Bits of Arrogance » Squid https://www.crummylogic.com/wordpress Making myself pervasive Wed, 04 Oct 2017 17:25:53 +0000 en-US hourly 1 http://wordpress.org/?v=4.2.4 Weather Underground broken radar through Squid Proxy https://www.crummylogic.com/wordpress/?p=248 https://www.crummylogic.com/wordpress/?p=248#comments Wed, 06 Aug 2014 13:41:00 +0000 http://www.jrssite.com/wordpress/?p=248 Continue reading Weather Underground broken radar through Squid Proxy →]]> One of my clients said that the weather was coming in fine, but the nifty WUG extended forecast and radar widget was missing. This is what she had:

wxug_broken

Typically with this customer it’s problems of misbehaved applications such as this one trying to access the public network using the system proxy settings but not bothering to authenticate to the proxy – a no no on my networks. I watched for “TCP_DENIED” on the squid logs and saw a couple things to add to the ACL that can get out without auth. The things I added were .wxug.com, .weatherunderground.com and .cloudflare.com (NFI what that last one is). This didn’t solve my problem.

Just for testing purposes I sent the client straight through to the Internet, which did solve the problem. Obviously there is something whacky with Squid.

Further digging into the logs revealed some network errors, 503 errors to be exact. The other weird part of these errors were IPv6 peer hosts, that ain’t gonna work I’m afraid.

Quick Google and I found that the simple solution is to tell Squid to prefer IPv4. I added the following line to the end of my squid.conf:

dns_v4_first on

then did a:

squid -k reconfigure

Now all the peer hosts are IPv4 and life is good again:

wxug_fixed

]]> https://www.crummylogic.com/wordpress/?feed=rss2&p=248 1