[squid-users] ext_session_acl active mode

Hi.

According to this page:

http://wiki.squid-cache.org/ConfigExamples/Portal/Splash

Active Mode is supposed to prevent random software like anti-viruses
from resetting the session when using ext_session_acl. Is this only
true for software that uses TCP port 80, but NOT HTTP? I have
configured active mode, and it works, but if my anti-virus checks
online for updates (which it does all the time), the session gets
reset and the browser never shows the splash page. The antivirus
appears to use HTTP, since the log file shows this:

TCP_DENIED/302 354 GET
http://download353.avast.com/iavs5x/prod-ais.vpx - HIER_NONE/-
text/html

Which also indicates that it's what received the splash page. Is this
expected behaviour? Is there a way to make sure that only a browser
can reset the session and ignore other software that may use the HTTP
protocol?

Tal
Received on Sat Jul 14 2012 - 07:08:38 MDT