[squid-users] squid 4.8 cannot connect to Skype for business

Erick Perez - Quadrian Enterprises eperez at quadrianweb.com
Fri Jan 24 15:41:51 UTC 2020 

good day to all,
my windows clients can connect successfully to regular skype, but cannot
connect to skype for business. With the included extract of client machine
10.231.0.20 is there anything that can tell me why it is not connecting?

ip  squid :  10.230.5.71
tested client machine: 10.231.0.20
skype for business: 16.0.12325.20280 32 bit

*********
squid -v:
[root at s03-prxy squid]# squid -v
Squid Cache: Version 4.8
Service Name: squid

This binary uses OpenSSL 1.0.2k-fips  26 Jan 2017. For legal restrictions
on distribution see https://www.openssl.org/source/license.html

configure options:  '--build=x86_64-redhat-linux-gnu'
'--host=x86_64-redhat-linux-gnu' '--program-prefix=' '--prefix=/usr'
'--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin'
'--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include'
'--libdir=/usr/lib64' '--libexecdir=/usr/libexec'
'--sharedstatedir=/var/lib' '--mandir=/usr/share/man'
'--infodir=/usr/share/info' '--exec_prefix=/usr'
'--libexecdir=/usr/lib64/squid' '--localstatedir=/var'
'--datadir=/usr/share/squid' '--sysconfdir=/etc/squid'
'--with-logdir=/var/log/squid' '--with-pidfile=/var/run/squid.pid'
'--disable-dependency-tracking' '--enable-follow-x-forwarded-for'
'--enable-auth'
'--enable-auth-basic=DB,LDAP,NCSA,NIS,PAM,POP3,RADIUS,SASL,SMB,getpwnam,fake'
'--enable-auth-ntlm=fake' '--enable-auth-digest=file,LDAP,eDirectory'
'--enable-auth-negotiate=kerberos,wrapper'
'--enable-external-acl-helpers=wbinfo_group,kerberos_ldap_group,LDAP_group,delayer,file_userip,SQL_session,unix_group,session,time_quota'
'--enable-cache-digests' '--enable-cachemgr-hostname=localhost'
'--enable-delay-pools' '--enable-epoll' '--enable-icap-client'
'--enable-ident-lookups' '--enable-linux-netfilter'
'--enable-removal-policies=heap,lru' '--enable-snmp'
'--enable-storeio=aufs,diskd,ufs,rock' '--enable-wccpv2' '--enable-esi'
'--enable-security-cert-generators' '--enable-security-cert-validators'
'--enable-icmp' '--with-aio' '--with-default-user=squid'
'--with-filedescriptors=16384' '--with-dl' '--with-openssl'
'--enable-ssl-crtd' '--with-pthreads' '--with-included-ltdl'
'--disable-arch-native' '--without-nettle'
'build_alias=x86_64-redhat-linux-gnu' 'host_alias=x86_64-redhat-linux-gnu'
'CFLAGS=-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions
-fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches
-m64 -mtune=generic' 'LDFLAGS=-Wl,-z,relro ' 'CXXFLAGS=-O2 -g -pipe -Wall
-Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong
--param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic
-fPIC' 'PKG_CONFIG_PATH=:/usr/lib64/pkgconfig:/usr/share/pkgconfig'
--enable-ltdl-convenience
[root at s03-prxy squid]#
*****************

access.log extract:
[root at s03-prxy squid]# tail -f /var/log/squid/access.log | grep 10.231.0.20
1579879519.778   3539 10.231.0.200 TCP_TUNNEL/200 4974 CONNECT
clients1.google.com:443 - HIER_DIRECT/172.217.15.206 -
1579879519.779   4340 10.231.0.200 TCP_TUNNEL/200 3490 CONNECT
www.google.com:443 - HIER_DIRECT/172.217.8.132 -
1579879524.530 114397 10.231.0.200 TCP_TUNNEL_ABORTED/200 2051 CONNECT
dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com:443 - HIER_DIRECT/
34.218.169.26 -
1579879541.929 6131038 10.231.0.20 TCP_TUNNEL_ABORTED/200 1544733 CONNECT
outlook.office365.com:443 - HIER_DIRECT/52.96.87.194 -
1579879541.929 4712050 10.231.0.20 TCP_TUNNEL_ABORTED/200 226325 CONNECT
outlook.office365.com:443 - HIER_DIRECT/40.97.190.2 -
1579879541.944 126301 10.231.0.20 TCP_TUNNEL_ABORTED/200 27260 CONNECT
outlook.office365.com:443 - HIER_DIRECT/52.96.33.82 -
1579879541.944 862124 10.231.0.20 TCP_TUNNEL_ABORTED/200 1061225 CONNECT
outlook.office365.com:443 - HIER_DIRECT/52.96.88.18 -
1579879546.091    106 10.231.0.20 TCP_TUNNEL_ABORTED/200 4357 CONNECT
sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879546.925    817 10.231.0.20 TCP_TUNNEL/200 17155 CONNECT
sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879568.080     11 10.231.0.20 TCP_TUNNEL_ABORTED/200 188 CONNECT
sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879568.432    350 10.231.0.20 TCP_TUNNEL/200 7353 CONNECT
sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879571.803 121672 10.231.0.20 TCP_TUNNEL/200 14037 CONNECT
login.windows.net:443 - HIER_DIRECT/40.126.3.35 -
1579879576.554     69 10.231.0.20 TCP_MISS/304 449 GET
http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?
- HIER_DIRECT/8.252.64.254 -
1579879576.645     69 10.231.0.20 TCP_MISS/304 449 GET
http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?
- HIER_DIRECT/8.252.64.254 -
1579879579.790   5275 10.231.0.200 TCP_TUNNEL/200 4088 CONNECT
safebrowsing.googleapis.com:443 - HIER_DIRECT/172.217.8.74 -
1579879580.975     72 10.231.0.202 TCP_MISS/200 257 GET
http://http.00.a.sophosxl.net/V3/01/jjj.pbcnnve.pbz.m/ - HIER_DIRECT/
3.222.35.82 -
1579879580.976     72 10.231.0.202 TCP_MISS/200 257 GET
http://http.00.a.sophosxl.net/V3/01/jjj.pbcnnve.pbz.m/ - HIER_DIRECT/
3.222.35.82 -
1579879580.976     72 10.231.0.202 TCP_MISS/200 257 GET
http://http.00.a.sophosxl.net/V3/01/jjj.pbcnnve.pbz.m/ - HIER_DIRECT/
3.222.35.82 -
1579879580.976     72 10.231.0.202 TCP_MISS/200 257 GET
http://http.00.a.sophosxl.net/V3/01/jjj.pbcnnve.pbz.m/ - HIER_DIRECT/
3.222.35.82 -
1579879581.049     72 10.231.0.202 TCP_MISS/200 257 GET
http://http.00.a.sophosxl.net/V3/01/jjj.pbcnnve.pbz.m/ - HIER_DIRECT/
3.222.35.82 -
1579879581.050     71 10.231.0.202 TCP_MISS/200 257 GET
http://http.00.a.sophosxl.net/V3/01/jjj.pbcnnve.pbz.m/ - HIER_DIRECT/
3.222.35.82 -
1579879584.088  68045 10.231.0.20 TCP_TUNNEL/200 5636 CONNECT
config.edge.skype.com:443 - HIER_DIRECT/13.107.3.128 -
1579879586.050  14003 10.231.0.200 TCP_TUNNEL/200 7371 CONNECT
pssgui.aaaa.travel.airservices.svcs.entsvcs.com:443 - HIER_DIRECT/
146.123.20.137 -
1579879589.994     48 10.231.0.20 TCP_MISS/200 1978 GET
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEA8sEMlbBsCTf7jUSfg%2BhWk%3D
- HIER_DIRECT/72.21.91.29 application/ocsp-response
1579879590.031    455 10.231.0.20 TCP_TUNNEL_ABORTED/200 6298 CONNECT
sipfed.online.lync.com:443 - HIER_DIRECT/52.112.65.75 -
1579879590.596    563 10.231.0.20 TCP_TUNNEL/200 7556 CONNECT
sipfed.online.lync.com:443 - HIER_DIRECT/52.112.65.75 -
1579879593.377 118087 10.231.0.20 TCP_TUNNEL_ABORTED/200 1987 CONNECT
dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com:443 - HIER_DIRECT/
52.10.0.129 -
1579879611.227     69 10.231.0.202 TCP_MISS/304 449 GET
http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?
- HIER_DIRECT/8.252.64.254 -
1579879611.312     69 10.231.0.202 TCP_MISS/304 259 GET
http://crl.pki.goog/GTS1O1.crl - HIER_DIRECT/172.217.3.131 -
1579879612.106    336 10.231.0.20 TCP_TUNNEL_ABORTED/200 6298 CONNECT
sipfed0a.online.lync.com:443 - HIER_DIRECT/52.112.64.11 -
1579879612.585    477 10.231.0.20 TCP_TUNNEL/200 7700 CONNECT
sipfed0a.online.lync.com:443 - HIER_DIRECT/52.112.64.11 -
1579879613.465     48 10.231.0.20 TCP_MISS/200 1978 GET
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAiIzVJfGSRETRSlgpHeuVI%3D
- HIER_DIRECT/72.21.91.29 application/ocsp-response
1579879613.729    190 10.231.0.20 TCP_MISS/200 2597 GET
http://ocsp.msocsp.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBQphfxhPb4vsBIPXkIOTJ7D1Z79fAQUCP4ln3TqhwTCvLuOqDhfM8bRbGUCEy0ABoRa5qu8lnR3dcQAAAAGhFo%3D
- HIER_DIRECT/104.18.24.243 application/ocsp-response
1579879615.429     73 10.231.0.20 TCP_MISS/200 2597 GET
http://ocsp.msocsp.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBQirwAcgHViBybgyJMa7KdCHDISOgQUenuMwc%2FnoMoc1Gv6%2B%2BEzww8aop0CExYAAvvgLxYAucV3A0IAAAAC%2B%2BA%3D
- HIER_DIRECT/104.18.24.243 application/ocsp-response
1579879615.601    510 10.231.0.20 TCP_TUNNEL_ABORTED/200 7961 CONNECT
login.microsoftonline.com:443 - HIER_DIRECT/20.190.131.98 -
1579879615.769    151 10.231.0.20 TCP_TUNNEL/200 39 CONNECT
fs.aaaaair.com:443 - HIER_DIRECT/94.188.209.80 -
1579879615.921    149 10.231.0.20 TCP_TUNNEL/200 39 CONNECT
fs.aaaaair.com:443 - HIER_DIRECT/94.188.209.80 -
1579879616.936 117994 10.231.0.202 TCP_TUNNEL_ABORTED/200 1987 CONNECT
dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com:443 - HIER_DIRECT/
52.10.0.129 -
1579879627.471  10590 10.231.0.200 TCP_TUNNEL/200 2135 CONNECT
pssgui.aaaa.travel.airservices.svcs.entsvcs.com:443 - HIER_DIRECT/
146.123.20.137 -
1579879629.024  15981 10.231.0.20 TCP_TUNNEL_ABORTED/200 35500 CONNECT
webdir0a.online.lync.com:443 - HIER_DIRECT/52.112.64.14 -
1579879639.086      0 10.231.0.20 NONE/503 0 CONNECT
lyncdiscoverinternal.aaaaair.com:443 - HIER_NONE/- -
1579879639.087      0 10.231.0.20 TCP_MISS/503 4569 GET
http://lyncdiscoverinternal.aaaaair.com/? - HIER_NONE/- text/html
1579879639.211    114 10.231.0.20 TCP_MISS/200 789 GET
http://lyncdiscover.aaaaair.com/? - HIER_DIRECT/200.46.240.179
application/vnd.microsoft.rtc.autodiscover+xml
1579879644.031  29867 10.231.0.20 TCP_TUNNEL_ABORTED/200 23372 CONNECT
webdir0a.online.lync.com:443 - HIER_DIRECT/52.112.64.14 -
1579879644.529 114376 10.231.0.200 TCP_TUNNEL_ABORTED/200 1987 CONNECT
dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com:443 - HIER_DIRECT/
52.10.0.129 -
1579879661.924 451876 10.231.0.20 TCP_TUNNEL_ABORTED/200 8663 CONNECT
outlook.office365.com:443 - HIER_DIRECT/52.96.33.82 -
1579879665.721  66079 10.231.0.202 TCP_TUNNEL/200 6277 CONNECT
4.sophosxl.net:443 - HIER_DIRECT/3.227.84.245 -
1579879675.921     72 10.231.0.202 TCP_MISS/200 256 GET
http://http.00.a.sophosxl.net/V3/01/cynl.tbbtyr.pbz.m/ - HIER_DIRECT/
3.222.35.82 -
1579879676.722  65561 10.231.0.202 TCP_TUNNEL/200 7269 CONNECT
4.sophosxl.net:443 - HIER_DIRECT/3.227.84.245 -
1579879681.592  13173 10.231.0.200 TCP_TUNNEL/200 6761 CONNECT
pssgui.aaaa.travel.airservices.svcs.entsvcs.com:443 - HIER_DIRECT/
146.123.20.137 -
1579879695.487     15 10.231.0.20 TCP_TUNNEL_ABORTED/200 188 CONNECT
sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879695.599    110 10.231.0.20 TCP_TUNNEL/200 17155 CONNECT
sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879699.006  59919 10.231.0.20 NONE/503 0 CONNECT
lyncdiscover.aaaaair.com:443 - HIER_NONE/- -
1579879699.006  59714 10.231.0.20 NONE/503 0 CONNECT abs.aaaaair.com:443 -
HIER_NONE/- -
1579879705.254 212866 10.231.0.20 TCP_TUNNEL/200 10722 CONNECT
4.sophosxl.net:443 - HIER_DIRECT/34.234.127.160 -
1579879705.255 209910 10.231.0.20 TCP_TUNNEL/200 12951 CONNECT
4.sophosxl.net:443 - HIER_DIRECT/34.234.127.160 -
1579879713.373 118074 10.231.0.20 TCP_TUNNEL_ABORTED/200 605 CONNECT
dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com:443 - HIER_DIRECT/
52.10.0.129 -
1579879716.652     11 10.231.0.20 TCP_TUNNEL_ABORTED/200 188 CONNECT
sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879716.713     59 10.231.0.20 TCP_TUNNEL/200 7401 CONNECT
sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879724.032     72 10.231.0.200 TCP_MISS/200 257 GET
http://http.00.a.sophosxl.net/V3/01/jjj.pbcnnve.pbz.m/ - HIER_DIRECT/
3.222.35.82 -
1579879734.719  66296 10.231.0.200 TCP_TUNNEL/200 6101 CONNECT
4.sophosxl.net:443 - HIER_DIRECT/3.227.84.245 -
1579879736.935 117987 10.231.0.202 TCP_TUNNEL_ABORTED/200 605 CONNECT
dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com:443 - HIER_DIRECT/
52.10.0.129 -
1579879737.777     11 10.231.0.20 TCP_TUNNEL_ABORTED/200 188 CONNECT
sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879737.940    161 10.231.0.20 TCP_TUNNEL/200 7353 CONNECT
sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879754.531     68 10.231.0.200 TCP_MISS/304 259 GET
http://crl.pki.goog/gsr2/gsr2.crl - HIER_DIRECT/172.217.3.131 -
1579879759.398    321 10.231.0.20 TCP_TUNNEL_ABORTED/200 6298 CONNECT
sipfed.online.lync.com:443 - HIER_DIRECT/52.112.65.75 -
1579879759.922    522 10.231.0.20 TCP_TUNNEL/200 7556 CONNECT
sipfed.online.lync.com:443 - HIER_DIRECT/52.112.65.75 -
1579879761.075  16921 10.231.0.200 TCP_TUNNEL/200 7350 CONNECT
pssgui.aaaa.travel.airservices.svcs.entsvcs.com:443 - HIER_DIRECT/
146.123.20.137 -
1579879764.529 114383 10.231.0.200 TCP_TUNNEL_ABORTED/200 605 CONNECT
dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com:443 - HIER_DIRECT/
52.10.0.129 -
1579879778.623   8111 10.231.0.200 TCP_TUNNEL/200 774 CONNECT
pssgui.aaaa.travel.airservices.svcs.entsvcs.com:443 - HIER_DIRECT/
146.123.20.137 -
1579879781.400    324 10.231.0.20 TCP_TUNNEL_ABORTED/200 6298 CONNECT
sipfed0a.online.lync.com:443 - HIER_DIRECT/52.112.64.11 -
1579879781.883    481 10.231.0.20 TCP_TUNNEL/200 7700 CONNECT
sipfed0a.online.lync.com:443 - HIER_DIRECT/52.112.64.11 -
1579879782.075    142 10.231.0.20 TCP_TUNNEL/200 39 CONNECT
fs.aaaaair.com:443 - HIER_DIRECT/94.188.209.80 -
1579879782.225    146 10.231.0.20 TCP_TUNNEL/200 39 CONNECT
fs.aaaaair.com:443 - HIER_DIRECT/94.188.209.80 -
1579879800.250      0 10.231.0.20 NONE/503 0 CONNECT
lyncdiscoverinternal.aaaaair.com:443 - HIER_NONE/- -
1579879800.251      0 10.231.0.20 TCP_MISS/503 4569 GET
http://lyncdiscoverinternal.aaaaair.com/? - HIER_NONE/- text/html
1579879800.256      5 10.231.0.20 TCP_MISS/200 789 GET
http://lyncdiscover.aaaaair.com/? - HIER_DIRECT/200.46.240.179
application/vnd.microsoft.rtc.autodiscover+xml
1579879801.905     72 10.231.0.200 TCP_MISS/200 262 GET
http://http.00.a.sophosxl.net/V3/01/jjj.tbbtyr.pbz.m/ - HIER_DIRECT/
3.225.217.224 -
1579879808.540     72 10.231.0.20 TCP_MISS/200 262 GET
http://http.00.a.sophosxl.net/V3/01/jjj.tbbtyr.pbz.m/ - HIER_DIRECT/
3.225.217.224 -
1579879809.335     72 10.231.0.20 TCP_MISS/200 367 GET
http://http.00.a.sophosxl.net/V3/01/jjj.tfgngvp.pbz.m/ - HIER_DIRECT/
3.225.217.224 -
1579879809.400     72 10.231.0.20 TCP_MISS/200 256 GET
http://http.00.a.sophosxl.net/V3/01/sbagf.tbbtyrncvf.pbz.m/ - HIER_DIRECT/
3.225.217.224 -
1579879809.763     72 10.231.0.20 TCP_MISS/200 252 GET
http://http.00.a.sophosxl.net/V3/01/btf.tbbtyr.pbz.m/ - HIER_DIRECT/
3.225.217.224 -
1579879809.835   8004 10.231.0.200 TCP_TUNNEL/200 1205 CONNECT
www.google.com:443 - HIER_DIRECT/172.217.8.132 -
1579879810.279     72 10.231.0.20 TCP_MISS/200 256 GET
http://http.00.a.sophosxl.net/V3/01/rapelcgrq-goa0.tfgngvp.pbz.m/ -
HIER_DIRECT/3.225.217.224 -
1579879814.061     72 10.231.0.20 TCP_MISS/200 252 GET
http://http.00.a.sophosxl.net/V3/01/prageny.fbcubf.pbz.m/ - HIER_DIRECT/
3.225.217.224 -
1579879814.061     72 10.231.0.20 TCP_MISS/200 252 GET
http://http.00.a.sophosxl.net/V3/01/prageny.fbcubf.pbz.m/ - HIER_DIRECT/
3.225.217.224 -
^C
[root at s03-prxy squid]#

-- 

---------------------
Erick Perez
Quadrian Enterprises S.A. - Panama, Republica de Panama
Skype chat: eaperezh
WhatsApp IM: +507-6675-5083
---------------------
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20200124/689324ed/attachment-0001.html>

More information about the squid-users mailing list