On 3/12/2013 5:17 a.m., Steve Hill wrote: > > I'm using an ICAP reqmod service to change the URI of certain requests > (including the host name). When running under a non-transparent proxy > this works fine. However, when using TPROXY, Squid uses the original > destination IP address of the connection rather than the Host header to > determine where to connect to, so modifying the request doesn't cause > Squid to actually connect to a different host. > > Is there any way to force Squid to connect to the host in the rewritten > request, rather than continuing to connect to the original IP address? > > I'm aware of the "client_dst_passthru off" option, which sounds like it > would almost do what I want, except the manual says that this option > gets forced back on for requests that fail host verification. > Does the patch from http://bugs.squid-cache.org/show_bug.cgi?id=3589 fix this for you? Amos