<div dir="ltr"><div><div><div><div>Dear All,<br><br></div>Two things i want to share what i observed but didn't understand.<br><br></div>1- it happens to HTTPS 443 websites like facebook, youtube, google mail <br></div>2- it is squid configuration problem, because when i stop iptables the same problem arise. <br><br>as given below access.log entries. website give Error: <br>1492086861.068 33508 192.168.5.178 TAG_NONE/503 0 CONNECT <a href="http://plus.google.com:443">plus.google.com:443</a> - HIER_NONE/- -<br>1492086861.068 33506 192.168.5.178 TAG_NONE/503 0 CONNECT <a href="http://connect.facebook.net:443">connect.facebook.net:443</a> - HIER_NONE/- -<br>1492086861.068 32960 192.168.5.178 TAG_NONE/503 0 CONNECT <a href="http://www.youtube.com:443">www.youtube.com:443</a> - HIER_NONE/- -<br>1492086861.068 30685 192.168.5.178 TAG_NONE/503 0 CONNECT <a href="http://www.centos.org:443">www.centos.org:443</a> - HIER_NONE/- -<br>1492086861.068 30659 192.168.5.178 TAG_NONE/503 0 CONNECT <a href="http://m.addthis.com:443">m.addthis.com:443</a> - HIER_NONE/- -<br>1492086861.068 30658 192.168.5.178 TAG_NONE/503 0 CONNECT <a href="http://www.spinics.net:443">www.spinics.net:443</a> - HIER_NONE/- -<br><br><br></div>Interesting fact is that, after next refresh or open in new tab (Mozila/Chrome) , The same website gets open fine after a while. <br><br>Really confusing one because sometime working and some time problem.<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Apr 13, 2017 at 4:46 PM, Arsalan Hussain <span dir="ltr"><<a href="mailto:arsalan@preston.edu.pk" target="_blank">arsalan@preston.edu.pk</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div>Dear All,<br><br></div>I am facing problem with iptable rules for squid 3.5.23. my simple squid configuration is attached and also iptable rules.<br><br></div>It works fine when i restart squid, iptables, network services but after a while it give problem of slow speed or even rejecting packets in squid access.log<br><br> 0 192.168.6.129 TAG_NONE/503 0 CONNECT <a href="http://s.youtube.com:443" target="_blank">s.youtube.com:443</a> -HIER_NONE/- -<br> 0 192.168.6.129 TAG_NONE/503 0 CONNECT <a href="http://s.youtube.com:443" target="_blank">s.youtube.com:443</a> - HIER_NONE/- -<br></div><div><br></div><div>when these kind entries shows in access.log websites do not open to user and they received message refused by proxy. (a routine access.log entries attached).<br><br></div><div>If somebody assists me in this problem to solve it.<br></div><div><div><br><div class="m_-2418355811678403647gmail-m_-4988020504414630227gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr">With Regards,<br>
<p><br><b style="font-size:12.8px"><span style="color:rgb(23,54,93);background-image:initial;background-position:initial;background-repeat:initial">Arsalan Hussain</span></b><b style="font-size:12.8px"><span style="color:rgb(192,80,77)"></span></b></p><div><b><font size="2">If you are too lazy to plow now, don't expect a harvest, later</font></b><br></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
</div></div><div><div></div></div></div>
</blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr">With Regards,<br>
<p><br><b style="font-size:12.8px"><span style="color:rgb(23,54,93);background-image:initial;background-position:initial;background-repeat:initial">Arsalan Hussain</span></b><br><b style="font-size:12.8px"><span style="color:#c0504d">Assistant Director, Networks & Information System</span></b></p><p><span><b style="font-size:12.8px"><span style="font-size:14.0pt;font-family:"Baskerville Old Face",serif;color:#4f81bd">PRESTON UNIVERSITY</span></b><br><span style="color:rgb(31,73,125);font-size:12.8px">Add: Plot: 85, Street No: 3, Sector H-8/1, Islamabad, Pakistan</span><br><span style="color:rgb(31,73,125);font-size:12.8px">Cell: +92-322-5018611</span><br><span style="color:rgb(31,73,125);font-size:12.8px">UAN: (51) 111-707-808 (Ext: 443)</span></span></p><div><b><font size="2">If you are too lazy to plow now, don't expect a harvest, later</font></b><br></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
</div>