Hi,  

I try to set up a squid reverse-proxy in front of a Lotus Notes Webmail and an 
IIS-webserver 

- two different machines in the same domain.

squid.conf looks like this:

"https_port 443 cert=/usr/local/squid/cacert.pem 
key=/usr/local/squid/privkey.pem defaultsite=domino.oursite.de

https_port 442 cert=/usr/local/squid/cacert.pem 
key=/usr/local/squid/privkey.pem defaultsite=iis.oursite.de

cache_peer 10.0.1.1 parent 443 0 no-query proxy-only name=domino.oursite.de ssl 
 sslflags=DONT_VERIFY_PEER

cache_peer 10.0.1.2 parent 443 0 no-query proxy-only name=iis.oursite.de ssl  
sslflags=DONT_VERIFY_PEER

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443 563     # https, snews
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT

acl data dstdomain iis.oursite.de 
acl mails dstdomain domino.oursite.de

#cache_peer_access domino.oursite.de deny data
cache_peer_access domino.oursite.de allow all

#cache_peer_access web-eins.ad.worldgames2005.de deny mails
cache_peer_access web-eins.ad.worldgames2005.de allow all"

The idea is to forward requests for domino to the cache_peer 10.0.1.1. and 
requests for iis  to the cache_peer 10.0.1.2. 

But EVERYTIME i change the cache_peer_access directiv to something other than 
"allow all"   
Squid aborts with the error

        assertion failed: cbdata.cc:402: "c->locks > 0"

Changing the directive and restarting helps an squid works -  but the second 
webserver cannot be reached.

The error can be reproduced by activating the cache_peer_access-directive with 
a content  other than "allow all"

What's wrong ? How can i get it working?

Any help is very much appreciated.

Thanks,

Michael
______________________________________________________________
Verschicken Sie romantische, coole und witzige Bilder per SMS!
Jetzt bei WEB.DE FreeMail: http://f.web.de/?mc=021193

Reply via email to