nixCraft

I have configured squid-2.6 and Dansguardian 2.10.0.3 on RHEL5 for caching and web filtering for my office internet users. i m facing problems in loging into msn messenger, i have put acls in squid and msn ips in dansguardian exceptionsite list but still not getting msn messenger login, my squid acls for allowing msn messenger and dansguardian exceptionsite list is as under.

Squid Acls (there is no acl in my squid.conf to block msn msgr)
acl msn_mime req_mime_type -i ^application/x-msn-messenger$
acl msn_gw url_regex -i gateway.dll
acl msnd dstdomain messenger.msn.com gateway.messenger.hotmail.com
http_access allow msn_mime
http_access allow msn_gw
http_access allow msnd

DG exceptionsitelist
64.4.13.0/24
152.163.241.0/24
64.12.163.0/24
207.46.110.0/24
207.46.1.0/24
65.54.0.0/16
207.46.104.20
207.46.110.0
65.55.149.121
98.136.113.173
64.4.32.7
221.120.250.106
65.242.27.35
64.4.9.254

After doing all this i m still facing login issues with msn messenger whenever i try to login it shows error login failed, service temporarily unavailable, i have juniper firewall behind proxy which has any any policy for proxy server, proxy servers iptables are fine, transparent proxy disabled due to DG, i have attached snapshots of msn msgr login errors. I have took ur precious time, ur cooperation will be highly appreciated

Attached Images

	msnmsgr.jpg (72.6 KB, 3 views)
	msnmsgr1.jpg (54.3 KB, 4 views)

Your server (mostly iptables based firewall) is blocking port. See squid and /var/log/messages file for exact issue why it is dropping ports.

__________________
Vivek Gite
Be proud RHEL user, and let the world know about your enterprise choices! Join RedHat user group.
Do you run a Linux? Let's face it, you need help!
Cricket & IPL News Blog

nix i appreciate ur reply, i have checked my iptables and squid logs here are my squid logs while i try to log into msn messenger

1257142473.253 2479 192.168.151.227 TCP_MISS/200 19905 CONNECT https://login.live.com:443 192.168.151.227 DEFAULT_PARENT/127.0.0.1 -
1257142492.357 438 192.168.151.227 TCP_MISS/200 0 POST http://gateway.messenger.hotmail.com...er.hotmail.com 192.168.151.227 DEFAULT_PARENT/127.0.0.1 -

and my iptables are as under

iptables -A INPUT --source 192.168.151.227 -p tcp --dport 22 -j ACCEPT
iptables -A INPUT --source 192.168.151.98 -p tcp --dport 22 -j ACCEPT
iptables -A INPUT --source 0/0 -p tcp --dport 8080 -j ACCEPT
iptables -A INPUT -p tcp --dport 22 -j DROP
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 3128 -j REDIRECT --to-port 8080

and Squid.conf SSL ports configurations are

acl Safe_ports port 443
http_access deny CONNECT !SSL_ports

if you have dansguardian + squid, and squid y reporting TCP_MISS in log, you may check the dansguardian log, because most of the time there's the problem, blocking the dll extension.

thanks la, i managed to log into msn messenger by allowing the given ports on microsoft website for msn messenger, i added these ports in squid acl safe ports portion, even now my msn and on some other pcs gets disconnected automatically....