Re: [squid-users] How to strip/ignore header in squid?

> On Tue, May 12, 2009 at 17:09, Chris Robertson <crobertson_at_gci.net> wrote:
>> Kurt Buff wrote:
>>>
>>> All,
>>>
>>> My user population is having frequent problems fetching PDFs through
>>> our squid proxy, and I think I've narrowed down the issue, though I'm
>>> not 100% certain of it.
>>>
>>> I see two deny messages from our Sidewinder firewall, that are
>>> associated with the URLs regarding request headers for the PDFs:
>>>
>>> Â Â "Request denied with request header Unless-Modified-Since."
>>>
>>> and
>>>
>>> Â Â "Request denied with request header Translate."
>>>
>>> Is there a way to cause squid to ignore these request headers from the
>>> browsers,
>>
>> http://www.squid-cache.org/Doc/config/header_access/
>>
>>> Â or to replace them with something benign?
>>
>> http://www.squid-cache.org/Doc/config/header_replace/
>>
>>> Â Is it reasonable
>>> to do so, or will that just cause further issues?
>>>
>>
>> There, I can't help. Â I'd suggest contacting support for the Firewall,
>> and
>> get the problem solved (or at least identified) there.
>>
>>> Any help and thoughts appreciated.
>>>
>>> Kurt
>>>
>>
>>
>> Chris
>
> Unfortunately, adding the two directives:
>
> header_access Unless-Modified-Since deny all
> header_access Translate deny all
>
> Generates the following errors at start and stop of squid:
>
> 2009/05/13 11:42:57| cache_cf.cc(346) squid.conf:40 unrecognized:
> 'header_access'
> 2009/05/13 11:42:57| cache_cf.cc(346) squid.conf:41 unrecognized:
> 'header_access
>
> Under FreeBSD, a 'make config' shows that SQUID_STRICT_HTTP is
> deselected. From my reading of the make file, this means that the
> directive --disable-http-violations is not in effect.
>
> Will I have to recompile with --enable-http-violations to be able to
> use these directives?
>
> Kurt
>

Yes.

Amos
Received on Thu May 14 2009 - 01:18:27 MDT