THis is the output of grep for errro in cache.log: ####### [EMAIL PROTECTED] root]# grep -i 'health_info.nmh.org' /var/log/squid/access.log 1072007066.166 14 192.168.0.30 TCP_DENIED/400 1601 GET http://health_info.nmh.org:80/Library/HealthGuide/IllnessConditions/topic.asp?hwid=tn8460 - NONE/- text/html
###### This user 192.168.0.30 is genuine user and I am sure will not do this purposely. I have not blocked any type of file by squid. I tried from my machine to acces "http://health_info.nmh.org/"; but squid rejects this request with following error : ######## ERROR The requested URL could not be retrieved -------------------------------------------------------------------------------- While trying to retrieve the URL: http://health_info.nmh.org:80/ The following error was encountered: Invalid URL Some aspect of the requested URL is incorrect. Possible problems: Missing or incorrect access protocol (should be `http://'' or similar) Missing hostname Illegal double-escape in the URL-Path Illegal character in hostname; underscores are not allowed Your cache administrator is webmaster. ###### Any setting change required in "squid.conf" Thanks for support. --- Henrik Nordstrom <[EMAIL PROTECTED]> wrote: > On Sat, 20 Dec 2003, ads squid wrote: > > > 2003/12/20 22:28:42| parseHttpRequest: Unsupported > > method 'recipientid=99&sessionid=8119^M > > ^M > > ' > > 2003/12/20 22:28:42| clientReadRequest: FD 33 > Invalid > > Request > > 2003/12/20 22:28:42| parseHttpRequest: Unsupported > > method 'recipientid=100&sessionid=8119^M > > ^M > > ' > > 2003/12/20 22:28:42| clientReadRequest: FD 33 > Invalid > > Request > > > The above looks like a client sending invalid POST > requests, sending more > data than claimed in the request headers. > > > > > 2003/12/21 10:04:13| clientReadRequest: FD 16 > Invalid > > Request > > 2003/12/21 10:05:00| clientReadRequest: FD 14 > Invalid > > Request > > 2003/12/21 10:05:04| clientReadRequest: FD 14 > Invalid > > Request > > 2003/12/21 10:05:04| clientReadRequest: FD 14 > Invalid > > Request > > 2003/12/21 10:05:04| clientReadRequest: FD 14 > Invalid > > Request > > 2003/12/21 10:05:04| clientReadRequest: FD 16 > Invalid > > Request > > 2003/12/21 10:09:11| clientReadRequest: FD 14 > Invalid > > Request > > Was there no other log entries between these? > > > Then I reconfigure squid and agin it starts > working > > Any clue what should be done to stop this. > > Try to find the offending client and what it is > doing. A good start is the > time these occurs and matching these to activity in > access.log. Each of > these messages should also have one line in > access.log with a status code > of 400 and a blank hierarchy code, and most likely > no URL, so it should > not be very hard to find who is causing these. > > Regards > Henrik > __________________________________ Do you Yahoo!? New Yahoo! Photos - easier uploading and sharing. http://photos.yahoo.com/
