[OOPS] =?koi8-r?B?UmVbMl06IFtPT1BTXSDLwcsg08TFzMHU2D8oMik=?=

[Peter S. Voronov]

Hello Konstantin,

 25 ������ 2002 �., you wrote:

KNB> On Thu Jan 24, 2002 at 08:31:12PM +0200, Peter S. Voronov wrote:
>> ������ ����.
>> 
>> ��� ������ ������:
>> 
>> ����� �� �������������� https ������� �� ������
>> ������ ��� ��� ?   (� ������� oops)

KNB> ��������.
KNB> acl     SSL         port            443

KNB> peer           zzz  3128 0 {
KNB>                parent ;
KNB>                peer_access SSL ;
KNB>                down_timeout    20 ;
KNB> }

�?
������ �� ������ :-(.
� ������ � ��� ����
Tue Feb  5 17:08:09 2002  [0x2802]check_headers(): ---> `User-Agent: Mozilla/5.0 
(Windows 98; U) Opera 6.0  [ru]'
Tue Feb  5 17:08:09 2002  [0x2802]check_headers(): ---> `Host:some.host.ru'
Tue Feb  5 17:08:09 2002  [0x2802]check_headers(): ---> `Proxy-Connection: close'
Tue Feb  5 17:08:09 2002  [0x2802]check_headers(): ---> `Connection: close'
Tue Feb  5 17:08:09 2002  [0x2802]deny_http_access(): Connect from 10.16.19.225 - 
group [admin] allowed.
Tue Feb  5 17:08:09 2002  [0x2802]redir(): redir called.
Tue Feb  5 17:08:09 2002  [0x2802]send_ssl(): Connecting some.host.ru:443
Tue Feb  5 17:08:09 2002  [0x2802]send_ssl(): Connecting some.host.ru:443

�������� � run_client.c
�����
    if ( request.meth == METH_CONNECT ) {
        if ( miss_denied ) {
            say_bad_request(so, "Please contact cachemaster\n", "Proxy access 
denied.\n",
                ERR_ACC_DENIED, &request);
            goto done;
        }
        /* make ssl connect     */
        send_ssl(so, &request);
        goto done;
    }

� ��������
    if ( parent_port ) {
        server_so = parent_connect_silent(so, parent_host, parent_port, rq);
    } else {
        server_so = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP);
    }
�.�. ��� ������� �� parent_port ���� ��� �� �������  - ����� ��������.
� ������� ���� ��������� ������

peer            proxy-c.my.dom 7777 0 {
                parent;
                peer_access SSL HTTP FTP;
                allow   dstdomain host.ru ;
                deny    dstdomain *
                down_timeout    60;
}

� �������� ���������:
1. http ������� ���� ��������� (� ftp ����)
 �.�. � �� acces.log �  �� oops.log ��� �����.
2. https ������� ���� ��������, �� ��� �� ����� (�����).
 � ���� ����� ���� ����� ������. ������ ����� ����.
 � ������ ����� ����� � ssl.c � ������� ���� ������ - �� ��� ��
 ���������.
������� ���� ���������� ��� ����� �����������.



Best regards,
 Peter S. Voronov                            mailto:[EMAIL PROTECTED]
 Necromancer's Dos Navigator Team

=====================================================================
If you would like to unsubscribe from this list send message to
[EMAIL PROTECTED] with "unsubscribe oops" in message body.
Archive is accessible on http://lists.paco.net/oops-rus/