Re: [squid-users] Deny Direct Proxy request !

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Fri, 16 Mar 2001 18:32:12 +0100

You may use httpd_accel_with_proxy off, but it might break HTTP/1.2 or
later clients...

Why do you want to prevent users from configuring the proxy settings?

Technically setting the proxy settings is "the correct thing to do", as
any transparent redirection of traffic is a quite big violation of basic
TCP/IP standards. And there are a number of applications that does not
work very well in transparent proxy setups.. (as well of the opposite..)

--
Henrik Nordstrom
Squid hacker
Hamid Hashemi Golpayegani wrote:
> 
> so what can I do then ?!
> 
> --
> Regards
> 
>     ============================================================
>    /  Seyyed Hamid Reza    /        WINDOWS FOR NOW  !!            /
>   /  Hashemi Golpayegani  /  Linux for future , FreeBSD for ever  /
>  /    Morva System Co.   / ------------------------------------- /
> /  Network Administrator/ hamid@morva.net   ,   ICQ# : 42209876 /
> ===========================================================
> 
> 
> -----Original Message-----
> From: hno@hem.passagen.se [mailto:hno@hem.passagen.se]
> Sent: Friday, March 16, 2001 2:17 AM
> To: Joe Cooper
> Cc: Squid Users
> Subject: Re: [squid-users] Deny Direct Proxy request !
> 
> Joe Cooper wrote:
> >
> > Turn off httpd_accel_with_proxy.
> 
> Except that HTTP/1.1 REQUIRES it, as servers MUST accept requests using
> a absolute URI....
> 
> RFC 2616 section 5.1.2
> 
> Note: When running as a "transparent proxy" the "proxy" technically acts
> on behalf of the origin server, not the client as in a normal proxy
> configuration...
> 
> --
> Henrik Nordstrom
> Squid Hacker
Received on Fri Mar 16 2001 - 10:31:11 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:58:41 MST