Search squid archive

Re: "ACCESS DENIED" page by ssl_bump terminate

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 03/27/2016 11:59 PM, Alexandr Yatskin wrote:
> Directive "deny_info" didn't work when we blocked https site with option
> "ssl_bump".

"deny_info" is not compatible with the ssl_bump "terminate" action. The
"terminate" action means "Close client and server connections". It is
impossible to serve an [error] response on a closed connection.

IIRC, blocking the CONNECT request (fake or real) with http_access is
enough to force Squid to respond with an "access denied" error -- Squid
should automatically bump the client connection (if that is still
possible when the CONNECT request is blocked) to serve an error response.


HTH,

Alex.
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users




[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux