[squid-users] Squid 2.7 STABLE8 (Win2008) can't get my MS Lync 2013 to work?

[Mirza Dedic]

Hi Eliezer,

After I commented out the SquidGuard part of the config and restarted squid
I restart my Lync 2013 client and it connects without a proxy prompt, in the
log I still see the " 1412723608.354    485 172.16.12.110 TCP_MISS/200 11695
CONNECT login.microsoftonline.com:443 - DIRECT/65.52.244.66 -" but no proxy
on the client's side.

So, something in SquidGuard must be causing this??

I did not want to uncomment the NTLM because we use this to provide seamless
authentication for the clients, if we only allow basic it will prompt for
user/pass won't it?

We use SquidGuard as it has a pre-defined list of blocked sites, so it was a
quick way to add a set of blocked sites.. but this whole setup is old I
don't even know where the win32 binaries came from for squidguard.. 

You mentioned a 3.x being developed for Windows, is this internal only or
somewhere I can follow the progress?

Thank you for your help on this !

-----Original Message-----
From: Eliezer Croitoru [mailto:eliezer at ngtech.co.il] 
Sent: October 7, 2014 3:47 PM
To: squid-users at lists.squid-cache.org
Cc: Mirza Dedic
Subject: Re: [squid-users] Squid 2.7 STABLE8 (Win2008) can't get my MS Lync
2013 to work?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

It's Eliezer..

Since you are using squidguard and ntlm first try to disable them both for a
specific src IP and\or dst domain\ip for the testing period.

For the specific domains of ms and specific dst ip addresses it can be
disabled since they most likely will not host facebook\youtube\other stuff.
(if and only if this is what you are looking to use squidguard for..)

If you can run a newer version of squid even as a VM it would at least give
you the option to minimize the search since 2.7 will not get an update.

There is a work in progress to build squid for windows but I would recommend
you to run a newer version on a liunx machine.
If you do not like cli you can use webmin for most of your basic tasks as a
proxy\cache admin.

If you have wireshark installed on the windows machine we might be able to
see what's in the packets but I cannot guarantee that I will find the issue
in the capture.

All The Bests,
Eliezer

On 10/08/2014 01:00 AM, Mirza Dedic wrote:
> Hi Elizabeth, Thanks, I totally forgot I could use a paste like 
> service, here is the link to my squid.conf file:
> http://pastie.org/9629651 I have stripped out the comments from the 
> paste. It seems it could be HTTP 1.1 according to 
> http://blog.schertz.name/2012/12/http-utilized-lync-server/ Does this 
> mean I am out of luck with getting this to work on Squid 2.7 STABLE8? 
> I would upgrade to a higher version, however 2.7 STABLE8 is the latest 
> available version for Windows it appears.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJUNG1aAAoJENxnfXtQ8ZQUfQgH/1zjzDX9ZHRWx7UOpGz1/Ai8
KWdB3fzM0HwnCo/xh7lyOY4VRLaX4knfnsIS2rP3u7QyNOy2Z2x91um2PhQXbFbE
sPA+tIeetA1zv2EeETqvu8lYVxd6BVHMdinMQqafgAlH/Ybx2QMC7hHJemgUiaZS
rBEMT1vc8De9GHfHjDQWcqUrOd8pno2xuObLmF1fFyxGwBNrWeuebxq6KZP0L9fU
/UHfpFuFc782N9TRHDzoJz+pqpHp/Y4juP5KAKfs77Bw11f/udKXCCxPC7nVTlxU
PznuRfwh8mRYzMjjvpZhh8iVlyi4EQLy5ck3b8wjVf5yBt/gMI5W5hw2Gz+BP7M=
=bE7/
-----END PGP SIGNATURE-----