         # http-mgmt<br>acl Safe_ports port 488         # gss-http<br>acl Safe_ports port 591         # filemaker<br>acl Safe_ports port 777         # multiling http<br>acl CONNECT method CONNECT<br><br><br>http_access allow CONNECT wuCONNECT localnet<br>http_access allow windowsupdate localnet<br>http_access deny !Safe_ports<br><br># Deny CONNECT to other than secure SSL ports<br>http_access deny CONNECT !SSL_ports<br><br># Only allow cachemgr access from localhost<br>http_access allow localhost manager<br>http_access deny manager<br><br><br>http_access allow localnet<br>http_access allow localhost<br><br># And finally deny all other access to this proxy<br>http_access deny all<br><br># Squid normally listens to port 3128<br>http_port 192.168.0.1:3128<br><br># Uncomment and adjust the following to add a disk cache directory.<br>cache_dir ufs /var/cache/squid 100 16 256<br><br># Leave coredumps in the first cache dir<br>coredump_dir /var/cache/squid<br><br><br>#############<br>range_offset_limit 200 MB windowsupdate<br>maximum_object_size 200 MB<br>quick_abort_min -1<br>#########<br>http_port 3129 intercept<br>maximum_object_size 200000 KB<br><br><br><br><br>thank you<br><br>_______________________________________________<br>squid-users mailing list<br><a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br><a href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a><o:p></o:p></p></blockquote><p class=MsoNormal><br>-----BEGIN PGP SIGNATURE-----<br>Version: GnuPG v2<br><br>iQEcBAEBCAAGBQJXztpBAAoJENNXIZxhPexGSx4H/0bK8485yWhpNbGUIGtwvx9h<br>PTuRhfJP+f8xoTbTh/zH1TgXs21M953uf5DoYlynMBSeVXCfQQiUhDOs+0bqAjfD<br>JsLCXVpZdSYYWyX2aErjfZqKQO67aVkX+zJbAY/zlTJKG6Gxg1+ssQSEJaFWu6cK<br>J8KBudfWaKmPc9xdiZRfYFE6LKBSeQr93BqBF6s1SwdAPKEkspQmDTuqPZEwMwW5<br>zQfuI/HnIvynSE+SxCFYOAwka2zVAdewXfVyWqYyFCHaHnDkXkPmK/5zZJDOmqGi<br>erifbGQHRHAFWNnT4mMsHGjM3Wfz1bbhr+j+tZJkY4x116eVUMrVbbXRApY5nn0=<br>=ZaFG<br>-----END PGP SIGNATURE-----<br><br><0x613DEC46.asc>_______________________________________________<br>squid-users mailing list<br><a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br><a href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a><o:p></o:p></p></div></div></blockquote></div><p class=MsoNormal><o:p> </o:p></p></div></body></html>