On Tue, May 12, 2009 at 17:09, Chris Robertson <crobertson@xxxxxxx> wrote: > Kurt Buff wrote: >> >> All, >> >> My user population is having frequent problems fetching PDFs through >> our squid proxy, and I think I've narrowed down the issue, though I'm >> not 100% certain of it. >> >> I see two deny messages from our Sidewinder firewall, that are >> associated with the URLs regarding request headers for the PDFs: >> >> "Request denied with request header Unless-Modified-Since." >> >> and >> >> "Request denied with request header Translate." >> >> Is there a way to cause squid to ignore these request headers from the >> browsers, > > http://www.squid-cache.org/Doc/config/header_access/ > >> or to replace them with something benign? > > http://www.squid-cache.org/Doc/config/header_replace/ > >> Is it reasonable >> to do so, or will that just cause further issues? >> > > There, I can't help. I'd suggest contacting support for the Firewall, and > get the problem solved (or at least identified) there. > >> Any help and thoughts appreciated. >> >> Kurt >> > > > Chris Unfortunately, adding the two directives: header_access Unless-Modified-Since deny all header_access Translate deny all Generates the following errors at start and stop of squid: 2009/05/13 11:42:57| cache_cf.cc(346) squid.conf:40 unrecognized: 'header_access' 2009/05/13 11:42:57| cache_cf.cc(346) squid.conf:41 unrecognized: 'header_access Under FreeBSD, a 'make config' shows that SQUID_STRICT_HTTP is deselected. From my reading of the make file, this means that the directive --disable-http-violations is not in effect. Will I have to recompile with --enable-http-violations to be able to use these directives? Kurt
