I am just trying to set up the new outgoing proxy server.

I've entered the correct data, UNRAID keeps telling me "unavailable".

WHY?

BTW: the user and pwd fields need to be clearble, they are always reset to the UNRAID root accout.

My proxy does not want any authentication...

And, of course "not available" is a lie...

The proxy does not show any sign of beeing contacted by this setup.

Whats wrong?

(aah, and before someone tells me that I need to switch the upmost "proxy selection" field to the desired entry: it does not work! The list shows the new "Squid" but it is not selectable!)

(Browser: firefox)

Edited May 31, 20251 yr by MAM59

hmm, can this be a (quite stupid) sign of the failing proxy test:

1748707875.158 0 192.168.0.4 TCP_DENIED/403 3808 CONNECT www.msftncsi.com:80 - HIER_NONE/- text/html

1748707890.541 0 192.168.0.4 TCP_DENIED/403 3808 CONNECT www.msftncsi.com:80 - HIER_NONE/- text/html

1748707906.131 0 192.168.0.4 TCP_DENIED/403 3808 CONNECT www.msftncsi.com:80 - HIER_NONE/- text/html

1748707921.342 0 192.168.0.4 TCP_DENIED/403 3808 CONNECT www.msftncsi.com:80 - HIER_NONE/- text/html

1748707936.589 0 192.168.0.4 TCP_DENIED/403 3808 CONNECT www.msftncsi.com:80 - HIER_NONE/- text/html

1748707952.139 0 192.168.0.4 TCP_DENIED/403 3808 CONNECT www.msftncsi.com:80 - HIER_NONE/- text/html

1748707967.515 0 192.168.0.4 TCP_DENIED/403 3808 CONNECT www.msftncsi.com:80 - HIER_NONE/- text/html

1748707982.690 0 192.168.0.4 TCP_DENIED/403 3808 CONNECT www.msftncsi.com:80 - HIER_NONE/- text/html

1748707997.898 0 192.168.0.4 TCP_DENIED/403 3808 CONNECT www.msftncsi.com:80 - HIER_NONE/- text/html

1748708013.416 0 192.168.0.4 TCP_DENIED/403 3808 CONNECT www.msftncsi.com:80 - HIER_NONE/- text/html

The IP is UNRAID, the try to contact the Microsoft ECHO Server via HTTPS on port 80 is not really bright...

Analysis and Solution:

The SQUID proxy server with a standard installation denies access to the above URL. Therefor UNRAID's test always fails and the configured outgoing proxy is never accepted.

THIS IS A BUG!

Workaround:

modify SQUID.conf

Search for "acl SSL_ports port 443"

Add a line below: "acl SSL_ports port 80"

restart squid

(this will allow http access on port 80 too, it still won't work but now the returned status is 200 instead of 403, UNRAID is happy with this)

1748754824.553 1 192.168.0.170 TCP_TUNNEL/200 342 CONNECT www.msftncsi.com:80 - HIER_DIRECT/192.168.0.4 -

1748754824.555 1 192.168.0.170 TCP_TUNNEL/200 342 CONNECT www.msftncsi.com:80 - HIER_DIRECT/192.168.0.4 -

1748754825.195 1 192.168.0.170 TCP_TUNNEL/200 342 CONNECT www.msftncsi.com:80 - HIER_DIRECT/192.168.0.4 -

1748754825.196 0 192.168.0.170 TCP_TUNNEL/200 342 CONNECT www.msftncsi.com:80 - HIER_DIRECT/192.168.0.4 -

1748754831.881 1 192.168.0.170 TCP_TUNNEL/200 342 CONNECT www.msftncsi.com:80 - HIER_DIRECT/192.168.0.4 -

1748754831.882 0 192.168.0.170 TCP_TUNNEL/200 342 CONNECT www.msftncsi.com:80 - HIER_DIRECT/192.168.0.4 -

1748754834.319 1 192.168.0.170 TCP_TUNNEL/200 342 CONNECT www.msftncsi.com:80 - HIER_DIRECT/192.168.0.4 -

1748754834.321 1 192.168.0.170 TCP_TUNNEL/200 342 CONNECT www.msftncsi.com:80 - HIER_DIRECT/192.168.0.4 -

1748754834.798 1 192.168.0.170 TCP_TUNNEL/200 342 CONNECT www.msftncsi.com:80 - HIER_DIRECT/192.168.0.4 -

1748754834.800 0 192.168.0.170 TCP_TUNNEL/200 342 CONNECT www.msftncsi.com:80 - HIER_DIRECT/192.168.0.4 -

(and yeah, i faked that host too. no need here to do external tests, we keep everything in the family (this silences window's clients too at the same time :-) ))

Edited June 1, 20251 yr by MAM59