Re: [squid-users] deny_info page not shown

2020-09-04 Thread Matus UHLAR - fantomas
Amos Jeffries wrote: CONNECT is a request to open a TCP connection. Delivering an HTTP page, or even a URL redirect in response to a TCP connection request is completely the wrong type of result. Like asking someone to open a door because you have a load of things needing to go through it -

Re: [squid-users] deny_info page not shown

2020-08-28 Thread Alex Rousskov
>> Amos Jeffries wrote: >>> CONNECT is a request to open a TCP connection. Delivering an HTTP >>> page, or even a URL redirect in response to a TCP connection request >>> is completely the wrong type of result. >>> Like asking someone to open a door because you have a load of things >>> needing

Re: [squid-users] deny_info page not shown

2020-08-28 Thread Janos Dohanics
On Fri, 28 Aug 2020 22:58:00 +1200 Amos Jeffries wrote: > On 28/08/20 8:49 pm, Janos Dohanics wrote: > > > > Thanks - would you have an example of using deny_info http://... acl > > which actually works? > > > > Any HTTP request message where 302 is a valid response status code > will work.

Re: [squid-users] deny_info page not shown

2020-08-28 Thread Amos Jeffries
On 28/08/20 8:49 pm, Janos Dohanics wrote: > > Thanks - would you have an example of using deny_info http://... acl > which actually works? > Any HTTP request message where 302 is a valid response status code will work. Your configuration does that. The problem is that Browsers only accept 20x

Re: [squid-users] deny_info page not shown

2020-08-28 Thread Janos Dohanics
On Fri, 28 Aug 2020 10:31:41 +0200 Matus UHLAR - fantomas wrote: > >> On 28/08/20 6:22 pm, Janos Dohanics wrote: > >> > Is there a way to have deny_info instruct browsers to reliably > >> > display the desired URL/page? > > >On Fri, 28 Aug 2020 18:59:56 +1200 > >Amos Jeffries wrote: > >> No

Re: [squid-users] deny_info page not shown

2020-08-28 Thread Matus UHLAR - fantomas
On 28/08/20 6:22 pm, Janos Dohanics wrote: > Is there a way to have deny_info instruct browsers to reliably > display the desired URL/page? On Fri, 28 Aug 2020 18:59:56 +1200 Amos Jeffries wrote: No there is not. This is a security feature of Browsers not something Squid can workaround.

Re: [squid-users] deny_info page not shown

2020-08-28 Thread Janos Dohanics
On Fri, 28 Aug 2020 18:59:56 +1200 Amos Jeffries wrote: > On 28/08/20 6:22 pm, Janos Dohanics wrote: > > > > Is there a way to have deny_info instruct browsers to reliably > > display the desired URL/page? > > No there is not. This is a security feature of Browsers not something > Squid can

Re: [squid-users] deny_info page not shown

2020-08-28 Thread Amos Jeffries
On 28/08/20 6:22 pm, Janos Dohanics wrote: > > Is there a way to have deny_info instruct browsers to reliably display > the desired URL/page? No there is not. This is a security feature of Browsers not something Squid can workaround. CONNECT is a request to open a TCP connection. Delivering an

Re: [squid-users] deny_info page not shown

2020-08-28 Thread Janos Dohanics
On Fri, 28 Aug 2020 17:08:01 +1200 Amos Jeffries wrote: > [...] Amos, thank you for the quick reply. > > deny_info http://google.com custom > > Asks Squid to perform a URL-redirect to http://google.com instead of > delivering error pages when ACL "deny custom" happens. > > > >

Re: [squid-users] deny_info page not shown

2020-08-27 Thread Amos Jeffries
On 28/08/20 4:08 pm, Janos Dohanics wrote: > Hello, > > In my config file I have: > > deny_info http://google.com custom > > However, Firefox shows the error page "Unable to connect". > When? To what type of URL? > > acl custom dstdom_regex >

[squid-users] deny_info page not shown

2020-08-27 Thread Janos Dohanics
Hello, In my config file I have: deny_info http://google.com custom However, Firefox shows the error page "Unable to connect". Here is the full config file: acl SSL_ports port 443 4433 8443 acl CONNECT method CONNECT http_access deny !Safe_ports http_access deny CONNECT !SSL_ports