Search the Community

Hi, sorry if this is in the wrong place please feel free to move it. We have just finished setting up a Squid3 server on Debian. It works fine 99% of the time but some sites it refuses to load at all, YouTube happens to be one of them. When you browse to http://www.youtube.com the page just sits loading, nothing comes up on screen (I've left it for 30 minutes with nothing loading) and it never times out. We have the same problem if we try to go to Google (even though google is the homepage) it loads google for the first time then doesn't do it again. I have no idea what the problem is with it as I'm still very new to Squid, we have tried a few things. Turning off the Squid Cache Adding the DNS_4_first setting to the config Setting debian to use IPv4 first. Checking that the file descriptors are within limits Looking in the Access.log file the connection request doesn't show up. See below a copy of our config (the cache has been turned back on as it doesn't appear to fix the problem). #Recommended minimum configuration: shutdown_lifetime 2 seconds cache_peer UPSTREAMFILTER parent 80 0 no-query no-digest never_direct allow all acl localnet src 10.60.148.0/22 acl SSL_ports port 443 563 1863 5190 5222 5050 6667 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 # https acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT http_access deny to_localhost icp_access deny all htcp_access deny all http_port 8080 hierarchy_stoplist cgi-bin ? access_log /var/log/squid3/access.log squid #Suggested default: refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 refresh_pattern . 0 20% 4320 # Leave coredumps in the first cache dir coredump_dir /var/spool/squid3 ############################################################################## ##Auth Settings ############################################################################## ### negotiate kerberos and ntlm authentication auth_param negotiate program /usr/local/bin/negotiate_wrapper -d --ntlm /usr/bin/ntlm_auth --diagnostics --helper-protocol=squid-2.5-ntlmssp --domain=DOMAIN --kerberos /usr/lib/squid3/negotiate_kerberos_auth -d -s GSS_C_NO_NAME auth_param negotiate children 10 auth_param negotiate keep_alive off ### pure ntlm authentication auth_param ntlm program /usr/bin/ntlm_auth --diagnostics --helper-protocol=squid-2.5-ntlmssp --domain=DOMAIN auth_param ntlm children 10 auth_param ntlm keep_alive off ### provide basic authentication via ldap for clients not authenticated via kerberos/ntlm auth_param basic program /usr/lib/squid3/ext_ldap_group_acl -R -b "dc=DOMAIN,dc=local" -D squid@DOMAIN -W /etc/squid3/ldappass.txt -f sAMAccountName=%s -h dc01.DOMAIN auth_param basic children 100 auth_param basic realm Internet Proxy auth_param basic credentialsttl 10 minute ### acl for proxy auth and ldap authorizations acl auth proxy_auth REQUIRED # aclname acltype typename activedirectorygroup acl allowedsites dstdomain "/etc/squid3/allowedsites.txt" acl blockedsites dstdomain "/etc/squid3/blockedsites.txt" acl exceptedsites dstdomain "/etc/squid3/exceptedsites.txt" acl prioritysites dstdomain "/etc/squid3/prioritysites.txt" ### http_access rules # allow unrestricted access to prioritysites http_access allow prioritysites # enforce authentication, order of rules is important for authorization levels http_access deny !auth # prevent access to basic auth prompt for BlockedAccess users http_access allow allowedsites http_access deny blockedsites # Access http_access allow localnet # block all other access http_access deny all I would appreciate any help in getting to the bottom of what's causing this.