[squid-users] probs with squid and url forwarding

[Andreas.Reschke at mahle.com]

"squid-users" <squid-users-bounces at lists.squid-cache.org> schrieb am 20.11.2014 11:07:57:

> Von: Amos Jeffries <squid3 at treenet.co.nz>
> An: squid-users at lists.squid-cache.org
> Datum: 20.11.2014 11:08
> Betreff: Re: [squid-users] probs with squid and url forwarding
> Gesendet von: "squid-users" <squid-users-bounces at lists.squid-cache.org>
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On 20/11/2014 10:57 p.m., Andreas.Reschke wrote:
> > Hi there,
> > 
> > we're using 3 squid proxy (version 3.3.-13, no caching, no
> > logging) at our LAN (4500 User) in front of a squid proxy at the
> > DMZ. Now there are a lot of troubles with portals for the costumer
> > (like www.covisint.com). After register at this portal and select
> > the application there is a forward to another domain. At this point
> > squid can't connect the other domain with the error: this side
> > isn't reachable.
> > 
> > How to fix this?
> 
> What is the HTTP message being sent from the client to Squid when it
> "breaks"?
> 
> And what error details is Squid reporting about the problem in cache.log?
>  NP: cache.log is mandatory, only access.log/store.log are optional.
> 
> Amos
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.22 (MingW32)
> 
> iQEcBAEBAgAGBQJUbb19AAoJELJo5wb/XPRja0gH/jtExNBSJLU/bHplHeZ8F1Ik
> k+nhEf3OvbfrcF1juHRueHW+3bXtQq+CGbh5i7Fq8dGcg84boXEWJ1ViNzBRiy6k
> CJgCKT7XKVIrCm9f5EMa4kBwgioXaj0Jhpu7A0vQSjC36Orsw0S4pBrfxus3RSie
> gsHmJpuhLNxETOBFFKYDBtCD6aZQtmbuEKbKkLotk/OIkpeGQWuIE2Os4F9eSJ5o
> Ujr0dRUoThIBT2VMnI3lLcw3bskQHI4oGWlDKV2VO2sDB9AnbGEQU6uyYXhD6Z+/
> HtFvyxYQCW53J0JJO6n7otbuEFN0XneDUDxBxhFBgnfrFwNeskW/DbUajQTxxG8=
> =1Wl/
> -----END PGP SIGNATURE-----
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users 

Hi Amos,
access.log is off because of we aren't allowed to log the user. Cache.log contains only LDAP-User-Auth and -groups.
The only method is read the stream with netcat, but there aren't nice data because of https.

Here are the sites:
1. https://fsp.portal.covisint.com/web/portal/applications
goes to
2. https://fim.covisint.com/ap/ford?TARGET=https://www.sim.ford.com
goes to
3. https://www.wsl-federation.ford.com/Federation/Redirect/Covisint
and then

Connection error
Fehler: Verbindung fehlgeschlagen

Firefox kann keine Verbindung zu dem Server unter www.wsl-federation.ford.com aufbauen.


Mit freundlichen Grüßen / Kind regards

Mr. Andreas Reschke
andreas.reschke at mahle.com