[squid-users] Squid 2.7 STABLE8 (Win2008) can't get my MS Lync 2013 to work?

Wed Oct 8 15:19:29 UTC 2014

Thanks Amos,
It seems I spoke too fast, the proxy prompt is back, so disabling SG didn't do the trick.
Two two hits I see in access.log are:
1412778349.755    141 172.16.12.110 TCP_MISS/200 462 POST http://sqm.microsoft.com/sqm/wm/sqmserver.dll - DIRECT/65.55.7.141 -1412778349.911    515 172.16.12.110 TCP_MISS/200 11695 CONNECT login.microsoftonline.com:443 - DIRECT/157.55.208.198 -
These happen when I restart the Lync program and at the time of the proxy prompt.
My config file is here: http://pastebin.com/MSsTWum2
I spent last night trying to mess with cygwin + squid to try and tackle this issue by upgrading to a more supported squid, I see there is a 3.3.3 published in their repository; I got this working at home (squid starts) on Windows 7 machine however getting errors trying to start the same cygwin setup on my win2003 remote server, getting..
2014/10/08 08:12:56| aclIpParseIpData: Bad host/IP: '::1' in '::1', flags=0 : (8) Name or service not knownFATAL: Bungled Default Configuration line 11: acl localhost src 127.0.0.1/32 ::1Squid Cache (Version 3.3.3): Terminated abnormally.
My cygwin squid.conf is similar to 2.7, except a few changes.. http://pastebin.com/BrCG8yHL
I am confused because no where is acl loclahost src defined in my config, and I tried starting squid with -f to make sure I am reading in the correct squid.conf file.
Figured i'd try the cygwin+squid route to get a more supported version going, but I am having issues starting it in my Win2003 box (the box has multiple network cards, so don't know if that has anything to do with it?).
> Date: Wed, 8 Oct 2014 19:35:25 +1300
> From: squid3 at treenet.co.nz
> To: squid-users at lists.squid-cache.org
> Subject: Re: [squid-users] Squid 2.7 STABLE8 (Win2008) can't get my MS Lync 2013 to work?
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On 8/10/2014 12:17 p.m., Mirza Dedic wrote:
> > Hi Eliezer,
> > 
> > After I commented out the SquidGuard part of the config and
> > restarted squid I restart my Lync 2013 client and it connects
> > without a proxy prompt, in the log I still see the " 1412723608.354
> > 485 172.16.12.110 TCP_MISS/200 11695 CONNECT
> > login.microsoftonline.com:443 - DIRECT/65.52.244.66 -" but no
> > proxy on the client's side.
> > 
> > So, something in SquidGuard must be causing this??
> 
> Yes several things. Basically SG does not contain all of the hacks and
> disablings necessary to cope with demands NTLM places on HTTP proxies.
> Which is reasonable since its design goal is to filter HTTP traffic.
> 
> > 
> > I did not want to uncomment the NTLM because we use this to provide
> > seamless authentication for the clients, if we only allow basic it
> > will prompt for user/pass won't it?
> > 
> > We use SquidGuard as it has a pre-defined list of blocked sites, so
> > it was a quick way to add a set of blocked sites.. but this whole
> > setup is old I don't even know where the win32 binaries came from
> > for squidguard..
> 
> In which case there should be no need for you to have SG at all.
> 
> The popular blocklist/blacklist sources for SG also provide Squid
> format downloads of the same lists, or converters are easily written.
> https://www.google.com/search?q=squid+blacklist
> 
> 
> > 
> > You mentioned a 3.x being developed for Windows, is this internal
> > only or somewhere I can follow the progress?
> 
> I am the one driving that effort at present. It is a side hobby on my
> overall goal of feature parity between Squid-2 and Squid-3 - keeping
> Squid building and running on any OS Squid-2 was useful for.
> 
> The official state of Squid on Windows is documented in here:
> http://wiki.squid-cache.org/KnowledgeBase/Windows
> the newest bits are down under "Porting Efforts" for now.
> 
> Changes as they are found are being applied directly on the mainstream
> 3.HEAD version. So the regular 3.HEAD ChangeLog and bugzilla are used
> to track minor changes and issues.
> 
> Summary:
> So far I have MinGW-w64 executables of Squid-3.5 that produce "Error
> 127". yay!. Any assistance figuring out what I have done wrong to get
> that is welcome. So far I think its a missing DLL or wrong .exe
> settings going into the compiler.
> 
> Visual Studio 2012 builds are also ongoing, but will not be available
> until the Foundation provides an upstream git repository (being planned).
> 
> Personal donations welcome (<http://treenet.co.nz/projects/squid/>),
> but due to the above error 127 I am disinclined to accept contracts
> with anything like a deadline.
> 
> Amos
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.22 (MingW32)
> 
> iQEcBAEBAgAGBQJUNNstAAoJELJo5wb/XPRjN6IH/AhZf3+k0YizpxjmoyYh0E4/
> AgbJ+fCtA/tvObKPN862xKQ/TCLnV9uOT/SFClf9Occ8fqJZex0ViNnIJiSrLaS7
> 7SP4/C58D4T8FV1331HZmh36q38ui+bHTVvRWDjz4J0CC9/pmKCI5nVvLW8KbjYC
> T0ZhOBU2L7VZ3zUhwTsKKD0UfroMzRyzcipmRMysNXpfG/5unZb4XLfk/AQdWRqo
> zpXV6vA7uJGQnZO9fnuMOOysG7UqmyydlFWAkwM9XL+7SJC9bCKmPk/T9+CIvRN7
> 31gbNdi3ZfyWSkgI9lp1UmNu1tV/G9CrnsCgDWGCswmEoy14fhvgy1cmYGZ2Wu8=
> =vAWZ
> -----END PGP SIGNATURE-----
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20141008/b63c8d8d/attachment-0001.html>