On Tue, 15 Dec 2009 18:50:04 -0500, Cary Lewis <cary.lewis@xxxxxxxxx> wrote: > Is it possible to redirect ie7 or ie8 https connect requests to an > error page. It's trivial with http requests, but with ie8 I get a > "cannot display webpage error". Can I set up an acl rule that will > enable an error page to be configured? > > Thanks for any help. There is a class of security attacks which are based on remote error pages coming back from HTTPS and other special connections. To protect from those browsers are moving away from displaying certain remote denial pages at all. They will not do a temporary redirection at all for authentication or encryption responses. Best you can do is use ACLs in squid to deny the CONNECT requests and setup a custom local template. That has a slim but non-zero chance of being seen by the user. Amos
