[squid-users] HTTPS Redirector Problem

From: Ingo Neis <[email protected]>
Date: Wed, 16 Mar 2005 14:00:40 +0100

Hello,
I try to use squid and squidGuard and I encounter the following problem:

my squid is a child and is told to take everything from its parent,
except for the local redirector page:

acl lokal dstdomain localhost
always_direct allow lokal
always_direct deny all
never_direct allow all
redirect_program /usr/bin/squidGuard -c /etc/squid/squidGuard.conf
redirect_children 2

works very fine.

squidguard forbids access to site "elster.de" (as example)

when using with http the redirection works well (http://www.elster.de
gets redirected) , when accessing this page via https my parent squid
gets an request to get "http:443" which results in "unable to get
Ip-Address for http:433"

Is this a known bug (feature)?

Logs from http-request:

squidGuard log:
2005-03-16 13:57:18 [18710] Request(lutetia/d2/-) http://www.elster.de/
10.1.1.47/- - GET

squid log:
1110977838.506 86 10.1.1.47 TCP_MISS/403 2810 GET
http://www.elster.de/ - DIRECT/127.0.0.1 text/html

Logs form HTTPS:
squidGuard:
2005-03-16 13:58:35 [18710] Request(lutetia/d2/-) www.elster.de:443
10.1.1.47/- - CONNECT
squid:
1110977915.539 5 10.1.1.47 TCP_MISS/000 1464 CONNECT
www.elster.de:443 - FIRST_UP_PARENT/10.1.1.100 -

using
Squid Cache: Version 2.5.STABLE8
configure options: --prefix=/usr --exec_prefix=/usr --bindir=/usr/sbin
--sbindir=/usr/sbin --libexecdir=/usr/lib/squid --sysconfdir=/etc/squid
--localstatedir=/var/spool/squid --datadir=/usr/share/squid
--enable-async-io --with-pthreads --enable-storeio=ufs,aufs,diskd,null
--enable-linux-netfilter --enable-arp-acl
--enable-removal-policies=lru,heap --enable-snmp --enable-delay-pools
--enable-htcp --enable-poll --enable-cache-digests --enable-underscores
--enable-referer-log --enable-useragent-log
--enable-auth=basic,digest,ntlm --enable-carp --enable-large-files
i386-debian-linux

and

SquidGuard: 1.2.0 Sleepycat Software: Berkeley DB 4.1.25: (January 8, 2005)

Greetings, Ingo.

-- 
Ingo Neis
Leiter Network Coordination Centre (NCC)
Abteilung IT 
eurodata GmbH & Co. KG

Received on Wed Mar 16 2005 - 06:00:42 MST

This archive was generated by hypermail pre-2.1.9 : Fri Apr 01 2005 - 12:00:02 MST