Re: [squid-users] Question about SquidGuard and blocking pages

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Sat, 24 Jul 2010 16:10:47 +1200

Silamael wrote:
> On 07/22/2010 03:24 PM, Beavis wrote:
>> looks like a config is missing. in my setup i have prepared the
>> internal access-denied page and put a fqdn on use an internal dns zone
>> you have to resolv it. squid does pretty good on filtering, and it
>> includes filter via IP. try to have the page with url resolved to a
>> zone entry you have, and try it again. if not you can always whitelist
>> the url.
>
> Hi Beavis,
>
> sorry, i don't get it. As far as i understand the code, squid seems to
> throw away the original URL and create a complete new request for the
> URL returned by SquidGuard.

Yes. This is why the interface is called URL re-write.
It alters the URL being fetched in-transit to whatever the re-writer
sends back. Squid then fetches that URL from the server in the Host:
header or a cache_peer.

Another catch is that all the other URLs in the headers and body of the
request are NOT re-written, which leads to clashes.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.5
Received on Sat Jul 24 2010 - 04:11:03 MDT

This archive was generated by hypermail 2.2.0 : Sat Jul 24 2010 - 12:00:04 MDT