Who is sending you the error message? I think the error is sent to you
by your parent.

I think you are missing

acl local dst 10.0.0.0/8
always_direct allow local


Also, having the browsers reconfigured to go direct for internal servers
is generally recommended.

Regards
Henrik



Andi Hari Cahyono wrote:
> 
> Hello all,
> 
> i've upgraded my squid 2.4STABLE7. Now i'm using squid 2.5.stable2. But i still 
> can't access my internal web servers. My dns using ISP's dns.
> The problem when i open infotech.altuwairqi.com.sa ( my local web server )is The 
> system detected an Unresolved Host Name while attempting to resolve the host 
> specified in the requested URL
> 
> here is my squid.conf
> 
> proxy:/data/log # more /etc/squid/etc/squid.conf
> http_port 3128
> icp_port 3130
> # htcp_port 4827
> cache_peer  x.x.x.x parent 8080 0
> cache_peer  x.x.x.x sibling 8080 0
> icp_query_timeout 50
> maximum_icp_query_timeout 2000
> mcast_icp_query_timeout 2000
> dead_peer_timeout 30 seconds
> hierarchy_stoplist cgi-bin ?
> acl QUERY urlpath_regex cgi-bin \?
> no_cache deny QUERY
> cache_mem 32 MB
> cache_swap_low 90
> cache_swap_high 95
> maximum_object_size 4096 KB
> minimum_object_size 0 KB
> maximum_object_size_in_memory 8 KB
> ipcache_size 1024
> ipcache_low 90
> ipcache_high 95
> fqdncache_size 1024
> cache_replacement_policy lru
> memory_replacement_policy lru
> cache_dir ufs /data/cache/squid 100 16 256
> cache_access_log /data/log/access.log
> cache_log /data/log/cache.log
> cache_store_log /data/log/store.log
> emulate_httpd_log off
> log_ip_on_direct on
> pid_filename /data/log/squid.pid
> hosts_file /etc/hosts
> redirect_children 5
> auth_param basic children 5
> auth_param basic realm Squid proxy-caching web server
> auth_param basic credentialsttl 2 hours
> request_header_max_size 10 KB
> request_body_max_size 0 KB
> #Suggested default:
> refresh_pattern ^ftp:           1440    20%     10080
> refresh_pattern ^gopher:        1440    0%      1440
> refresh_pattern .               0       20%     4320
> 
> quick_abort_min 16 KB
> quick_abort_max 16 KB
> quick_abort_pct 95
> negative_ttl 5 minutes
> positive_dns_ttl 6 hours
> negative_dns_ttl 5 minutes
> range_offset_limit 0 KB
> connect_timeout 2 minutes
> peer_connect_timeout 30 seconds
> read_timeout 15 minutes
> request_timeout 5 minutes
> client_lifetime 1 day
> half_closed_clients on
> shutdown_lifetime 30 seconds
> acl all src 0.0.0.0/0.0.0.0
> acl manager proto cache_object
> acl localhost src 127.0.0.1/255.255.255.255
> acl to_localhost dst 127.0.0.0/8
> acl SSL_ports port 443 563
> acl Safe_ports port 80          # http
> acl Safe_ports port 21          # ftp
> acl Safe_ports port 443 563     # https, snews
> acl Safe_ports port 70          # gopher
> acl Safe_ports port 210         # wais
> acl Safe_ports port 1025-65535  # unregistered ports
> acl Safe_ports port 280         # http-mgmt
> acl Safe_ports port 488         # gss-http
> acl Safe_ports port 591         # filemaker
> 
> acl Safe_ports port 777         # multiling http
> acl CONNECT method CONNECT
> http_access allow manager localhost
> http_access deny manager
> http_access deny !Safe_ports
> http_access deny CONNECT !SSL_ports
> http_access allow all
> http_reply_access allow all
> icp_access allow all
> miss_access allow all
> cache_mgr [EMAIL PROTECTED]
> cache_effective_user squid
> visible_hostname proxy.altuwairqi.com.sa
> unique_hostname proxy.altuwairqi.com.sa
> query_icmp off
> 
> -------------
> 
> and here is my /etc/hosts
> 
> 127.0.0.1       localhost
> 
> # special IPv6 addresses
> ::1             localhost ipv6-localhost ipv6-loopback
> 
> fe00::0         ipv6-localnet
> 
> ff00::0         ipv6-mcastprefix
> ff02::1         ipv6-allnodes
> ff02::2         ipv6-allrouters
> ff02::3         ipv6-allhosts
> 
> 10.10.1.11    infotech.altuwairqi.com.sa
> 10.10.1.19    proxy.altuwairqi.com.sa
> 10.10.1.24    proxy1.altuwairqi.com.sa
> 
> i'm waiting for your help
> thanks
> 
> andihari

Reply via email to