On Tue, Mar 05, 2002 at 03:29:17PM -0600, hanasaki wrote:
| Is is possible that the squid request looks different, in some way, and
| is thus blocked?
Squid requests do look slightly different. There is a header:
X-Forwarded-For: 192.168.0.2
And if there is a cascade of squid servers, like I have where I run
one at home forwarded to one of my colo servers, it combines them:
X-Forwarded-For: 192.168.0.2, 172.16.0.4
If you use the "forwarded_for off" configuration option, it does NOT
turn it off. Instead it replaces the IP address with "unknown".
I have it off for both of my proxy servers, so I get:
X-Forwarded-For: unknown, unknown
So it is still apparent that squid is operating.
Now as to why someone would make their site not accessible from a proxy
I am not sure. I can get to both www.nvidia.com and www.wdc.com just
fine over mine, so I don't think they have done that in this case. But
I would like to get that "X-Forwarded-For:" taken out of there (and have
posted a question to that effect to make sure I exhaust all configuration
remedies before I apply the surgical knife of emacs to the source code).
|
| Dale Harrod wrote:
| > I am running Squid 2.4 stable 4 on Redhat 7.2. Both sites are
| retrieved by
| > my proxy.
| >
| >
| > Best Regards,
| > Dale S. Harrod
| >
| > -----Original Message-----
| > From: hanasaki [mailto:hanasaki@hanaden.com]
| > Sent: Tuesday, March 05, 2002 4:04 PM
| > To: squid-users@squid-cache.org
| > Subject: [squid-users] Some sites seem to reject Squid proxied requrests
| >
| >
| > I am using the current Squid in Debian - Woody. I have been un-able to
| > connect to the following sites:
| > www.nvidia.com
| > www.wdc.com
| >
| > The connection times out.
| >
| > I am able to connect if port 80 is NAT'ed and squid is bypassed.
| >
| > Thank you for your help.
|
|
| --
| =================================================================
| = hanasaki@hanaden.com =
| = Spam : Unhealthy and High in Sodium and Cholesterol =
| =================================================================
-- ----------------------------------------------------------------- | Phil Howard - KA9WGN | Dallas | http://linuxhomepage.com/ | | phil-nospam@ipal.net | Texas, USA | http://phil.ipal.org/ | -----------------------------------------------------------------Received on Wed Mar 06 2002 - 01:24:53 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:06:44 MST