Thanks to Hendrik.
yes, in the old config I had never-direct allow all and had omitted it in the new config. Has solved the previous instances of the problem.
Indeed this proxy server has to get all its non-LAN content via an upstream proxy. I didn't mention that as I didn't realise fully the behaviour of squid (and did not realise the relevance of the cited faq item). Having specified cache_peer I had assumed that all requests, apart from always_direct ones would go via it.
Thanks
rolf.
On Tue, 21 Sep 2004, Rolf wrote:
but the most common type is where a url contains a question mark prior to some further part of the url
What happens is that squid comes back and says 'connection refused' quoting the url only up to the question mark.
An example. If I go to this site http://www.osnews.com it loads fine, then I click on this link /http://www.osnews.com/comment.php?news_id=3D8343
squid returns:
While trying to retrieve the URL: http://www.osnews.com/comment.php?
The following error was encountered: Connection Failed
The system returned: (111) Connection refused
Probably the following applies:
Squid FAQ 4.8 How do I configure Squid to work behind a firewall? <url:http://www.squid-cache.org/Doc/FAQ/FAQ-4.html#ss4.8>
You did not mention having a parent proxy firewall, but the symptoms you describe is typical for this situation when Squid is not told about the little detail that it is firewalled and can not reach the Internet directly.
Regards Henrik
