Re: [squid-users] redirection and/or header manipulation

From: Frans Haarman <franshaarman@dont-contact.us>
Date: Mon, 20 Mar 2006 11:15:02 +0100

On 3/20/06, Frans Haarman <franshaarman@gmail.com> wrote:
> On 3/15/06, Henrik Nordstrom <henrik@henriknordstrom.net> wrote:
> > ons 2006-03-15 klockan 10:09 +0100 skrev Frans Haarman:
> >
> > Are you sure it's the SSL session setup taking long and not something in
> > the returned page getting the browser confused?
> >
> > Try fetching just the HTML with wget, and verify that all returned links
> > etc are correct...
>
> I am now using Squid3 to be OWA frontend with the front-end-https. Works great.
>
> However I wonder if someone on this list managed to get RPC over HTTPS
> working using squid3 ?? Seems al connections from outlook stop at my
> squid3.
>
>
> I did some testing with the slow SSL sessions.
>
>
> This is a tcpdump of the https session.
>
> 0.771862 172.16.11.175 -> 172.16.10.83 SSLv3 Client Key Exchange,
> Change Cipher Spec, Encrypted Handshake Message
> 0.775782 172.16.10.83 -> 172.16.11.175 SSLv3 Change Cipher Spec,
> Encrypted Handshake Message
> 0.909138 172.16.11.175 -> 172.16.10.83 TCP 2290 > 443 [ACK] Seq=283
> Ack=1200 Win=64321 Len=0
> 1.120477 208.174.60.61 -> 172.16.11.175 TCP 80 > 2291 [RST, ACK]
> Seq=0 Ack=0 Win=64512 Len=0
> 4.870862 208.174.60.61 -> 172.16.11.175 TCP 80 > 2291 [RST, ACK]
> Seq=0 Ack=0 Win=64512 Len=0
> 10.147979 172.16.11.175 -> 172.16.10.83 TCP 2290 > 443 [FIN, ACK]
> Seq=283 Ack=1200 Win=64321 Len=0
> 10.148792 172.16.10.83 -> 172.16.11.175 TCP 443 > 2290 [ACK] Seq=1200
> Ack=284 Win=65535 Len=0
> 10.149696 172.16.10.83 -> 172.16.11.175 SSLv3 Encrypted Alert
>
> Somehow there are 2 connection from an IP I do not know (208.x ).
>
> After this weirdness everything works fine. So its probably not a
> squid issue.... anybody have a clue what is going on ? I'd rather find
> out what this is. I am sure more people might encounter this.
>

As I expected this problem does not happen with latest version of FireFox.

Regards,
F.
Received on Mon Mar 20 2006 - 03:15:07 MST

This archive was generated by hypermail pre-2.1.9 : Sat Apr 01 2006 - 12:00:04 MST