>
>
>
>
> Elsen Marc wrote:
>
> > Whether or not this proxying is fully HTTP compliant can
> for instance
> > be verified by checking squid's access log for request(s) coming
> > from this 'source'.
> > Also check squid's cache.log for further info and or errors.
>
> This is what I get in access.log:
>
> 1084802777.627 6 10.167.211.11 TCP_DENIED/403 1353 CONNECT
> login.oscar.aol.com:5190 - NONE/- text/html
>
> 1084803020.025 2 10.167.211.11 TCP_DENIED/403 1357 CONNECT
> messenger.hotmail.com:1863 - NONE/- text/html
>
>
> Nothing to mention in cache.log.
>
> What else?
>
You get TCP_DENIED errors because the ports used, in this
case 5190 and 1863 are not listed in your SSL_ports acl.
Allowing SQUID's CONNECT , for such applications has be done with care.
Avoid proxy abuse and or or 'unwanted' proxy behavior towards the outside world.
M.
Received on Mon May 17 2004 - 08:26:11 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Jun 01 2004 - 12:00:01 MDT