[squid-users] Problems with Custom Error Pages

From: Puschmann, Sven <Sven.Puschmann_at_haevg-rz.de>
Date: Fri, 31 Jan 2014 12:52:59 +0000

Hi There,

i have a big Problem, I'm Configuring an Squid Proxy for our Company and want to Show Custom Errors.

The Proxy Uses ActiveDirectory Authentication with Groupbased Policies.

Now I want to Show Errorpages in our Corporate Identity.

Here's my Config (I need use <!Full all> in the http_access Rule to prevent showing Reauthentication Windows):
http_access allow prioritysites

http_access deny !Safe_ports !ftp
http_access deny CONNECT !SSL_ports !ftp
http_access allow CONNECT SSL_ports ftp

deny_info ERR_DENIED_AUTH !auth
http_access deny !auth
http_access allow allowedsites
deny_info ERR_DENIED_BLOCKED Blocked
http_access deny Blocked
deny_info ERR_DENIED_URLBS blockedsites !Full all
http_access deny blockedsites !Full all
deny_info ERR_DENIED_BADKEY bad_keywords !Full all
http_access deny bad_keywords !Full all
deny_info ERR_DENIED_URLBL urlblacklist !Full all
http_access deny !urlblacklist !Full all
http_access allow Standard
http_access allow Full
deny_info ERR_DENIED_SONST all
http_access deny all

The Problem is, that my Squid always shows the Blocked Sites Error Page, even when the Bad-Keyword ACL acts.

The SQUID Log Says:
2014/01/31 13:03:55.039| ACLList::matches: checking !auth
2014/01/31 13:03:55.039| ACL::checklistMatches: checking 'auth'
2014/01/31 13:03:55.039| ACL::ChecklistMatches: result for 'auth' is 1
2014/01/31 13:03:55.039| aclmatchAclList: 0x7f5ca60da8a8 returning false (AND list entry failed to match)
2014/01/31 13:03:55.039| aclmatchAclList: async=0 nodeMatched=0 async_in_progress=0 lastACLResult() = 0 finished() = 0
2014/01/31 13:03:55.039| ACLChecklist::preCheck: 0x7f5ca60da8a8 checking 'http_access allow allowedsites'
2014/01/31 13:03:55.039| ACLList::matches: checking allowedsites
2014/01/31 13:03:55.039| ACL::checklistMatches: checking 'allowedsites'
2014/01/31 13:03:55.039| aclMatchDomainList: checking 'pornhub.com'
2014/01/31 13:03:55.039| aclMatchDomainList: 'pornhub.com' NOT found
2014/01/31 13:03:55.039| ACL::ChecklistMatches: result for 'allowedsites' is 0
2014/01/31 13:03:55.039| aclmatchAclList: 0x7f5ca60da8a8 returning false (AND list entry failed to match)
2014/01/31 13:03:55.039| aclmatchAclList: async=0 nodeMatched=0 async_in_progress=0 lastACLResult() = 0 finished() = 0
2014/01/31 13:03:55.039| ACLChecklist::preCheck: 0x7f5ca60da8a8 checking 'http_access deny Blocked'
2014/01/31 13:03:55.039| ACLList::matches: checking Blocked
2014/01/31 13:03:55.039| ACL::checklistMatches: checking 'Blocked'
2014/01/31 13:03:55.039| ACL::ChecklistMatches: result for 'Blocked' is 0
2014/01/31 13:03:55.039| aclmatchAclList: 0x7f5ca60da8a8 returning false (AND list entry failed to match)
2014/01/31 13:03:55.039| aclmatchAclList: async=0 nodeMatched=0 async_in_progress=0 lastACLResult() = 0 finished() = 0
2014/01/31 13:03:55.039| ACLChecklist::preCheck: 0x7f5ca60da8a8 checking 'http_access deny blockedsites !Full all'
2014/01/31 13:03:55.039| ACLList::matches: checking blockedsites
2014/01/31 13:03:55.039| ACL::checklistMatches: checking 'blockedsites'
2014/01/31 13:03:55.040| aclMatchDomainList: checking 'pornhub.com'
2014/01/31 13:03:55.040| aclMatchDomainList: 'pornhub.com' NOT found
2014/01/31 13:03:55.040| ACL::ChecklistMatches: result for 'blockedsites' is 0
2014/01/31 13:03:55.040| aclmatchAclList: 0x7f5ca60da8a8 returning false (AND list entry failed to match)
2014/01/31 13:03:55.040| aclmatchAclList: async=0 nodeMatched=0 async_in_progress=0 lastACLResult() = 0 finished() = 0
2014/01/31 13:03:55.040| ACLChecklist::preCheck: 0x7f5ca60da8a8 checking 'http_access deny bad_keywords !Full all'
2014/01/31 13:03:55.040| ACLList::matches: checking bad_keywords
2014/01/31 13:03:55.040| ACL::checklistMatches: checking 'bad_keywords'
2014/01/31 13:03:55.040| aclRegexData::match: checking 'http://pornhub.com/favicon.ico'
2014/01/31 13:03:55.040| aclRegexData::match: looking for 'porn'
2014/01/31 13:03:55.040| aclRegexData::match: match 'porn' found in 'http://pornhub.com/favicon.ico'
2014/01/31 13:03:55.040| ACL::ChecklistMatches: result for 'bad_keywords' is 1

I hope anyone can help me with my issue.

Greetings from Cologne
Sven
Received on Fri Jan 31 2014 - 12:53:17 MST

This archive was generated by hypermail 2.2.0 : Fri Jan 31 2014 - 12:00:09 MST