> WIth 307 they are supposed to repeat the CONNECT to the new address. > Which can be a problem when you are changing protocols. > > 303 is probably your best bet for CONNECT. Many of the browsers > simply > reject anything other than successful tunnel opening. But at least > 303 > specifies that a GET should be used when the redirect is followed. If > you luck out and the client has a browser which does follow the > redirect > (one or two used to, not sure if any do now) it has a chance of > working. > Just a chance, most still will throw up their "friendly" alternative > annoyance. > > Amos > Great thanks, I have something new now with firefox there is message about dns http://https//test.toto.com Name Error: The domain name does not exist. Maybe a problem with my rule ? acl toto dstdomain .toto.com http_access deny toto deny_info 303:https://www.google.fr toto Although there is "Location: https://www.google.fr\r\n" in the header