Today (Saturday) We will make some minor tuning adjustments to MySQL.

You may experience 2 up to 10 seconds "glitch time" when we restart MySQL. We expect to make these adjustments around 1AM Eastern Daylight Saving Time (EDT) US.


Squid 2.6STABLE1 and IE6 SP2

Login or Register to Reply

 
Thread Tools Search this Thread
# 1  
Squid 2.6STABLE1 and IE6 SP2

I have a very short period of time in which to set up a proxy server for about 800 Windows boxes that "have to" use IE5 or IE6. I decided to try Squid since it seems to be the most popular proxy out there and it supports SSL/https proxying. I tested quiet a few things the past few days and everything looked good. But I run Gentoo Linux as my desktop and Firefox as my browser. Today, I gained access to a Windows box to test with and I found that the proxy didn't work. When I'd point IE to my Squid proxy and then restart it, I couldn't get anywhere when I'd type in any URL (local or on the internet). So I did some Googling and found a tip that I could either set "use http 1.1 when proxying" to on in the Internet Options dialog or I could apply the latest IE patches. I tested by setting the suggested http 1.1 setting and that allowed the proxy to work. The problem I'm facing is that our Windows admin is positive there is no way to set this for all the browsers centrally. So I'm wondering if there are any changes that I can make on the proxy side to make Squid a bit more friendly to IE. Anyone else using Squid in a medium sized (500+ workstations) environment with IE5 or IE6(SP2)/?
# 2  
So far...

...this particular question has proven to be hard to answer. Most of my Googling has resulted in the same basic answer which is to set the IE6 browser to use http 1.1 when proxying. I also posted on a Windows list and the people there (who use Squid) recommended making that same change for Squid either by using a logon script or manually editing the appropriate key in the mandatory profile. So this is going to be a hard one to resolve for our Windows admin. There isn't really anything that can be done on the Squid side of the equation since the problem lies within the IE6 browser's implementation of http 1.0. There is supposedly a hotfix, but it's not recommended by MS and isn't included in the latest updates nor will it be in the future. The Windows admin is certain that even if we applied the hotfix (which reverts to an older DLL) that the DLL would be replaced with a newer one from the DLL Cache or overwritten by newer XP or IE updates that are automatically applied by the SUS server. So, the ONLY answer appears to be to find a way to set all proxied browsers to use http 1.1. Smilie
# 3  
Quote:
Originally Posted by deckard
I tested by setting the suggested http 1.1 setting and that allowed the proxy to work. The problem I'm facing is that our Windows admin is positive there is no way to set this for all the browsers centrally.
You can do exactly this from within your AD DC. Depending on the policies you currently have, you may have to create a new policy specifically for this. See http://www.mensys.nl/netop/docs/NNF_deployment.pdf for the general directions.

On a different note, I would seriously question anything I was using that only allowed me to use IE (as opposed to any other browser). Chances are, you have no real reason to even have to use Windows in a corporate environment, especially if your applications are already web-based. Since your critical applications are web based (I'm guessing due to your professed "need"), someone messed up one of the main reasons to have web-based applications to begin with. That being the ability to connect using cheaper, non-proprietary, platform independant clients.

On yet another note, if your Windows systems admin doesn't know how to apply group policies to a corporate AD domain, they either need to be replaced or trained or your whole network should be migrated to Linux (mainly for security reasons). IMO Windows doesn't belong on a corporate network to begin with, but if you're not using AD to its full potential someone in charge over there really needs to take another look at the way your infrastructure is operating. I don't mean for this to sound rude, nor am I trying to spout the "joys of open source solutions" to you. Rather, I'm giving you sound advice which may stop a future incident from crippling your infrastructure (and perhaps costing people jobs).
Login or Register to Reply

|
Thread Tools Search this Thread
Search this Thread:
Advanced Search

More UNIX and Linux Forum Topics You Might Find Helpful
Install memcached on Suse 11 SP2
karlochacon
hi guys I am trying to install this extension for php named memcached but I am not really able to do it PECL :: Package :: memcached I have Suse 11 SP2 installed without any registration (I mean installed not paying subscription) so my question is there a way to install it like in...... Fedora
0
Fedora
Squid vs iptables = no Squid access.log?
theWojtek
Hello, I have a pretty useless satellite link at home (far from any civilization), so I wanted to set up caching in order to speed things up. My Squid 2.6 runs "3128 transparent" and is set up quite well on a separate machine. I also have my dd-wrt router to move all port 80 traffic through...... IP Networking
0
IP Networking
Suse 10 SP2 VNC Password
kopper
hi guys I've configured some CentOS where you can set a password for VNC and that password is requested before connecting to the normal user login But I found that Suse 10 SP3 has no such thing basically it has this configuration under /etc/xinetd.d/vnc service vnc1 { ...... UNIX for Dummies Questions & Answers
2
UNIX for Dummies Questions & Answers
How to install Cygwin on Windows XP SP2
jimoney
Please can anyone help me with how to install cygwin on a windows Xp SP2 platform, I cant seem to get it to work?... UNIX for Dummies Questions & Answers
1
UNIX for Dummies Questions & Answers

Featured Tech Videos