Henrik Nordström <henrik@xxxxxxxxxxxxxxxxxxx> escribió:
mån 2010-03-01 klockan 17:29 -0500 skrev Michel Bulgado:
I'm trying to implement squid with squidGuard 1.4 black lists
management. but it happens that when I log login.yahoo.com great site as
it returns me an error code 404 that the page not found. only happens to
me with ssl pages.
Blocking/filtering SSL pages with SquidGuard do not work very well. You
need to use Squid acls for that, or wrap up SquidGuard as an external
acl instead of url rewriter..
The reason is that
a) Most browsers will not accept a browser redirect in response to
CONNECT.
b) You can't rewrite a CONNECT request into a http:// requrest.
c) Most browsers will be quite upset if you rewrite the CONNECT to a
different host than requested.
meaning that there is not much you actually can do with CONNECT requests
in SquidGuard that won't make browsers upset.
Regards
Henrik
Hello Henrik
Thanks for answering so quickly. this that tells me not to use
squidGuard as a url rewriter acl but as a few examples showing how to
do it?
So I have almost no alternatives to find another option to work with
than blacklisting squidguard which supports ssl connections.
What most strikes me is that it works if in squiguard specific IP
addresses that have access to pages with Webmail access using https
here to login instead of using user name.
----------------------------------------------
Webmail, servicio de correo electronico
Casa de las Americas - La Habana, Cuba.
