Re: [squid-users] cache_peer

From: Chris Robertson <crobertson@dont-contact.us>
Date: Fri, 10 Aug 2007 14:18:00 -0800

m.kuzulugil@superonline.com wrote:
> Hello,
> I want to set up a squid server on machine A(P).
> This Machine A(P) is behind a firewall and it has an access to a corporate
> proxy B(P).
> B(P) has some access control lists. And A(P) is allowed to use the B(P).
> When a browser is run on A(P) to connect to any web site using the proxy
> B(P) it is ok.
>
> So a machine C is not allowed for B(P).
> Running a browser on C Using A(P) as a proxy results
> Access Denied (403) which comes from B(P)...
>
> I want to use B(P) as a parent proxy for A(P). But A(P) shows the client C
> as the request owner to B(P). So B(P) refuses.
>
> Any help.
>
> My current configuration includes - on A(P) squid.conf
> cache_peer B(P) parent 8080 0
> ...
> forwarded_for off
>
> --------------------------------------------------------------------
> mail2web LIVE – Free email based on Microsoft® Exchange technology -
> http://link.mail2web.com/LIVE
>

Likely you'll need to kill the "Via" header as well. Try...

header_access Via deny all
header_access X-Forwarded-For deny all

...and see if that helps.

Chris
Received on Fri Aug 10 2007 - 16:18:11 MDT

This archive was generated by hypermail pre-2.1.9 : Sat Sep 01 2007 - 12:00:03 MDT