Re: [squid-users] Yahoo Messenger and MSN not working in squid

From: Squid Support (Henrik Nordstrom) <hno@dont-contact.us>
Date: Thu, 23 May 2002 15:40:02 +0200

You mean that many chat clients support gross abuse of a "HTTP Proxy" to
proxy their non-HTTP protocol.

CONNECT is a very dangerous method HTTP proxy method. You should not lift the
access controls on this method lightly. If you need a more generic proxy then
consider installing a SOCKS proxy (most such clients also supports SOCKS).
Abusing a HTTP proxy in this manner is not by far a correct approach, even if
it appears to get the job done..

Regards
Henrik

Bryan Ragon wrote:
> I don't know the answer to the original question (Missed it when it went
> through), but why is it whenever someone asks about a chat client and why
> it doesn't work through squid, the canned answer is always "Squid is a HTTP
> only proxy." Yes, we know that. But are you forgetting that almost every
> chat client out there supports HTTP proxies? In that case as long as your
> squid.conf allows the correct connection methods to the correct ports/IP's,
> the client should work. I.e. I asked why I couldn't get aim working across
> my squid several months back. I recenlty discovered myself that it was
> because I needed to allow the CONNECT method to a particular port on a
> particular server (one of the oscar login servers), and viola, Squid
> allowed my aim chat client to work.
>
> A more helpful answer would be:
> "Squid only supports http requests, so you need to be certain that your
> chat client supports using a http proxy and that it is configured to
> connect to your squid server at the right server and port."
>
> From there you could add:
> "To allow connecting to XXX service (aol,msn,yahoo) you need to create
> these ACL's that allow connections to these servers"
>
> or
> "Then check your squid logs to see what type of connections are being
> requested when you start up your client and where they are going to, then
> create the acl's to allow them."
>
>
> I don't mean this email to sound confrontational, I've just noticed many
> times on this list people with questions about chat clients get rather
> short and curt replies that don't help the questioner or give them advice
> on what to do next.
>
> Bryan
>
> -----Original Message-----
> From: Marc Elsen [mailto:marc.elsen@imec.be]
> Sent: Wednesday, May 22, 2002 8:18 AM
> To: vinay thul
> Cc: squid-users@squid-cache.org
> Subject: Re: [squid-users] Yahoo Messenger and MSN not working in squid
>
> vinay thul wrote:
> > I have configured the squid on linux 7.0 and it is
> > working fine for the browsing the internet.
> > But in this configuration Yahoo Messenger and MSN
> > messenger programs are not working.
>
> Note that SQUID is a http proxy only.
>
> M.

-- 
Basic free Squid support provided thanks to MARA Systems AB
Your source of advanced reverse proxy solutions or customized
Squid solutions. http://www.marasystems.com/products/
Received on Thu May 23 2002 - 07:40:12 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:08:12 MST