[squid-users] Squid 2.7 STABLE8 (Win2008) can't get my MS Lync 2013 to work?

[Amos Jeffries]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 9/10/2014 4:19 a.m., Mirza Dedic wrote:
> Thanks Amos, It seems I spoke too fast, the proxy prompt is back,
> so disabling SG didn't do the trick. Two two hits I see in
> access.log are: 1412778349.755    141 172.16.12.110 TCP_MISS/200
> 462 POST http://sqm.microsoft.com/sqm/wm/sqmserver.dll -
> DIRECT/65.55.7.141 -1412778349.911    515 172.16.12.110
> TCP_MISS/200 11695 CONNECT login.microsoftonline.com:443 -
> DIRECT/157.55.208.198 - These happen when I restart the Lync
> program and at the time of the proxy prompt.

If you notice the status code on both of those is 200. Meaning they
were successfully accepted by your proxy and completely serviced.

There is no way those could produce a proxy login popup. The POST also
cannot produce a www-auth popup since it is not 401 status. The
CONNECT could if there were some encrypted 401 message unseen by Squid.

> My config file is here: http://pastebin.com/MSsTWum2 I spent last 
> night trying to mess with cygwin + squid to try and tackle this
> issue by upgrading to a more supported squid, I see there is a
> 3.3.3 published in their repository; I got this working at home
> (squid starts) on Windows 7 machine however getting errors trying
> to start the same cygwin setup on my win2003 remote server,
> getting.. 2014/10/08 08:12:56| aclIpParseIpData: Bad host/IP: '::1'
> in '::1', flags=0 : (8) Name or service not knownFATAL: Bungled
> Default Configuration line 11: acl localhost src 127.0.0.1/32
> ::1Squid Cache (Version 3.3.3): Terminated abnormally.

These are default definitions for Squid-3.

At a minimum your systems built-in DNS resolver needs ability to
convert IPv6 addresses to numeric values. HTTP routinely sends
raw-IPv6 addresses in some headers. That minimum ability is mandatory
in order to reject/skip attempts to use IPv6 when it is configured
disabled.

I believe the Windows Server 2008 or later are needed for Squid-3
builds. Several of the Squid-3 features need advanced networking
functionality. That IP conversion ability may be one of them.

Amos
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)

iQEcBAEBAgAGBQJUNgnAAAoJELJo5wb/XPRjPAUIAKmz5qxM5fRVIU8sU2rdWj9Z
+qtTOIqRrkSMjJ47Jc3yUozUAVLCOE69OyMoLEuEC6mqB61tYnSOuq2Ig1bT61hf
AJXWCHOp1qDr9Xoa4nld/onkd4gHokKzuV+SRGIYEDwF6HxFM454ctb9YpSgBmr3
79kCOzy6OPRgdHALFc0rBAP6BGz8pN+kvDd9X6vMyFSlnvyERRwwbuzp4tzzfcAf
A9akRaHpDk/N4OLkJSGKj6V6uyKMStgJEu1SP8dzKKnuoo3uPYPseJKlyzikFPb2
h9VzKazytcTpMKEQQtNioRo9poJ8sZCzSlZQh6pb8U1rZcJ1rRp2QA5h7TvB8Bk=
=rsNN
-----END PGP SIGNATURE-----