Re: [squid-users] Help with minimalistic pass-thru squid proxy

securehell@hushmail.com wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> This is how the HTTP server being connected to replies. So what
> this indicates to me is that squid is examining the HTTP replies
> from web servers. I would like to turn off this feature if possible.

To turn off the destination-detection parts of squid (the ones involved
here) you need to NOT USE squid.

Any software program when asked to connect to the net needs to know
where to connect. The client-app are telling squid to locate a place
that does not exist. I don't believe this bungled string in coming out
of a web browser as they obey the HTTP standards in generating URI

In order for those requests to be valid there MUST be a '/' before the
'?'. Much of the software online will break without it. Squid included.

>
> Thanks
>
> On Fri, 14 Dec 2007 03:18:46 -0500 Amos Jeffries
> <squid3@treenet.co.nz> wrote:
>> securehell@hushmail.com wrote:
>>> -----BEGIN PGP SIGNED MESSAGE-----
>>> Hash: SHA1
>>>
>>> Hi list,
>>>
>>> I am using a squid proxy to route http traffic through a
>> separate
>>> router on my network. I am getting some traffic in my
>>> /var/log/squid/cache.log file:
>>>
>>> 2007/12/13 13:46:54| urlParse: Illegal character in hostname
>>> 'www.hostname1.com?404=y'
>>> 2007/12/13 14:01:44| urlParse: Illegal character in hostname
>>> 'www.hostname2.com?404=y'
>>> 2007/12/13 14:08:18| urlParse: Illegal character in hostname
>>> 'hostname3.com?404=y'
>>> 2007/12/13 14:13:37| urlParse: Illegal character in hostname
>>> 'hostname.com?404=y'
>>>
>>> I'm looking at the source of these URLs when this happens and
>> the
>>> URL is not malformed.
>>>
>>> What I really want, though, is to turn off any kind of URL
>> checking
>>> like this. I just want squid to pass any HTTP requests through
>>> unchecked and unaltered if possible. I also want to turn off all
>>> URL logging and caching.
>>>
>>> Can someone suggest how to do this in the squid config?
>> Please indicate which version of squid you are using.
>> This is a sign of a serious error somewhere. "?404=y" is not
>> valid in
>> a domain name.
>>
>>
>>> Also, if there are better suggestions (other than squid, that
>> is) I
>>> would be glad to consider them.
>> Just routing? maybe configuring the router to do its job would be
>> the thing.
>> I don't want to loose you from the squid family but it would
>> certainly
>> be a lot less trouble and faster to route at the packet level.
>>
>>
>> Amos
> -----BEGIN PGP SIGNATURE-----
> Note: This signature can be verified at https://www.hushtools.com/verify
> Charset: UTF8
> Version: Hush 2.5
>
> wkYEARECAAYFAkdiqp4ACgkQRBFe1uc9INpQbwCfR0HJm6zmgAwBBDn+QLvi5eGoI/AA
> oJDT6Ni5cuN0IBV8sR+MO7gz4CvX
> =wMI4
> -----END PGP SIGNATURE-----
>
>
Received on Fri Dec 14 2007 - 15:54:09 MST