Re: [squid-users] problem with transparent and invalid URLs

From: Leonardo Rodrigues Magalhães <leolistas@dont-contact.us>
Date: Sat, 05 Apr 2008 21:53:51 -0300

Henrik Nordstrom escreveu:
> lör 2008-04-05 klockan 18:40 -0300 skrev Leonardo Rodrigues Magalhães:
>
>
>> if i manually point squid on firefox/IE proxy configurations, it
>> works. But if i let the connection be intercepted, then i only get
>> 'Invalid URL' errors.
>>
>
> That's because your Squid doesn't realize the connection was
> intercepted, because the destination IP did not change from the
> requested IP..
>
> The suggested setup is to not intercept connections destined for the
> server itself. This neatly avoids this and a couple of other related
> issues...
>
> I.e. in iptables nat you have something like
>
> iptables -t nat -A PREROUTING -d ip.of.this.server -j ACCEPT
> iptables -t nat -p tcp --dport 80 -j REIRECT --redirect-to port_of_squid
>
>

   Hi Henrik,

    As a workaround, i have already done that, thanks for your tip.

    The interesting part is that i'm actually migrating from 2.5
directly to 3.0, and that exact scenario works just fine on 2.5-Stable14
! Squid 2.5 Stable 14 handles this scenario with no problems at all,
even intercepting a request to its own ip address.

-- 
	Atenciosamente / Sincerily,
	Leonardo Rodrigues
	Solutti Tecnologia
	http://www.solutti.com.br
	Minha armadilha de SPAM, NÃO mandem email
	gertrudes@solutti.com.br
	My SPAMTRAP, do not email it
Received on Sat Apr 05 2008 - 18:54:00 MDT

This archive was generated by hypermail 2.2.0 : Thu May 01 2008 - 12:00:04 MDT