Hey William,
It's not clear what connection from the logs you are talking about since I do not see any logs about a CONNECT request. It might be because a CONNECT is being shown in the logs after the connection is ended. To verify the issue I would to verify what squid does and if a cli command like wget or curl from the squid box are doing the same. There are debug logs levels that can help but try to add "dns_v4_first on" into the squid.conf, reload\restart and try again to see how squid works. I am almost sure that the connection issue is related to some kind of network layer, you can try to see what happens when you try to access: https://www.ngtech.co.il/ After we will clear this issue out there are other things which you might need to change\add in your squid.conf. Eliezer ---- <http://ngtech.co.il/lmgtfy/> Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of William Ivanski Sent: Thursday, June 2, 2016 4:36 PM To: William Ivanski Cc: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Establishing secure conection problems (Chrome) -> Access.log (the host 192.168.0.52 belongs to acl reqliberacaofixo): 1464870540.039 495 192.168.0.52 TCP_MISS/301 675 GET <http://www.hotmail.com/> http://www.hotmail.com/ - HIER_DIRECT/ <http://65.55.65.188> 65.55.65.188 text/html 1464870550.793 10206 192.168.0.52 TCP_MISS_ABORTED/000 0 POST <http://s2.symcb.com/> http://s2.symcb.com/ - HIER_DIRECT/2600:1419:8:18f::201a - 1464870554.259 2241 192.168.0.52 TCP_MISS_ABORTED/000 0 POST <http://sr.symcd.com/> http://sr.symcd.com/ - HIER_DIRECT/2600:1419:8:18f::201a - 1464870626.286 121662 192.168.0.52 TCP_MISS/200 2192 GET <http://s2.symcb.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD%2BOyl%2B0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEH7hSm9v7%2FLTfz%2BtZU062rQ%3D> http://s2.symcb.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD%2BOyl%2B0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEH7hSm9v7%2FLTfz%2BtZU062rQ%3D - HIER_DIRECT/ <http://23.4.43.27> 23.4.43.27 application/ocsp-response 1464870746.296 119912 192.168.0.52 TCP_MISS/200 2192 GET <http://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD%2BOyl%2B0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c%3D> http://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD%2BOyl%2B0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c%3D - HIER_DIRECT/ <http://23.4.43.27> 23.4.43.27 application/ocsp-response 1464870866.307 120000 192.168.0.52 TCP_MISS/200 2155 GET <http://sf.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo%2FX8AUm7%2BPSp50CEExA26X5iPrlelfWRXSV%2BYs%3D> http://sf.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo%2FX8AUm7%2BPSp50CEExA26X5iPrlelfWRXSV%2BYs%3D - HIER_DIRECT/ <http://23.4.43.27> 23.4.43.27 application/ocsp-response 1464870866.467 149 192.168.0.52 TCP_MISS/304 331 GET <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab - HIER_DIRECT/2804:a8:c800:301::bd56:7a18 application/octet-stream 1464870986.300 119824 192.168.0.52 TCP_MISS/200 654 GET <http://crl.geotrust.com/crls/secureca.crl> http://crl.geotrust.com/crls/secureca.crl - HIER_DIRECT/ <http://23.4.37.163> 23.4.37.163 application/pkix-crl 1464871457.106 312 192.168.0.52 TCP_MISS/301 419 GET <http://support.microsoft.com/> http://support.microsoft.com/ - HIER_DIRECT/ <http://172.224.183.89> 172.224.183.89 - 1464871477.134 45 192.168.0.52 TCP_MISS/301 340 GET <http://www.itau.com.br/> http://www.itau.com.br/ - HIER_DIRECT/ <http://23.10.60.73> 23.10.60.73 - 1464871487.149 41 192.168.0.52 TCP_MISS/204 184 GET <http://www.gstatic.com/generate_204> http://www.gstatic.com/generate_204 - HIER_DIRECT/2800:3f0:4001:800::2003 - 1464871490.334 338 192.168.0.52 TCP_MISS/302 685 GET <http://c1.microsoft.com/c.gif> http://c1.microsoft.com/c.gif? - HIER_DIRECT/ <http://131.253.40.50> 131.253.40.50 - 1464871490.841 501 192.168.0.52 TCP_MISS/302 935 GET <http://c.bing.com/c.gif> http://c.bing.com/c.gif? - HIER_DIRECT/ <http://65.52.108.11> 65.52.108.11 - 1464871491.004 159 192.168.0.52 TCP_MISS/200 885 GET <http://c1.microsoft.com/c.gif> http://c1.microsoft.com/c.gif? - HIER_DIRECT/ <http://131.253.40.50> 131.253.40.50 image/gif 1464871507.401 60167 192.168.0.52 TCP_MISS_ABORTED/000 0 GET <http://sr.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR0JBRnBp%2F14Jg%2FXj4aa6BlKlQVdQQUAVmr5906C1mmZGPWzyAHV9WR52oCEGU3b%2BNLNLmDFl%2F0STiGxMc%3D> http://sr.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR0JBRnBp%2F14Jg%2FXj4aa6BlKlQVdQQUAVmr5906C1mmZGPWzyAHV9WR52oCEGU3b%2BNLNLmDFl%2F0STiGxMc%3D - HIER_DIRECT/2600:1419:8:191::201a - 1464871517.401 59969 192.168.0.52 TCP_MISS_ABORTED/000 0 GET <http://sr.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR0JBRnBp%2F14Jg%2FXj4aa6BlKlQVdQQUAVmr5906C1mmZGPWzyAHV9WR52oCEG%2F6tqKxfdmg4KPDzqvBuK8%3D> http://sr.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR0JBRnBp%2F14Jg%2FXj4aa6BlKlQVdQQUAVmr5906C1mmZGPWzyAHV9WR52oCEG%2F6tqKxfdmg4KPDzqvBuK8%3D - HIER_DIRECT/2600:1419:8:191::201a - 1464871522.402 60173 192.168.0.52 TCP_MISS_ABORTED/000 0 GET <http://sr.symcb.com/sr.crl> http://sr.symcb.com/sr.crl - HIER_DIRECT/2600:1419:8:181::1abd - 1464871532.402 59968 192.168.0.52 TCP_MISS_ABORTED/000 0 GET <http://sr.symcb.com/sr.crl> http://sr.symcb.com/sr.crl - HIER_DIRECT/2600:1419:8:181::1abd - 1464871676.152 839 192.168.0.52 TCP_MISS/301 675 GET <http://www.hotmail.com/> http://www.hotmail.com/ - HIER_DIRECT/ <http://65.55.65.172> 65.55.65.172 text/html 1464871681.856 3654 192.168.0.52 TCP_MISS_ABORTED/000 0 GET <http://sr.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR0JBRnBp%2F14Jg%2FXj4aa6BlKlQVdQQUAVmr5906C1mmZGPWzyAHV9WR52oCEGU3b%2BNLNLmDFl%2F0STiGxMc%3D> http://sr.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR0JBRnBp%2F14Jg%2FXj4aa6BlKlQVdQQUAVmr5906C1mmZGPWzyAHV9WR52oCEGU3b%2BNLNLmDFl%2F0STiGxMc%3D - HIER_DIRECT/2600:1419:8:191::201a - 1464871690.823 62 192.168.0.52 TCP_MISS/200 889 POST <http://ocsp.digicert.com/> http://ocsp.digicert.com/ - HIER_DIRECT/ <http://192.16.58.8> 192.16.58.8 application/ocsp-response 1464871690.880 52 192.168.0.52 TCP_MISS/200 889 POST <http://ocsp.digicert.com/> http://ocsp.digicert.com/ - HIER_DIRECT/ <http://192.16.58.8> 192.16.58.8 application/ocsp-response 1464871694.282 312 192.168.0.52 TCP_MISS/302 948 GET <http://www.google.com.br/> http://www.google.com.br/ - HIER_DIRECT/2607:f8b0:4002:c0c::5e text/html 1464871694.785 180 192.168.0.52 TCP_MISS/200 847 POST <http://clients1.google.com/ocsp> http://clients1.google.com/ocsp - HIER_DIRECT/2800:3f0:4001:801::200e application/ocsp-response 1464871704.519 186 192.168.0.52 TCP_MISS/200 847 POST <http://clients1.google.com/ocsp> http://clients1.google.com/ocsp - HIER_DIRECT/2800:3f0:4001:801::200e application/ocsp-response 1464871705.113 173 192.168.0.52 TCP_MISS/200 847 POST <http://clients1.google.com/ocsp> http://clients1.google.com/ocsp - HIER_DIRECT/2800:3f0:4001:801::200e application/ocsp-response 1464871705.485 183 192.168.0.52 TCP_MISS/200 847 POST <http://clients1.google.com/ocsp> http://clients1.google.com/ocsp - HIER_DIRECT/2800:3f0:4001:801::200e application/ocsp-response 1464871705.748 179 192.168.0.52 TCP_MISS/200 847 POST <http://clients1.google.com/ocsp> http://clients1.google.com/ocsp - HIER_DIRECT/2800:3f0:4001:801::200e application/ocsp-response 1464871707.725 177 192.168.0.52 TCP_MISS/200 847 POST <http://clients1.google.com/ocsp> http://clients1.google.com/ocsp - HIER_DIRECT/2800:3f0:4001:801::200e application/ocsp-response 1464871708.014 188 192.168.0.52 TCP_MISS/200 847 POST <http://clients1.google.com/ocsp> http://clients1.google.com/ocsp - HIER_DIRECT/2800:3f0:4001:801::200e application/ocsp-response 1464871708.768 186 192.168.0.52 TCP_MISS/200 847 POST <http://clients1.google.com/ocsp> http://clients1.google.com/ocsp - HIER_DIRECT/2800:3f0:4001:801::200e application/ocsp-response 1464871744.573 50 192.168.0.52 TCP_MISS/200 889 POST <http://ocsp.digicert.com/> http://ocsp.digicert.com/ - HIER_DIRECT/ <http://192.16.58.8> 192.16.58.8 application/ocsp-response 1464871746.272 39 192.168.0.52 TCP_MISS/200 1981 POST <http://vassg142.ocsp.omniroot.com/> http://vassg142.ocsp.omniroot.com/ - HIER_DIRECT/ <http://189.86.122.11> 189.86.122.11 application/ocsp-response 1464871749.966 1145 192.168.0.52 TCP_MISS/200 341701 GET <http://ciscobinary.openh264.org/openh264-win32-2706e36bf0a8b7c539c803ed877148c005ffca59.zip> http://ciscobinary.openh264.org/openh264-win32-2706e36bf0a8b7c539c803ed877148c005ffca59.zip - HIER_DIRECT/2600:1403:1::48f6:4070 application/zip 1464871763.636 145 192.168.0.52 TCP_MISS/302 945 HEAD <http://redirector.gvt1.com/edgedl/release2/4q5bp49e5hqoxn6kx4mnsg1knc0d6zmfyb1zzrw2utmcns77n9nuq1wj8dutbcg1fvvzulfi9uks07x9zue8525igkbwdt9k1k5/51.0.2704.79_chrome_installer_win64.exe> http://redirector.gvt1.com/edgedl/release2/4q5bp49e5hqoxn6kx4mnsg1knc0d6zmfyb1zzrw2utmcns77n9nuq1wj8dutbcg1fvvzulfi9uks07x9zue8525igkbwdt9k1k5/51.0.2704.79_chrome_installer_win64.exe - HIER_DIRECT/2800:3f0:4001:800::200e text/html 1464871763.698 60 192.168.0.52 TCP_MISS/200 429 HEAD <http://r2---sn-xhcg5uxa-jfcl.gvt1.com/edgedl/release2/4q5bp49e5hqoxn6kx4mnsg1knc0d6zmfyb1zzrw2utmcns77n9nuq1wj8dutbcg1fvvzulfi9uks07x9zue8525igkbwdt9k1k5/51.0.2704.79_chrome_installer_win64.exe> http://r2---sn-xhcg5uxa-jfcl.gvt1.com/edgedl/release2/4q5bp49e5hqoxn6kx4mnsg1knc0d6zmfyb1zzrw2utmcns77n9nuq1wj8dutbcg1fvvzulfi9uks07x9zue8525igkbwdt9k1k5/51.0.2704.79_chrome_installer_win64.exe? - HIER_DIRECT/2804:a8:c800:200::d application/octet-stream 1464871768.281 4550 192.168.0.52 TCP_MISS/200 52687693 GET <http://r2---sn-xhcg5uxa-jfcl.gvt1.com/edgedl/release2/4q5bp49e5hqoxn6kx4mnsg1knc0d6zmfyb1zzrw2utmcns77n9nuq1wj8dutbcg1fvvzulfi9uks07x9zue8525igkbwdt9k1k5/51.0.2704.79_chrome_installer_win64.exe> http://r2---sn-xhcg5uxa-jfcl.gvt1.com/edgedl/release2/4q5bp49e5hqoxn6kx4mnsg1knc0d6zmfyb1zzrw2utmcns77n9nuq1wj8dutbcg1fvvzulfi9uks07x9zue8525igkbwdt9k1k5/51.0.2704.79_chrome_installer_win64.exe? - HIER_DIRECT/2804:a8:c800:200::d application/octet-stream 1464871797.113 82 192.168.0.52 TCP_MISS/302 1663 GET <http://redirector.gvt1.com/crx/blobs/QgAAAC6zw0qH2DJtnXe8Z7rUJP2Rb7215C34RRoAOYw9FMifYIKbQ8NQ4eJck316jhcVHOPhJi112xRZ24oxSFePD-fslt2YdyTrBxWUtp4L7gbUAMZSmuXeGbE9p5N8uch3Sy5nHol_Tjr_7w/extension_1_0_0_0.crx> http://redirector.gvt1.com/crx/blobs/QgAAAC6zw0qH2DJtnXe8Z7rUJP2Rb7215C34RRoAOYw9FMifYIKbQ8NQ4eJck316jhcVHOPhJi112xRZ24oxSFePD-fslt2YdyTrBxWUtp4L7gbUAMZSmuXeGbE9p5N8uch3Sy5nHol_Tjr_7w/extension_1_0_0_0.crx - HIER_DIRECT/2800:3f0:4001:800::200e text/html 1464871797.249 92 192.168.0.52 TCP_MISS/200 185264 GET <http://r1---sn-xhcg5uxa-jfce.gvt1.com/crx/blobs/QgAAAC6zw0qH2DJtnXe8Z7rUJP2Rb7215C34RRoAOYw9FMifYIKbQ8NQ4eJck316jhcVHOPhJi112xRZ24oxSFePD-fslt2YdyTrBxWUtp4L7gbUAMZSmuXeGbE9p5N8uch3Sy5nHol_Tjr_7w/extension_1_0_0_0.crx> http://r1---sn-xhcg5uxa-jfce.gvt1.com/crx/blobs/QgAAAC6zw0qH2DJtnXe8Z7rUJP2Rb7215C34RRoAOYw9FMifYIKbQ8NQ4eJck316jhcVHOPhJi112xRZ24oxSFePD-fslt2YdyTrBxWUtp4L7gbUAMZSmuXeGbE9p5N8uch3Sy5nHol_Tjr_7w/extension_1_0_0_0.crx? - HIER_DIRECT/2804:a8:c800:100::c application/x-chrome-extension 1464871799.230 108 192.168.0.52 TCP_MISS/302 662 GET <http://tools.google.com/chrome/intl/pt-BR/welcome.html> http://tools.google.com/chrome/intl/pt-BR/welcome.html - HIER_DIRECT/2800:3f0:4004:805::200e text/html 1464871861.524 335 192.168.0.52 TCP_MISS/301 675 GET <http://www.hotmail.com/> http://www.hotmail.com/ - HIER_DIRECT/ <http://65.55.65.172> 65.55.65.172 text/html 1464871872.190 299 192.168.0.52 TCP_MISS/301 419 GET <http://support.microsoft.com/> http://support.microsoft.com/ - HIER_DIRECT/ <http://172.224.183.89> 172.224.183.89 - 1464871893.795 1211 192.168.0.52 TCP_MISS/301 344 GET <http://itau.com.br/> http://itau.com.br/ - HIER_DIRECT/ <http://23.0.95.170> 23.0.95.170 - 1464871902.240 46 192.168.0.52 TCP_MISS/204 184 GET <http://www.gstatic.com/generate_204> http://www.gstatic.com/generate_204 - HIER_DIRECT/2800:3f0:4001:803::2003 - 1464871906.833 334 192.168.0.52 TCP_MISS/302 685 GET <http://c1.microsoft.com/c.gif> http://c1.microsoft.com/c.gif? - HIER_DIRECT/ <http://131.253.40.50> 131.253.40.50 - 1464871907.183 348 William Ivanski
_______________________________________________ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
