On 06/02/2026 03:44, Andrea Venturoli wrote:
Hello.

Running Squid 7.3 on several boxes.
In the last couple of days it has been crashing on one.

Last time I captured this in the logs:
2026/02/05 15:22:10 kid1| WARNING: dns-mime-type ACL is used in context without an HTTP response. Assuming mismatch.
    current master transaction: master72

As the message says The ACL you have named "dns-mime-type" is being checked when there is no HTTP Response. I assume from the name that it needs the mime type, which comes from an HTTP Response header.

Squid copes with these by assuming a mis-match or skipping the access rule.

This is a flaw in your security policy which you should fix, maybe minor or maybe serious - hard to tell without full knowledge of that policy and reasons for it.


2026/02/05 15:22:10 kid1| FATAL: invalid pct-encoded triplet
    exception location: Uri.cc(102) Decode
    current master transaction: master72

This is likely bug 5501.

"
The bug affects url_regex and urllogin ACLs. However, not every use of
those ACLs results in a FATAL exit. The exact preconditions are unknown.
"

I have initiated a backport for the fix to v7.
You can find the patch at <https://github.com/squid-cache/squid/pull/2369>


2026/02/05 15:22:10| Removing PID file (/var/run/squid/squid.pid)

The first two lines are quite common.
I searched for the subsequent messages, which seem to be the interesting ones, but found nothing.

I'll try to upgrade to 7.4 and possibly get a core dump, but if someone has any hint in the meantime...


7.4 will not help with this particular issue. Though upgrade is usually worthwhile anyway.


HTH
Amos

_______________________________________________
squid-users mailing list
[email protected]
https://lists.squid-cache.org/listinfo/squid-users

Reply via email to