Re: [squid-users] got error page type ERR_READ_ERROR, when a dnslabel can not be resolved

2022-10-10 Thread Dieter Bloms
Hello Alex,

thank you for the quick answer!

On Mon, Oct 10, Alex Rousskov wrote:

> On 10/10/22 04:05, Dieter Bloms wrote:
> 
> > since squid 5.7 I get the error page of type ERR_READ_ERROR, when a dns
> > label can not be resolved (for example https://dnslabeldoesnotexist.com/).
> > I expect the error page of type ERR_DNS_FAIL instead of ERR_READ_ERROR.
> > 
> > Can somebody confirm this behavior ?
> 
> I cannot quickly confirm or deny that specific behavior in v5, but I
> recently spotted[1] bugs/deficiencies in error relaying master/v6-based code
> that result in ERR_READ_ERROR instead of ERR_DNS_FAIL or, at the very least,
> ERR_CANNOT_FORWARD. Sounds like v5 needs similar fixes.
> 
> Do you use SslBump to handle that HTTPS site?

yes, sslbump is enabled on our proxy server.

-- 
regards

  Dieter

--
I do not get viruses because I do not use MS software.
If you use Outlook then please do not put my email address in your
address-book so that WHEN you get a virus it won't use my address in the
>From field.
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


Re: [squid-users] got error page type ERR_READ_ERROR, when a dnslabel can not be resolved

2022-10-10 Thread Alex Rousskov

On 10/10/22 04:05, Dieter Bloms wrote:


since squid 5.7 I get the error page of type ERR_READ_ERROR, when a dns
label can not be resolved (for example https://dnslabeldoesnotexist.com/).
I expect the error page of type ERR_DNS_FAIL instead of ERR_READ_ERROR.

Can somebody confirm this behavior ?


I cannot quickly confirm or deny that specific behavior in v5, but I 
recently spotted[1] bugs/deficiencies in error relaying master/v6-based 
code that result in ERR_READ_ERROR instead of ERR_DNS_FAIL or, at the 
very least, ERR_CANNOT_FORWARD. Sounds like v5 needs similar fixes.


Do you use SslBump to handle that HTTPS site?

Alex.

[1]: 
https://github.com/measurement-factory/squid/blob/0d3687c69cf7c69c59c101fc125615d5e10a1dc7/src/FwdState.cc#L279-283



___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


[squid-users] got error page type ERR_READ_ERROR, when a dnslabel can not be resolved

2022-10-10 Thread Dieter Bloms
Hello,

since squid 5.7 I get the error page of type ERR_READ_ERROR, when a dns
label can not be resolved (for example https://dnslabeldoesnotexist.com/).
I expect the error page of type ERR_DNS_FAIL instead of ERR_READ_ERROR.

Can somebody confirm this behavior ?

-- 
Regards

  Dieter Bloms

--
I do not get viruses because I do not use MS software.
If you use Outlook then please do not put my email address in your
address-book so that WHEN you get a virus it won't use my address in the
>From field.
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users