SYSTEM WARNING: 'date_default_timezone_get(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone.' in '/usr/share/mantis/www/core.php' line 264
Notes |
|
|
there is a workaround. which seems to solve the problem:
- connect to your firewall per ssh
- open/create the file /var/efw/proxy/custom-acl.conf (for example: nano /var/efw/proxy/custom-acl.conf)
- put the following lines inside the file
acl chunked dstdomain .msnbc.msn.com
header_access Accept-Encoding deny chunked
- save the file and restart the proxy by executing restartsquid.py
|
|
|
(0001446)
|
trung
|
2008-07-15 16:34
|
|
|
|
|
thanks for the info! i will check this
regards,
Simon |
|
|
(0001612)
|
chris-endian
|
2008-09-12 08:02
|
|
Hi,
EFW's Squid ( squid-2.6.STABLE18-5.endian6 ) shows the problem,
but a freshly compiled upstream Squid of the same version
( squid-2.6.STABLE18 ) does NOT show the problem.
It must be related to EFW's squid configuration or to the proy
chain (havp?).
I'll continue investigating this.
Bye,
Chris |
|
|
(0001613)
|
chris-endian
|
2008-09-12 10:48
|
|
Hi again,
the problem is related to exactly this directive in squid.conf:
header_access Via deny all
commenting it out in efw -> msnbc works again
adding it to freshly compiled squid -> msnbc doesn't work anymore.
We need to evaluate the possibility to remove this line altogether...
Bye,
Chris. |
|
|
|
havp is now updated which applies the via fix. |
|
|
|
header_access Via deny all is now removed from squid.conf.tmpl |
|
|
(0002046)
|
bonald
|
2009-03-15 23:50
|
|
removing the line
header_access Via deny all
added a tons of Proxy-forwading loop in cache.log
Maybe we should run two instances of squid instead of just one. |
|
|
|
this issue is only with dansguardian enabled and havp disabled, because havp does not append himself to the Via header, but replaces the Via header with "1.0 PROXY", which breaks loop detection in squid |
|