Squid 2.6STABLE1 and IE6 SP2

 
Thread Tools Search this Thread
Operating Systems Linux Gentoo Squid 2.6STABLE1 and IE6 SP2
# 1  
Old 07-24-2006
Squid 2.6STABLE1 and IE6 SP2

I have a very short period of time in which to set up a proxy server for about 800 Windows boxes that "have to" use IE5 or IE6. I decided to try Squid since it seems to be the most popular proxy out there and it supports SSL/https proxying. I tested quiet a few things the past few days and everything looked good. But I run Gentoo Linux as my desktop and Firefox as my browser. Today, I gained access to a Windows box to test with and I found that the proxy didn't work. When I'd point IE to my Squid proxy and then restart it, I couldn't get anywhere when I'd type in any URL (local or on the internet). So I did some Googling and found a tip that I could either set "use http 1.1 when proxying" to on in the Internet Options dialog or I could apply the latest IE patches. I tested by setting the suggested http 1.1 setting and that allowed the proxy to work. The problem I'm facing is that our Windows admin is positive there is no way to set this for all the browsers centrally. So I'm wondering if there are any changes that I can make on the proxy side to make Squid a bit more friendly to IE. Anyone else using Squid in a medium sized (500+ workstations) environment with IE5 or IE6(SP2)/?
# 2  
Old 07-25-2006
So far...

...this particular question has proven to be hard to answer. Most of my Googling has resulted in the same basic answer which is to set the IE6 browser to use http 1.1 when proxying. I also posted on a Windows list and the people there (who use Squid) recommended making that same change for Squid either by using a logon script or manually editing the appropriate key in the mandatory profile. So this is going to be a hard one to resolve for our Windows admin. There isn't really anything that can be done on the Squid side of the equation since the problem lies within the IE6 browser's implementation of http 1.0. There is supposedly a hotfix, but it's not recommended by MS and isn't included in the latest updates nor will it be in the future. The Windows admin is certain that even if we applied the hotfix (which reverts to an older DLL) that the DLL would be replaced with a newer one from the DLL Cache or overwritten by newer XP or IE updates that are automatically applied by the SUS server. So, the ONLY answer appears to be to find a way to set all proxied browsers to use http 1.1. Smilie
# 3  
Old 07-27-2006
Quote:
Originally Posted by deckard
I tested by setting the suggested http 1.1 setting and that allowed the proxy to work. The problem I'm facing is that our Windows admin is positive there is no way to set this for all the browsers centrally.
You can do exactly this from within your AD DC. Depending on the policies you currently have, you may have to create a new policy specifically for this. See http://www.mensys.nl/netop/docs/NNF_deployment.pdf for the general directions.

On a different note, I would seriously question anything I was using that only allowed me to use IE (as opposed to any other browser). Chances are, you have no real reason to even have to use Windows in a corporate environment, especially if your applications are already web-based. Since your critical applications are web based (I'm guessing due to your professed "need"), someone messed up one of the main reasons to have web-based applications to begin with. That being the ability to connect using cheaper, non-proprietary, platform independant clients.

On yet another note, if your Windows systems admin doesn't know how to apply group policies to a corporate AD domain, they either need to be replaced or trained or your whole network should be migrated to Linux (mainly for security reasons). IMO Windows doesn't belong on a corporate network to begin with, but if you're not using AD to its full potential someone in charge over there really needs to take another look at the way your infrastructure is operating. I don't mean for this to sound rude, nor am I trying to spout the "joys of open source solutions" to you. Rather, I'm giving you sound advice which may stop a future incident from crippling your infrastructure (and perhaps costing people jobs).
Login or Register to Ask a Question

Previous Thread | Next Thread

7 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Sometimes getting SP2-0734 error message

Hi All, Once I try to execute the below script,it will execute the script and it will generate the output file. Sometimes,it got executed successfully and generate the output file.. sometimes,it got executed and generate the output with error message as ********************************* Top of... (3 Replies)
Discussion started by: praveenk768
3 Replies

2. Fedora

Install memcached on Suse 11 SP2

hi guys I am trying to install this extension for php named memcached but I am not really able to do it PECL :: Package :: memcached I have Suse 11 SP2 installed without any registration (I mean installed not paying subscription) so my question is there a way to install it like in... (0 Replies)
Discussion started by: karlochacon
0 Replies

3. IP Networking

Squid vs iptables = no Squid access.log?

Hello, I have a pretty useless satellite link at home (far from any civilization), so I wanted to set up caching in order to speed things up. My Squid 2.6 runs "3128 transparent" and is set up quite well on a separate machine. I also have my dd-wrt router to move all port 80 traffic through... (0 Replies)
Discussion started by: theWojtek
0 Replies

4. UNIX for Dummies Questions & Answers

Suse 10 SP2 VNC Password

hi guys I've configured some CentOS where you can set a password for VNC and that password is requested before connecting to the normal user login But I found that Suse 10 SP3 has no such thing basically it has this configuration under /etc/xinetd.d/vnc service vnc1 { ... (2 Replies)
Discussion started by: kopper
2 Replies

5. UNIX for Dummies Questions & Answers

Where are the repositories located in SUSE SLES 10 SP2

Hi, In SUSE SLES 10 SP2 where are the software repositories located? In CENTOS they are in /etc/yum.repositories or something like that. What does SLES use? (1 Reply)
Discussion started by: mojoman
1 Replies

6. UNIX for Dummies Questions & Answers

How to install Cygwin on Windows XP SP2

Please can anyone help me with how to install cygwin on a windows Xp SP2 platform, I cant seem to get it to work? (1 Reply)
Discussion started by: jimoney
1 Replies

7. Solaris

Solaris 10 dualboot with Win Xp sp2 ....Plz help !!!!!

Hi All , I am new to solaris & i would like to explore it to taste a flavour of Unix. Before I installed I did a lot of googling as I did not want to play with the data i have on win XP & finally installed Solaris in a dual mode option along with Win XP. These are the steps i... (1 Reply)
Discussion started by: codewarrior
1 Replies
Login or Register to Ask a Question