Re: [squid-users] How to strip/ignore header in squid?

From: Kurt Buff <kurt.buff_at_gmail.com>
Date: Wed, 13 May 2009 12:01:52 -0700

On Tue, May 12, 2009 at 17:09, Chris Robertson <crobertson_at_gci.net> wrote:
> Kurt Buff wrote:
>>
>> All,
>>
>> My user population is having frequent problems fetching PDFs through
>> our squid proxy, and I think I've narrowed down the issue, though I'm
>> not 100% certain of it.
>>
>> I see two deny messages from our Sidewinder firewall, that are
>> associated with the URLs regarding request headers for the PDFs:
>>
>>     "Request denied with request header Unless-Modified-Since."
>>
>> and
>>
>>     "Request denied with request header Translate."
>>
>> Is there a way to cause squid to ignore these request headers from the
>> browsers,
>
> http://www.squid-cache.org/Doc/config/header_access/
>
>>  or to replace them with something benign?
>
> http://www.squid-cache.org/Doc/config/header_replace/
>
>>  Is it reasonable
>> to do so, or will that just cause further issues?
>>
>
> There, I can't help.  I'd suggest contacting support for the Firewall, and
> get the problem solved (or at least identified) there.
>
>> Any help and thoughts appreciated.
>>
>> Kurt
>>
>
>
> Chris

Unfortunately, adding the two directives:

     header_access Unless-Modified-Since deny all
     header_access Translate deny all

Generates the following errors at start and stop of squid:

    2009/05/13 11:42:57| cache_cf.cc(346) squid.conf:40 unrecognized:
'header_access'
    2009/05/13 11:42:57| cache_cf.cc(346) squid.conf:41 unrecognized:
'header_access

Under FreeBSD, a 'make config' shows that SQUID_STRICT_HTTP is
deselected. From my reading of the make file, this means that the
directive --disable-http-violations is not in effect.

Will I have to recompile with --enable-http-violations to be able to
use these directives?

Kurt
Received on Wed May 13 2009 - 19:01:57 MDT

This archive was generated by hypermail 2.2.0 : Thu May 14 2009 - 12:00:01 MDT