Re: [squid-users] TCP_DENIED on youtube

Hi..

You should turn off "strip_query_terms" in "squid.conf".. Thus, full URL
is logged and you can see details.

Additionaly, you can get error as
http://googleads.g.doubleclick.net/pagead/ads?referer=example.com Because
you have specified ".com$" in Squid. You must use mimetype instead of
urlregex_path.

Regards.

----- Original Message -----
From: "Amos Jeffries" <squid3_at_treenet.co.nz>
To: "Stefan Jensen" <sjensen_at_versanet.de>
Cc: <squid-users_at_squid-cache.org>
Sent: Sunday, April 12, 2009 6:12 AM
Subject: Re: [squid-users] TCP_DENIED on youtube

> Stefan Jensen wrote:
>> Hi,...
>>
>> i got some TCP_DENIED on youtube.com:
>>
>> "TCP_DENIED/403 3446 GET http://googleads.g.doubleclick.net/pagead/ads?
>> - NONE/- text/html"
>>
>> It is an embedded ad page on youtube in the upper right. (e.g:
>> http://www.youtube.com/browse)
>>
>> I have this in my squid.conf:
>>
>> acl blockfiles urlpath_regex -i "/etc/squid/blockfiles.acl"
>> http_access deny blockfiles
>>
>> $ cat /etc/squid/blockfiles.acl
>>
>> .com$
>> .exe$
>> .vb$
>> .vbs$
>> .vbe$
>> .cmd$
>> .bat$
>> .ws$
>> .wsf$
>> .scr$
>> .shs$
>> .pif$
>> .hta$
>> .jar$
>> .jse$
>> .lnk$
>> .rar$
>> .zip$
>> .tar$
>> .tar.gz$
>> .gz$
>> .tgz$
>> .Z$
>> .torrent$
>>
>> Why is squid blocking this? I've no idea. Please can anyone give me a
>> hint? When i comment out the "acl blockfiles" lines, it worked, so i
>> think no other rule or redirector is involved:
>>
>> "TCP_MISS/200 2052 GET http://googleads.g.doubleclick.net/pagead/ads? -
>> DIRECT/74.125.77.157 text/html"
>>
>> I'm using "squid-3.0.STABLE13-1.fc10.x86_64"
>>
>> best regards
>>
>> Stefan
>
> Because there is a part of the URL-path following the ? which is
> included in the match.
>
> In this case I believe its probably the advert site including the domain
> name as its last query-string option: ... "/ads?referer=example.com"
>
> Amos
> --
> Please be using
> Current Stable Squid 2.7.STABLE6 or 3.0.STABLE13
> Current Beta Squid 3.1.0.6
>

--------------------------------------------------------------------------------

No virus found in this incoming message.
Checked by AVG - www.avg.com
Version: 8.0.238 / Virus Database: 270.11.54/2056 - Release Date: 04/13/09
05:51:00
Received on Mon Apr 13 2009 - 14:50:50 MDT