[squid-users] Upstream Proxy

Fri Jul 15 15:24:56 UTC 2022

My apologies, I just realized the change to user:password wasn't in effect. With that change in effect, the same issue arises:

2022/07/15 15:18:52.583 kid1| 11,2| HttpTunneler.cc(328) handleResponse: Tunnel Server conn714 local=10.56.1.3:41778 remote=18.213.126.143:443 FIRSTUP_PARENT FD 16 flags=1
2022/07/15 15:18:52.583 kid1| 11,2| HttpTunneler.cc(329) handleResponse: Tunnel Server RESPONSE:
---------
HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm="Secure Browsing"
Date: Fri, 15 Jul 2022 15:18:52 GMT
Content-Length: 0
Connection: close

----------
2022/07/15 15:18:52.583 kid1| 83,3| HttpTunneler.cc(350) bailOnResponseError: unsupported CONNECT response status code [state:w FD 16 job1409]
2022/07/15 15:18:52.583 kid1| TCP connection to gateway.goguardian.com/443 failed
    current master transaction: master457

Tunnel Server REQUEST is not found in the last 1024 lines of the cache.

657898392.220    119 10.125.15.10 TCP_TUNNEL/407 0 CONNECT aus5.mozilla.org:443 johnathan.hasty at USI.UNCOMMONSCHOOLS.ORG FIRSTUP_PARENT/52.204.217.22 - "ws-iid=187" "ws-mac=00:00:00:00:00:00" "ws-duration=59" "ws-timing=0" "ws-mtime=0" "ws-scanflags=63" "ws-categories=70368744177664" "ws-trusted=1" "ws-level=1" "ws-verdict=0" "ws-policy=default" "ws-member=default" "ws-module=2" "ws-msgtype=2" "ws-param1=None" "ws-param2=None" "ws-debug=None" "squid-gt-st=0"
1657898392.220      0 10.125.15.10 NONE_NONE/000 0 - error:transaction-end-before-headers - HIER_NONE/- - "ws-iid=-" "ws-mac=-" "ws-duration=-" "ws-timing=-" "ws-mtime=-" "ws-scanflags=-" "ws-categories=-" "ws-trusted=-" "ws-level=-" "ws-verdict=-" "ws-policy=-" "ws-member=-" "ws-module=-" "ws-msgtype=-" "ws-param1=-" "ws-param2=-" "ws-debug=-" "squid-gt-st=197"
1657898428.972    274 10.125.15.10 TCP_MISS/407 314 GET http://detectportal.firefox.com/canonical.html johnathan.hasty at USI.UNCOMMONSCHOOLS.ORG FIRSTUP_PARENT/52.204.217.22 - "ws-iid=186" "ws-mac=00:00:00:00:00:00" "ws-duration=59831" "ws-timing=0" "ws-mtime=0" "ws-scanflags=63" "ws-categories=8589934592" "ws-trusted=0" "ws-level=1" "ws-verdict=0" "ws-policy=default" "ws-member=default" "ws-module=2" "ws-msgtype=3" "ws-param1=None" "ws-param2=None" "ws-debug=None" "squid-gt-st=334"
1657898429.063     22 10.125.15.10 TCP_MISS/407 314 GET http://detectportal.firefox.com/canonical.html johnathan.hasty at USI.UNCOMMONSCHOOLS.ORG FIRSTUP_PARENT/52.204.217.22 - "ws-iid=190" "ws-mac=00:00:00:00:00:00" "ws-duration=90" "ws-timing=0" "ws-mtime=0" "ws-scanflags=63" "ws-categories=8589934592" "ws-trusted=0" "ws-level=1" "ws-verdict=0" "ws-policy=default" "ws-member=default" "ws-module=2" "ws-msgtype=3" "ws-param1=None" "ws-param2=None" "ws-debug=None" "squid-gt-st=334"

This is new, now that basic auth is being used:

2022/07/15 15:23:22.652 kid1| 11,2| HttpTunneler.cc(177) writeRequest: Tunnel Server REQUEST: conn858 local=10.56.1.3:40518 remote=52.44.107.1:443 FIRSTUP_PARENT FD 12 flags=1:
----------
CONNECT spocs.getpocket.com:443 HTTP/1.1
Host: spocs.getpocket.com:443
Via: 1.1 poc-websafety.usi.uncommonschools.org (squid/5.5)
X-Forwarded-For: 10.125.15.10
Proxy-Authorization: Basic [redacted]
Cache-Control: max-age=259200
Connection: close

----------

Best Regards, 
Johnathan

_______________________________________________________ 

Johnathan Hasty 
Senior DevOps Engineer 
Uncommon Schools 
C: 989.366.1672 

Uncommon Schools | Change History 
Website | Facebook | Twitter | LinkedIn | Apply Now 

-----Original Message-----
From: squid-users <squid-users-bounces at lists.squid-cache.org> On Behalf Of Johnathan Hasty
Sent: Friday, July 15, 2022 11:12 AM
To: Alex Rousskov <rousskov at measurement-factory.com>; squid-users at lists.squid-cache.org
Subject: Re: [squid-users] Upstream Proxy

Hi Alex, thank you so much for the response!

I've changed to user:password and still face the same issues.

Here's Tunnel Server REQUEST from last 1024 lines

2022/07/15 14:55:52.281 kid1| 11,2| https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fHttpTunneler.cc&c=E,1,Z9dzp5fOyrtq9H8SuN_kjWUwA9meKEw9YTNtJOtZVua0QbLoGTcYZB0Juot-nDUHTBGxoVRIL66C5TwGbWyaIFcbtuVTOJ8OQJBO20Yw&typo=1(177) writeRequest: Tunnel Server REQUEST: conn886 local=10.56.1.3:40264 remote=52.44.107.1:443 FIRSTUP_PARENT FD 12 flags=1:
2022/07/15 14:55:52.656 kid1| 11,2| https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fHttpTunneler.cc&c=E,1,HY07zjejV4QLH46NO0UbipDxK32eEyC-_XWuIrR56wOokWY-W6vp5jCHPesccsEACLeQmAh8tZaTWiB4Pxj5mMRuXoW4kvIxV6tFCfs-bQzMmVyBFTZr&typo=1(177) writeRequest: Tunnel Server REQUEST: conn898 local=10.56.1.3:41554 remote=18.213.126.143:443 FIRSTUP_PARENT FD 12 flags=1:

2022/07/15 14:55:52.736 kid1| 11,2| https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fHttpTunneler.cc&c=E,1,on0TtYjsox8RcNeGWrDAl740DeE4uLoTByykbkBq42LUtj0Sry9O6BgaZIYYr1hYC488GKo6Mj2WJOMXP_1t-Mb0SAYPJZo24YeWRjHkBs1e&typo=1(328) handleResponse: Tunnel Server conn898 local=10.56.1.3:41554 remote=18.213.126.143:443 FIRSTUP_PARENT FD 12 flags=1
2022/07/15 14:55:52.736 kid1| 11,2| https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fHttpTunneler.cc&c=E,1,gHGxITMcEdqRsSj7pIyD37m9ggrul1QhDGuEvGiY8VhK8PyNJgJ-GrMOe-Y2P22_PgWhQ74-Jd3khuClFNFesAh5mQdLkylOM39HidSecLGnP7yqMg,,&typo=1(329) handleResponse: Tunnel Server RESPONSE:
---------
HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm="Secure Browsing"
Date: Fri, 15 Jul 2022 14:55:52 GMT
Content-Length: 0
Connection: close

----------
2022/07/15 14:55:52.736 kid1| 83,3| https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fHttpTunneler.cc&c=E,1,OfKfh6KVQ4Zg9b4OcbJfAV3TjbqMtmIWTStHRwfB5Q7H0T22Wm1vUPBcyy0E-42jPvhHKe_7ff8l60HXzIMTg2W2Z-WXDrPaKJydxT9MglsyXbq_9A,,&typo=1(350) bailOnResponseError: unsupported CONNECT response status code [state:w FD 12 job1778]
2022/07/15 14:55:52.736 kid1| TCP connection to https://linkprotect.cudasvc.com/url?a=https%3a%2f%2f%2f%2fgateway.goguardian.com%2f443&c=E,1,Y076ZQWwoNFj_D-NMFmLm-CdcOxbvA0LdZvQUwK9KwDdNMa-GTwlM9mtuJ1ODpTlDCr9h0eoBw6Cjopn5_OSLGO7BwdrfGZMcmbJcKqz-XI,&typo=1 failed
    current master transaction: master584
2022/07/15 14:55:52.736 kid1| 5,3| https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fcomm.cc&c=E,1,L4rV40LaPYwokyYaPk3qQTS8hrCmiW_HWq8hVp64-WMs1uaDRlbLyKMuJGrDBKatDLoy0Yx99-T797SfhDGNKQfbslPfTaHNYOzqkUbQnkAJqYCXbMJpoeQS&typo=1(597) commUnsetConnTimeout: Remove timeout for conn898 local=10.56.1.3:41554 remote=18.213.126.143:443 FIRSTUP_PARENT FD 12 flags=1
2022/07/15 14:55:52.736 kid1| 5,3| https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fcomm.cc&c=E,1,zWT3K3_c9lemfAx22YB73QSI-HefXjfwOYeXxOFglfVKtYKv1R4x8kvfNmhPJz3gsFiu4DvAVfLl-aE5jgI298VNSjgwNloSL0CT4jaZl1UPaqI_GDRpEKiW&typo=1(571) commSetConnTimeout: conn898 local=10.56.1.3:41554 remote=18.213.126.143:443 FIRSTUP_PARENT FD 12 flags=1 timeout -1

1657896950.569     75 10.125.15.10 NONE_NONE/200 0 CONNECT content-signature-2.cdn.mozilla.net:443 johnathan.hasty at USI.UNCOMMONSCHOOLS.ORG HIER_NONE/- - "ws-iid=191" "ws-mac=00:00:00:00:00:00" "ws-duration=144" "ws-timing=1" "ws-mtime=0" "ws-scanflags=63" "ws-categories=70368744177664" "ws-trusted=1" "ws-level=1" "ws-verdict=0" "ws-policy=default" "ws-member=default" "ws-module=2" "ws-msgtype=2" "ws-param1=None" "ws-param2=None" "ws-debug=None" "squid-gt-st=3252"
1657896950.575    215 10.125.15.10 TCP_MISS/407 314 GET https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fdetectportal.firefox.com%2fcanonical.html&c=E,1,x9JEJRejqd7-bYl4jZp1ckxC2ZGlbdi_UQPpq6hge5yRQMX85D-dtgFjvQyNaG2pqqGTUedTgAU3y1dLdSi2VR4lBQ17zSzKw4emVG9gDg,,&typo=1 johnathan.hasty at USI.UNCOMMONSCHOOLS.ORG FIRSTUP_PARENT/52.204.217.22 - "ws-iid=184" "ws-mac=00:00:00:00:00:00" "ws-duration=2864" "ws-timing=0" "ws-mtime=0" "ws-scanflags=63" "ws-categories=8589934592" "ws-trusted=0" "ws-level=1" "ws-verdict=0" "ws-policy=default" "ws-member=default" "ws-module=2" "ws-msgtype=3" "ws-param1=None" "ws-param2=None" "ws-debug=None" "squid-gt-st=3331"
1657896951.018    288 10.125.15.10 TCP_MISS/407 314 GET https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fdetectportal.firefox.com%2fcanonical.html&c=E,1,8pVmhR-qRuZ17zuQsuL9C-Jmr_jfpuoQjWKehR3jxDlILGeouM1igPMKABi4IoX8pnbEuLx7ePCYJM8CVME2wVp5IyWKLgwkk-Qt9pvyP3AZ&typo=1 johnathan.hasty at USI.UNCOMMONSCHOOLS.ORG FIRSTUP_PARENT/52.204.217.22 - "ws-iid=194" "ws-mac=00:00:00:00:00:00" "ws-duration=445" "ws-timing=0" "ws-mtime=0" "ws-scanflags=63" "ws-categories=8589934592" "ws-trusted=0" "ws-level=1" "ws-verdict=0" "ws-policy=default" "ws-member=default" "ws-module=2" "ws-msgtype=3" "ws-param1=None" "ws-param2=None" "ws-debug=None" "squid-gt-st=334"
1657896951.082      2 10.125.15.10 TCP_DENIED/407 4390 GET https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fdetectportal.firefox.com%2fcanonical.html&c=E,1,I6mgvjdyuvjzSYC9zixVVoCWTsi8K4Eodu57TsF02izb474NFQv2bYZ9SkSW7ByIa3uCmaaFUkqX8F6qkLsadHEqQHEMzjkWBJMOLBM02G1FHLr1IdcS228KMX0,&typo=1 - HIER_NONE/- text/html "ws-iid=-" "ws-mac=00:00:00:00:00:00" "ws-duration=-" "ws-timing=-" "ws-mtime=-" "ws-scanflags=-" "ws-categories=-" "ws-trusted=-" "ws-level=-" "ws-verdict=-" "ws-policy=-" "ws-member=-" "ws-module=-" "ws-msgtype=-" "ws-param1=-" "ws-param2=-" "ws-debug=-" "squid-gt-st=334"
1657896951.388    820 10.125.15.10 TCP_TUNNEL/407 0 CONNECT content-signature-2.cdn.mozilla.net:443 johnathan.hasty at USI.UNCOMMONSCHOOLS.ORG FIRSTUP_PARENT/18.213.126.143 - "ws-iid=192" "ws-mac=00:00:00:00:00:00" "ws-duration=65" "ws-timing=0" "ws-mtime=0" "ws-scanflags=63" "ws-categories=70368744177664" "ws-trusted=1" "ws-level=1" "ws-verdict=0" "ws-policy=default" "ws-member=default" "ws-module=2" "ws-msgtype=2" "ws-param1=None" "ws-param2=None" "ws-debug=None" "squid-gt-st=0"
1657896951.389      0 10.125.15.10 NONE_NONE/000 0 - error:transaction-end-before-headers - HIER_NONE/- - "ws-iid=-" "ws-mac=-" "ws-duration=-" "ws-timing=-" "ws-mtime=-" "ws-scanflags=-" "ws-categories=-" "ws-trusted=-" "ws-level=-" "ws-verdict=-" "ws-policy=-" "ws-member=-" "ws-module=-" "ws-msgtype=-" "ws-param1=-" "ws-param2=-" "ws-debug=-" "squid-gt-st=517"
1657896951.468    211 10.125.15.10 TCP_MISS/407 314 GET https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fdetectportal.firefox.com%2fcanonical.html&c=E,1,m6f0ut953qjWTR0yIgxVVetjMjKfJGpwvKazqFCK77Li8y-m5jvK1tJrnk2ADc5EDKV0m-YcDqvoiIcsieBuzl1mVtfR9OaE4rq3rcCI_sc1&typo=1 johnathan.hasty at USI.UNCOMMONSCHOOLS.ORG FIRSTUP_PARENT/52.204.217.22 - "ws-iid=196" "ws-mac=00:00:00:00:00:00" "ws-duration=448" "ws-timing=0" "ws-mtime=0" "ws-scanflags=63" "ws-categories=8589934592" "ws-trusted=0" "ws-level=1" "ws-verdict=0" "ws-policy=default" "ws-member=default" "ws-module=2" "ws-msgtype=3" "ws-param1=None" "ws-param2=None" "ws-debug=None" "squid-gt-st=3331"

Best Regards,
Johnathan

_______________________________________________________

Johnathan Hasty
Senior DevOps Engineer
Uncommon Schools
C: 989.366.1672

Uncommon Schools | Change History
Website | Facebook | Twitter | LinkedIn | Apply Now

-----Original Message-----
From: squid-users <squid-users-bounces at lists.squid-cache.org> On Behalf Of Alex Rousskov
Sent: Friday, July 15, 2022 10:14 AM
To: squid-users at lists.squid-cache.org
Subject: Re: [squid-users] Upstream Proxy

On 7/15/22 09:51, Johnathan Hasty wrote:

> I’ve been trying to hand off credentials to our upstream proxy 
> GoGuardian and have been facing many issues.

What HTTP authentication method(s) or scheme(s) does your upstream proxy support or require?

> HTTP/1.1 407 Proxy Authentication Required
> Proxy-Authenticate: Basic realm="Secure Browsing"

This is not my area of expertise, but the above error message suggests that the proxy wants to do HTTP Basic authentication, but you are configuring Squid to use NEGOTIATE, so perhaps you should switch to Basic as the next step in your triage, just to get something working (cache_peer ... login=user:password)?

Sharing what CONNECT request headers Squid sends to the parent proxy may be useful as well, but do not use any secrets in your test traffic if you are going to share such details. If you still have that cache.log, look for "Tunnel Server REQUEST" associated with conn2126.

HTH,

Alex.

> Has anyone gotten Squid to successfully hand off to GoGuardian as 
> their upstream proxy?
>
> Advanced ACLs:
> cache_peer
> https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgateway.goguardian
> .com&c=E,1,4mgHTezdkg3XvogUnlMp7R_aPvVQ_k4b-ypUDY-r87n90TNewVfWO2G7yD8
> KkbTZsmGhDBWiU-1QXOx9rTzbo3OKnuac4cWw9FtJNrmREkILe6q5FyICs2IE&typo=1
> parent 443 0 no-query no-digest no-netdb-exchange connect-timeout=60 
> default tls login=NEGOTIATE:principal_name 
> sslcapath=/usr/local/share/ca-certificates/
>
> cache_peer_access
> https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgateway.goguardian
> .com&c=E,1,tXvnr1Bt31o7q-hOKeOXTPxzXW9DCW5ZYUwuJ7_zipiM8d7kDnxhExjas6S
> ZtisCB5rLGfXHr7wV5cw2SA_mQkr1n51atsqVDx1MnZZDHTRyJzW3bUc,&typo=1 allow 
> all
>
> never_direct allow all
>
> Log snipit:
> 2022/06/30 15:22:49.198 kid1| 5,3|
> https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fIoCallback.cc&c=E,
> 1,wvOZEJacIjm7MMfIw4zokPxqyPEbXkGtlZd2OjPZnBaBwKYd4JhEY7iqqSOFpOEQkLML
> LliW5vfaXpVJZzleoEi_t79ZlTQE310p_aOzboKLmD8,&typo=1
> <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fIoCallback.cc&c=E
> ,1,tkT-dyHiVAqZoP7tVfxLk3RVYLyb_avXd27fXGqjJMTzNKPAGHmmvW9pXYcC425jST0
> ZYFFPwV4uHf3fKHuux40xkg9kXWTzOHPdGV5BNGbILyA,&typo=1&ancr_add=1>(112)
> finish: called for conn2126 local=10.56.1.3:59674 
> <http://10.56.1.3:59674> remote=18.213.126.143:443 
> <http://18.213.126.143:443> FIRSTUP_PARENT FD 24 flags=1 (0, 0)
>
> 2022/06/30 15:22:49.198 kid1| 93,3|
> https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fAsyncCall.cc&c=E,1
> ,_WyCB5FW8TPrE8VlwBDvbPPARxLAWIrkTCRh_yGS49ECyfGVDnBZtgXtv-rdu8B0ze3XP
> Z3nmMQ54CyPGOek_nP2SCr-pr0gbcacRhSqdvzu&typo=1
> <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fAsyncCall.cc&c=E,
> 1,DRAaKArrkDvBn0UuKG4CO_yXvblIrZBSYHpMpA4H7oRhEraoEzGxMCRwZJpYUsTM63vF
> W1Co7R0A33jgXq0EZyS1JcelCRUFXLjE5tQ-siWuoU0bbvc,&typo=1&ancr_add=1>(96
> )
> ScheduleCall:
> https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fIoCallback.cc&c=E,
> 1,CLrXyrjHJJLEUyDzFLyORoYkOc6dPPoPy8mcoj1pWEKli7eNc4SROUZ17OioxqFJZTmw
> KRRZPrkGHOKwEkKLPrjc6G5CJ49ccON5eC_SpzBM9RV52CvFHg,,&typo=1
> <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fIoCallback.cc&c=E
> ,1,bCxz0FVR5jkr6lvnOvzW7e6G8tQBNRlVCCbel3ASQC74rRdj29Wxcj66G7Jit7W9Qdb
> z8catGFZxEEbA6bR1lmzxqhKOAxPRfaraHkB0Kq0,&typo=1&ancr_add=1>(131)
> will call Http::Tunneler::handleReadyRead(conn2126
> local=10.56.1.3:59674 <http://10.56.1.3:59674>
> remote=18.213.126.143:443 <http://18.213.126.143:443> FIRSTUP_PARENT 
> FD 24 flags=1,
> data=0x55849f4926c8) [call548666]
>
> 2022/06/30 15:22:49.198 kid1| 93,3|
> https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fAsyncCallQueue.cc&
> c=E,1,UGKeO2qrCPs6m2GXyLlhHHkuRUPt2cGShW7xdl1TzFHGzrrU9aCKd6DcFICzKY0F
> 2-1vU7bOY71MSvAXS0vdAxZGyOUU9cucfyHU4997ePtvtjXY1YJx&typo=1
> <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fAsyncCallQueue.cc
> &c=E,1,Ne0y7JJW7fBc_1MyCR5zK2LlFshqIfjXRI-DDHdH5PeY44sZtFyGkRMXgYLpMqH
> Yj17Z8PToa57tNyAfAp6EUkVwM3SHgK37ObzCJYBj&typo=1&ancr_add=1>(59)
> fireNext: entering Http::Tunneler::handleReadyRead(conn2126
> local=10.56.1.3:59674 <http://10.56.1.3:59674>
> remote=18.213.126.143:443 <http://18.213.126.143:443> FIRSTUP_PARENT 
> FD 24 flags=1,
> data=0x55849f4926c8)
>
> 2022/06/30 15:22:49.198 kid1| 93,3|
> https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fAsyncCall.cc&c=E,1
> ,0QLPJSskintC4NgwcvTUsoIWjY3qwFYZUU1K2zkIbJ9ApLohmZ0jnOQwLqm3rvsIX3QvY
> mtEc3ULAUby0qHSuTA6kfd_J5THUpYmykwPyyr9jlJi&typo=1
> <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fAsyncCall.cc&c=E,
> 1,o0OzDC7879yEvRQoXyqb11XnNW2f6RJwmh1OP5vYSK4ukmnOFcBmRwtorjA94HFXF2MO
> 38TdGcH68cNv4LkX122TcPK1Gwh5xQXTTnzhZCk0N4c,&typo=1&ancr_add=1>(41)
> make: make call Http::Tunneler::handleReadyRead [call548666]
>
> 2022/06/30 15:22:49.198 kid1| 93,3|
> https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fAsyncJob.cc&c=E,1,
> cutfUKQzcFc8e83JGLpUqZzQ5vCaW2rceWZI6_tL1mRPFEUxoNV2bmGFagx9y3wKCmcjXf
> T9VZ4000RPweRM3s91K0PDFBkVEIn0GzE2gdmQctpotwQ,&typo=1
> <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fAsyncJob.cc&c=E,1
> ,0XdqwD1hHo1N94DousFFhRiwV1YBiWmgmGgnmN3ivpK14dkV-pET6DcSkS2X_BoPOU0rc
> ff0Z8GMOM6Se71G_crDtF1V4AWKNym2mjdbxuqKI47TC0GqeVQ,&typo=1&ancr_add=1>
> (123)
> callStart: Http::Tunneler status in: [state:w FD 24 job3836]
>
> 2022/06/30 15:22:49.198 kid1| 83,3|
> https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fSession.cc&c=E,1,p
> 7LN0t2ClO-5Nl7j3E3wm40eWwqhcGz_6XzDNmr0Y75br1dSliqvHiNj1GUhOu6kNMD5SgJ
> 3gF_MOIcA9eubIR_v1k918fdLhCAgE1mGDPTKBVSZJr0,&typo=1
> <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fSession.cc&c=E,1,
> 5pwOO8oysGpMl2UW2Xm5P9KkR_3HsM1xcAdWaqJ5W67u3ht9dZCWWqKu-yt1JrDyn7NvUN
> MMfVsPhYQQ6rNYqmGGLwDuReUm7h6KmDVvRXk9hFQ,&typo=1&ancr_add=1>(36)
> tls_read_method: started for session=0x55849f86d970
>
> 2022/06/30 15:22:49.198 kid1| 5,3|
> https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fRead.cc&c=E,1,yB97
> lUNthiucTCUWsSMfvAziT5CLZb1OZogmu8ScWQnCNzUbYMQw1Zbn2OccWJTYDMmlA6u5-3
> vkeWyX6fQZOx1KGAdNoCK6r23yucjU&typo=1
> <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fRead.cc&c=E,1,YRn
> dcJz2bAhwR1PdmoQI8sRvkmjGdcO5EIyIIpp4iqwmuG7h-eaf-3lfNBR39-ZO7iGAxJ7K0
> S_cHbSgNtNlm0fjWnm8WFDq58f6THu4DI699rCS7t0,&typo=1&ancr_add=1>(93)
> ReadNow: conn2126 local=10.56.1.3:59674 <http://10.56.1.3:59674>
> remote=18.213.126.143:443 <http://18.213.126.143:443> FIRSTUP_PARENT 
> FD
> 24 flags=1, size 65535, retval 172, errno 0
>
> 2022/06/30 15:22:49.198 kid1| 11,2|
> https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fHttpTunneler.cc&c=
> E,1,qiS1pPbfXZ_Aobf_tcSVbmPX5IRTWWzk7rZklKhiXmyryzKUOjlZnh25vZMqWotwsh
> BOfFMiyTiQ2vxFbWn1PAo4Nk9yKW8OYdXAkAEpZg2YDOH4Jb4Fxtuu&typo=1
> <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fHttpTunneler.cc&c
> =E,1,7NW0kgZsy7tR63h5jeGLIfWqkf7MZMOiNKoehdSMu4P8C_Cyj5_2ApYRUA6cZWFOq
> SGAjikQJc_BpXOW4-kzssgabw7mHmj9JehJw69jCPqdH0f2XA,,&typo=1&ancr_add=1>
> (328)
> handleResponse: Tunnel Server conn2126 local=10.56.1.3:59674 
> <http://10.56.1.3:59674> remote=18.213.126.143:443 
> <http://18.213.126.143:443> FIRSTUP_PARENT FD 24 flags=1
>
> 2022/06/30 15:22:49.198 kid1| 11,2|
> https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fHttpTunneler.cc&c=
> E,1,yOUqRcgTyDqJM4As1g9no_2ivGGU2GU0PGsvC0nQjDk9PDDcutm2vFsyn3JmbEXXs1
> HYXQGoS7iH5h6BRNLNShj9pIEFQzE6dYrY1Eqblw2VBYg,&typo=1
> <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fHttpTunneler.cc&c
> =E,1,3NizLysV5Gx9r_j5gTGoxUw_3T9zdjGtQ-DV4EhtvlwXKEzULXHluYnJByOJiEPPn
> VnNQqchSO6-31x_mXrtC-9VAHF1Rvi3G4KI9KdJOjbjUelpts2rPuVSNQ,,&typo=1&anc
> r_add=1>(329)
> handleResponse: Tunnel Server RESPONSE:
>
> ---------
>
> HTTP/1.1 407 Proxy Authentication Required
>
> Proxy-Authenticate: Basic realm="Secure Browsing"
>
> Date: Thu, 30 Jun 2022 15:22:49 GMT
>
> Content-Length: 0
>
> Connection: close
>
> ----------
>
> 2022/06/30 15:22:49.198 kid1| 83,3|
> https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fHttpTunneler.cc&c=
> E,1,pufqpHpI8C7rAUfy9Tq2mNp2OZ1XMTAI6fkixf_-ua2kK8YpFPUMWFzh0rWHf9g0Ws
> uV3pIArjpDXfXhm2XC6M9Irhro_TxF-__TcOmuBGULF-f070nvp3mjpLM,&typo=1
> <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fHttpTunneler.cc&c
> =E,1,GviZgdhx9RYhEwKjYE8dVgxbEl8iol-igCMYAgae4yqcKPIFswYtt6EwZhF84hnL-
> ef9RpuZwEHsx85Xll9B5Gfbg7d2dHfIF34rKZsAxv6qOdMumpxPDQ,,&typo=1&ancr_ad
> d=1>(350)
> bailOnResponseError: unsupported CONNECT response status code [state:w 
> FD 24 job3836]
>
> 2022/06/30 15:22:49.198 kid1| TCP connection to 
> https://linkprotect.cudasvc.com/url?a=https%3a%2f%2f%2f%2fgateway.gogu
> ardian.com%2f443&c=E,1,UusqMjgeT_UOKD1S9PrgXx6upenAYP-hT7yGJTEnspLqlnS
> awFcJbipDzT1VUHjpy2b-j-nAl50SEUaFLAkQda-Y8KqaSsR9kCUbXTeurg,,&typo=1
> <https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fgateway.goguardian
> .com%2f443&c=E,1,uAPXOfc9RgeMJ4nUQAbfSdcSO5Uq43sRY-gZmY85itIayxn-UVioU
> UW3XRszjHa-yYb6rECJlsja0UO3JoB46gLeuYZSjXkRbee8lCx9qDg8UMVty1UFtdYA&ty
> po=1>
> failed
>
>      current master transaction: master1228
>
> 2022/06/30 15:22:49.198 kid1| 15,2|
> https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fneighbors.cc&c=E,1
> ,9ofiQEX_0QnggaY8xoZN6SuZPZwmqJoD1GNQ655oW2gywmEKyxLVKHrM4Ac6gBgcTtgDb
> uQcMGF0tup6n1llH-TGgGu4Ts6AJeKlaza1vvG52A1mXJmoxnRvCQ,,&typo=1
> <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fneighbors.cc&c=E,
> 1,A9XtxL5DCKCd251CIXugkhx4aCzF9hXbpTke-TobSR1fyAJvDoqwTFq1cEcOoZJtiMbG
> KIRMTAdNo4BJFSkXvu8VJe16TUWacR3bLvbydug1knZSGkBYCZ0,&typo=1&ancr_add=1
> >(1284)
> peerConnectFailedSilent: TCP connection to 
> https://linkprotect.cudasvc.com/url?a=https%3a%2f%2f%2f%2fgateway.gogu
> ardian.com%2f443&c=E,1,is4BqJ6V4Qdfc04VYlolwa5QuKFNfTygVBDVwtBqmsf41gL
> UQI3CKcnxrF9sHxTsXgK3UQPazoH2N4bwj7wGWZ4IFpRpHOrLTaHLEg3riYlP&typo=1
> <https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fgateway.goguardian
> .com%2f443&c=E,1,dGVDR_a1JorHZeL7cCLZZYEKPcdKNP8q3xqZrI0znu3mp7ytE8irV
> nBC73FhdcWJ5M0-LWIn2Mn0GzYRz6V0M_GYqDtl_rvKTY_dWhrXIAFI1UpgdRqKz0hp&ty
> po=1>
> dead
>
> 2022/06/30 15:22:49.198 kid1| 5,3|
> https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fcomm.cc&c=E,1,wVzz
> fX9UMqeQdfmj9Yh-eEQTkXfgpAsRIs1xVjE6wsFdGqLtci-hbG5hqOsir3jaz800ooUnT6
> 02gcZzpoNCotYfELUz8GbehnzI-szfn_9t4ygswhCtKyiXsKtO&typo=1
> <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fcomm.cc&c=E,1,_FS
> TyaiA0rkYHZ4Z7eAL4TwtVx69LC8zbzD277h9yuyffbapL47ZpB_oWH20eRbFct1TQy0vm
> I_r1caTRPIqNuxhiZ7iYIATofZyGH8m1ZkJn-_Pj74,&typo=1&ancr_add=1>(597)
> commUnsetConnTimeout: Remove timeout for conn2126
> local=10.56.1.3:59674 <http://10.56.1.3:59674>
> remote=18.213.126.143:443 <http://18.213.126.143:443> FIRSTUP_PARENT 
> FD 24 flags=1
>
> 2022/06/30 15:22:49.198 kid1| 5,3|
> https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fcomm.cc&c=E,1,6_Om
> _qoW-p_W0CpO2EJHb7WhzwjJyFKkENF0xzjkBzWhiNEeuxQa8cl337nnoOOK7tey-YPgOv
> tYw-Asoq_RGiBrHLG1-3UZX9uG33SD1of4jv5b7QjHUPI,&typo=1
> <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fcomm.cc&c=E,1,2X_
> UeJ7syPVMh46zfITvmAcOXeJskvfXEcgk8IyJC4YzRQfPu92bh2NzVodZ0n4ZRK7THXkr0
> YSUqM7xqyqJCvdnyd9FAu6HfF5w6S0BZI45WZI8zKdCZe8,&typo=1&ancr_add=1>(571
> )
> commSetConnTimeout: conn2126 local=10.56.1.3:59674 
> <http://10.56.1.3:59674> remote=18.213.126.143:443 
> <http://18.213.126.143:443> FIRSTUP_PARENT FD 24 flags=1 timeout -1
>
> 2022/06/30 15:22:49.198 kid1| 5,3|
> https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fcomm.cc&c=E,1,f3jm
> C5svmDm2UMZPFo_bJ6TZqPvD1V85OGT0cw_YxUApcig2_G0CQ5uf8vaKUSpMHT2E-flXvO
> 3DJ81-xeFxHAoC3qOIK7wJYSws9qhHhgSW1R8n3Slt&typo=1
> <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fcomm.cc&c=E,1,Ffk
> Oe7rgvl24KtYbMnfkVwBEdxcDHC1Qli-TWnd49Qh8gDEi83POkLUjbin88NBj9wz0eUa5E
> XJAjwxomX4QO4zLvkDabeKXKYlG6AdnYeWwBQX65a999EDQfHg,&typo=1&ancr_add=1>
> (877)
> _comm_close: start closing FD 24 by
> https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fConnection.cc%3a10
> 8&c=E,1,p118dKeMyqtNGmJDUQfl3bqlowxip-f5vvzF5BGVoRt6v1MWaolkRXvJ3Ptu_b
> DI934lLcugy51gOKePiLt9X39tc9I-WvaSTfDN4UnHRAU,&typo=1
> <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fConnection.cc%3a1
> 08&c=E,1,WyC_uIlGcAERUMOzZEzNpvTD0VNtdyMCu8_98mxi45Tfb8tS1Sk-xPVV7uo29
> dppxC6E7neNtZYKqy1MhMyuLt8f0VUXYaTTfg2ke0mgXESQjraUm9zxRlRV&typo=1&anc
> r_add=1>
>
> 2022/06/30 15:22:49.198 kid1| 5,3|
> https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fcomm.cc&c=E,1,4wEE
> ydLqZtbeDc5YHCkgy5GsRjJ3_cLzlCGjyzHOV-hTEVEIsy3mNyF5ICP27wwTmSGp6ze8y2
> vdbqkthwhZqwWvH_jduoEypTSS0y2ytmL7&typo=1
> <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fcomm.cc&c=E,1,3Gy
> 87egR90ZnusSy5exBZU0res4kBdHXTtCKE_jPDFJ67k-PY9AWyJYQlbMs93MRcEX4tmriD
> wIFkUn6n7F57YT-OWPTUDgMXKLJDMijoQr3ETZ_4qmLyO3mxoc,&typo=1&ancr_add=1>
> (558)
> commUnsetFdTimeout: Remove timeout for FD 24
>
>
> Best Regards,
>
> Johnathan
>
> *_______________________________________________________*
>
> **
>
> *Johnathan Hasty*
>
> Senior DevOps Engineer
>
> Uncommon Schools
>
> C: 989.366.1672
>
> *Un*common Schools | Change History
>
> Website
> <https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fwww.uncommonschool
> s.org%2f&c=E,1,cWhZ9NA37cAb3SSkIYkr5EbwjBXA_1ECEBWI1BpFOMixjdXiqIYF5NH
> _rpjuRqGzBt9Av6GCLPt7UYFH62vFjyLlBBvmIAwJtSORWZeE&typo=1> | Facebook 
> <http://www.facebook.com/uncommonschools> | Twitter 
> <http://www.twitter.com/uncommonschools> | LinkedIn 
> <http://www.linkedin.com/company/124759?trk=tyah> | Apply Now 
> <https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fwww.uncommonschool
> s.org%2fcareers&c=E,1,rgbpQND7NOQlb8Jv2r2mLOBnCdzuRSxPkW0uIyooMP2TwhUo
> tzeHZQjvRKQyUr3gDLWXSyG1jhOH92Ub7jL9_5wTQc42_HkbPCyQS5oyArE,&typo=1>
>
>
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> https://linkprotect.cudasvc.com/url?a=http%3a%2f%2flists.squid-cache.o
> rg%2flistinfo%2fsquid-users&c=E,1,J4_sclj9gC817Tmu9bhrA3OR4TSSruJYfYUM
> 6RkEXWZjj9XbwbXxgeS2yApz2pngh07velawZHPZD2mJFvgfC8P764tli3XXTMvKbYgp&t
> ypo=1

_______________________________________________
squid-users mailing list
squid-users at lists.squid-cache.org
https://linkprotect.cudasvc.com/url?a=http%3a%2f%2flists.squid-cache.org%2flistinfo%2fsquid-users&c=E,1,6nL_4Gs08LWJUKqb_q0ngPSzWGNPU1hDuBFl2fe6WS9B5z0mUCKS0CWyT3EUxoD8qdoRz_4UaAxr3vVuAUQCLDB05Yj639MDRp6MdlpX_jSXFtjL1Z2wKw,,&typo=1
CAUTION : This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.

_______________________________________________
squid-users mailing list
squid-users at lists.squid-cache.org
https://linkprotect.cudasvc.com/url?a=http%3a%2f%2flists.squid-cache.org%2flistinfo%2fsquid-users&c=E,1,_gt5RuG6OnpL5wNbM1Dzv4nuJJRVHT3EToMZP5hSDVox-iP_NPzQaaSo8V_f1XPFpn8T_C2R18Hum-eShKhL1zRxyXViMkrpo3iT-m1r&typo=1
CAUTION : This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.