Re: [squid-users] Deny Direct Proxy request !

Or better, include a rule to count it as non-local traffic.

--
Henrik Nordstrom
Squid hacker
Hamid Hashemi Golpayegani wrote:
> 
> This cause of my accounting system ! My accounting calculate the KB
> send/receive from the internet through IPChains rules . But this rules is
> not calculate local traffic . So if any one use direct proxy request all of
> his web traffic will be calculate as local traffic . So I don't want to do
> that .
> So is the last way that exist is that I must block this port through
> ipchains in my router ?
> 
> --
> Regards
> 
>     ============================================================
>    /  Seyyed Hamid Reza    /        WINDOWS FOR NOW  !!            /
>   /  Hashemi Golpayegani  /  Linux for future , FreeBSD for ever  /
>  /    Morva System Co.   / ------------------------------------- /
> /  Network Administrator/ hamid@morva.net   ,   ICQ# : 42209876 /
> ===========================================================
> 
> -----Original Message-----
> From: hno@hem.passagen.se [mailto:hno@hem.passagen.se]
> Sent: Friday, March 16, 2001 9:02 PM
> To: Hamid Hashemi Golpayegani
> Cc: Squid Users
> Subject: Re: [squid-users] Deny Direct Proxy request !
> 
> You may use httpd_accel_with_proxy off, but it might break HTTP/1.2 or
> later clients...
> 
> Why do you want to prevent users from configuring the proxy settings?
> 
> Technically setting the proxy settings is "the correct thing to do", as
> any transparent redirection of traffic is a quite big violation of basic
> TCP/IP standards. And there are a number of applications that does not
> work very well in transparent proxy setups.. (as well of the opposite..)
> 
> --
> Henrik Nordstrom
> Squid hacker
> 
> Hamid Hashemi Golpayegani wrote:
> >
> > so what can I do then ?!
> >
> > --
> > Regards
> >
> >     ============================================================
> >    /  Seyyed Hamid Reza    /        WINDOWS FOR NOW  !!            /
> >   /  Hashemi Golpayegani  /  Linux for future , FreeBSD for ever  /
> >  /    Morva System Co.   / ------------------------------------- /
> > /  Network Administrator/ hamid@morva.net   ,   ICQ# : 42209876 /
> > ===========================================================
> >
> >
> > -----Original Message-----
> > From: hno@hem.passagen.se [mailto:hno@hem.passagen.se]
> > Sent: Friday, March 16, 2001 2:17 AM
> > To: Joe Cooper
> > Cc: Squid Users
> > Subject: Re: [squid-users] Deny Direct Proxy request !
> >
> > Joe Cooper wrote:
> > >
> > > Turn off httpd_accel_with_proxy.
> >
> > Except that HTTP/1.1 REQUIRES it, as servers MUST accept requests using
> > a absolute URI....
> >
> > RFC 2616 section 5.1.2
> >
> > Note: When running as a "transparent proxy" the "proxy" technically acts
> > on behalf of the origin server, not the client as in a normal proxy
> > configuration...
> >
> > --
> > Henrik Nordstrom
> > Squid Hacker