[squid-users] There is the problems with instagram images and videos

[ngtech1ltd at gmail.com]

Hey,

Two things:

First, you have lots of TCP_TUNNEL_ABORTED and I am not sure if the client or the server is the cause for these.

Second, when you share the conf you can clean it up with the grep but just try to pay attention and make sure
that it would be human readable, usually mail agents tend to handle squid.conf in such a way that
later on they won't be readable.
So you can just share the tidy squid.conf in a clear plain text format that will not jump lines
if lines would jump it would be hard to read....

##

Since you are not using any SSL-BUMP it's pretty straight forward setup and I believe that the latest stable Squid-Cache version should
be used so the developers can help you and others with such an issue.
Can you please verify what browser or user agent is being using in your setup?
Also, can you show us the version of squid and share whether it's a self compiled or from a packges?
Please share as much details as possible about the host.

# squid -v

Should give us the relevant details.
What OS are you using?
I have a support script that might help us to make sure we have all the relevant details.

Thanks,
Eliezer


-----Original Message-----
From: squid-users <squid-users-bounces at lists.squid-cache.org> On Behalf Of simwin
Sent: Wednesday, 15 June 2022 1:23
To: squid-users at lists.squid-cache.org
Subject: Re: [squid-users] There is the problems with instagram images and videos

В Wed, 15 Jun 2022 00:36:55 +0300
<ngtech1ltd at gmail.com>:

> Hey,
> 
> You have reduced the conf.
> We are not trying to guess....
> You can either share your entire configuration or just to not ask.
> We cannot try to help you if we are missing parts of the configuration.
> ( leaving aside the ip addresses and confidential information)
> You should share both squid.conf and every included config file and also the
> relevant access.log details.

OK, I understand it. Please see links below:

My access.log - https://sharetext.me/z1mbjxkogv
My squid.conf - https://sharetext.me/wd7rdcpqax
and conf.d/debian.conf - https://sharetext.me/vdo9im5epe

> $ grep -vE '^$|^#' /etc/squid/squid.conf
> 
> auth_param basic program /usr/lib/squid/basic_ncsa_auth
> /etc/squid/internet_users acl auth_users proxy_auth REQUIRED
> http_access allow auth_users
> auth_param basic casesensitive on
> acl localnet src 0.0.0.1-0.255.255.255	# RFC 1122 "this" network (LAN)
> acl localnet src 10.0.0.0/8		# RFC 1918 local private network
> (LAN) acl localnet src 100.64.0.0/10		# RFC 6598 shared address
> space (CGN) acl localnet src 169.254.0.0/16 	# RFC 3927 link-local
> (directly plugged) machines acl localnet src 172.16.0.0/12		#
> RFC 1918 local private network (LAN) acl localnet src 192.168.0.0/16
> # RFC 1918 local private network (LAN) acl localnet src fc00::/7
> # RFC 4193 local private network range acl localnet src fe80::/10
> # RFC 4291 link-local (directly plugged) machines acl SSL_ports port 443
> acl Safe_ports port 80		# http
> acl Safe_ports port 21		# ftp
> acl Safe_ports port 443		# https
> acl Safe_ports port 70		# gopher
> acl Safe_ports port 210		# wais
> acl Safe_ports port 1025-65535	# unregistered ports
> acl Safe_ports port 280		# http-mgmt
> acl Safe_ports port 488		# gss-http
> acl Safe_ports port 591		# filemaker
> acl Safe_ports port 777		# multiling http
> acl CONNECT method CONNECT
> http_access deny !Safe_ports
> http_access deny CONNECT !SSL_ports
> http_access allow localhost manager
> http_access deny manager
> include /etc/squid/conf.d/*
> http_access allow localhost
> http_access deny all
> http_port xxx.xxx.xxx.xxx:3128 (hidden)
> coredump_dir /var/spool/squid
> refresh_pattern ^ftp:		1440	20%	10080
> refresh_pattern ^gopher:	1440	0%	1440
> refresh_pattern -i (/cgi-bin/|\?) 0	0%	0
> refresh_pattern .		0	20%	4320
_______________________________________________
squid-users mailing list
squid-users at lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users