Hello,
I try to use squid and squidGuard and I encounter the following problem:
my squid is a child and is told to take everything from its parent,
except for the local redirector page:
acl lokal dstdomain localhost
always_direct allow lokal
always_direct deny all
never_direct allow all
redirect_program /usr/bin/squidGuard -c /etc/squid/squidGuard.conf
redirect_children 2
works very fine.
squidguard forbids access to site "elster.de" (as example)
when using with http the redirection works well (http://www.elster.de
gets redirected) , when accessing this page via https my parent squid
gets an request to get "http:443" which results in "unable to get
Ip-Address for http:433"
Is this a known bug (feature)?
Logs from http-request:
squidGuard log:
2005-03-16 13:57:18 [18710] Request(lutetia/d2/-) http://www.elster.de/
10.1.1.47/- - GET
squid log:
1110977838.506 86 10.1.1.47 TCP_MISS/403 2810 GET
http://www.elster.de/ - DIRECT/127.0.0.1 text/html
Logs form HTTPS:
squidGuard:
2005-03-16 13:58:35 [18710] Request(lutetia/d2/-) www.elster.de:443
10.1.1.47/- - CONNECT
squid:
1110977915.539 5 10.1.1.47 TCP_MISS/000 1464 CONNECT
www.elster.de:443 - FIRST_UP_PARENT/10.1.1.100 -
using
Squid Cache: Version 2.5.STABLE8
configure options: --prefix=/usr --exec_prefix=/usr --bindir=/usr/sbin
--sbindir=/usr/sbin --libexecdir=/usr/lib/squid --sysconfdir=/etc/squid
--localstatedir=/var/spool/squid --datadir=/usr/share/squid
--enable-async-io --with-pthreads --enable-storeio=ufs,aufs,diskd,null
--enable-linux-netfilter --enable-arp-acl
--enable-removal-policies=lru,heap --enable-snmp --enable-delay-pools
--enable-htcp --enable-poll --enable-cache-digests --enable-underscores
--enable-referer-log --enable-useragent-log
--enable-auth=basic,digest,ntlm --enable-carp --enable-large-files
i386-debian-linux
and
SquidGuard: 1.2.0 Sleepycat Software: Berkeley DB 4.1.25: (January 8, 2005)
Greetings, Ingo.
-- Ingo Neis Leiter Network Coordination Centre (NCC) Abteilung IT eurodata GmbH & Co. KG
This archive was generated by hypermail pre-2.1.9 : Fri Apr 01 2005 - 12:00:02 MST