Search squid archive

Re: Access-Control-* headers missing when going through squid

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Thanks Amos.

As far as I can tell the only device upstream of the proxy is a relatively basic gateway/firewall. I doubt it's capable of messing with HTTP headers (and loading the site directly, as opposed to using the proxy lets it load fine behind the same gateway).

I’ve attached the debug output you suggested. Looks like the headers in the browser are the same as what arriving and leaving the proxy?

----------
2017/04/20 11:49:47.815 kid1| ctx: enter level  0: 'http://services.pressreader.com/se2skyservices/social/profiles/current/?accessToken=J5n-snnkwqI60m715mVRMm2ghwgrUBXQBhYBWaSyacJzjKCg5qy6LYJoZnGpRsF4r5qrvwLIp64A5xQWGN5-Aw!!&useContentProxy=true'
2017/04/20 11:49:47.815 kid1| 11,2| http.cc(727) processReplyHeader: HTTP Server local=172.16.0.250:55706 remote=104.45.159.17:80 FD 469 flags=1
2017/04/20 11:49:47.815 kid1| 11,2| http.cc(728) processReplyHeader: HTTP Server REPLY:
---------
HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Length: 237
Content-Type: application/json; charset=utf-8
Content-Encoding: gzip
Expires: -1
Server: Microsoft-IIS/10.0
Date: Thu, 20 Apr 2017 01:49:47 GMT

^_<8B>^H
----------
2017/04/20 11:49:47.815 kid1| ctx: exit level  0
2017/04/20 11:49:47.815 kid1| 11,2| client_side.cc(1393) sendStartOfMessage: HTTP Client local=172.16.0.250:8080 remote=172.16.0.84:45721 FD 1797 flags=1
2017/04/20 11:49:47.815 kid1| 11,2| client_side.cc(1394) sendStartOfMessage: HTTP Client REPLY:
---------
HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Length: 237
Content-Type: application/json; charset=utf-8
Content-Encoding: gzip
Expires: -1
Server: Microsoft-IIS/10.0
Date: Thu, 20 Apr 2017 01:49:47 GMT
X-Cache: MISS from livestream.sccs.com.au
X-Cache-Lookup: MISS from livestream.sccs.com.au:8080
Via: 1.1 livestream.sccs.com.au (squid/3.5.22)
Connection: keep-alive
----------
2017/04/20 11:55:02.529 kid1| ctx: enter level  0: 'http://services.pressreader.com/se2skyservices/social/profiles/current/?accessToken=ac-G5GPzpw47p5SU2jJO-kat-eV7P_Jwr8ErpYqSElZi6dekseTXwv8xjCwVl9dj_lbyyFxD-XEMTQSlajf_aQ!!&useContentProxy=true'
2017/04/20 11:55:02.529 kid1| 11,2| http.cc(735) processReplyHeader: HTTP Server local=10.0.1.15:53762 remote=104.45.159.17:80 FD 60 flags=1
2017/04/20 11:55:02.529 kid1| 11,2| http.cc(736) processReplyHeader: HTTP Server REPLY:
---------
HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Length: 237
Content-Type: application/json; charset=utf-8
Content-Encoding: gzip
Expires: -1
Server: Microsoft-IIS/10.0
Access-Control-Expose-Headers: ndstate,X-PD-AProfile,X-PD-Profile,X-PD-Ticket,X-PD-Auth,X-PD-PAuth,X-PD-Token
ndstate: {"Sponsor":null,"Catalog":{"Hash":"0ubiHCQUm5xIzgzlKW9Gbw=="},"Ts":636282501023081355}
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://sheppartonnews.pressreader.com
ws: 5
svc: 5
ws: azure
Date: Thu, 20 Apr 2017 01:55:02 GMT

^_<8B>^H
----------
2017/04/20 11:55:02.539 kid1| ctx: exit level  0
2017/04/20 11:55:02.539 kid1| 11,2| client_side.cc(1408) sendStartOfMessage: HTTP Client local=10.0.1.15:3128 remote=10.0.1.66:53293 FD 25 flags=1
2017/04/20 11:55:02.539 kid1| 11,2| client_side.cc(1409) sendStartOfMessage: HTTP Client REPLY:
---------
HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Length: 237
Content-Type: application/json; charset=utf-8
Content-Encoding: gzip
Expires: -1
Server: Microsoft-IIS/10.0
Access-Control-Expose-Headers: ndstate,X-PD-AProfile,X-PD-Profile,X-PD-Ticket,X-PD-Auth,X-PD-PAuth,X-PD-Token
ndstate: {"Sponsor":null,"Catalog":{"Hash":"0ubiHCQUm5xIzgzlKW9Gbw=="},"Ts":636282501023081355}
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://sheppartonnews.pressreader.com
ws: 5
svc: 5
ws: azure
Date: Thu, 20 Apr 2017 01:55:02 GMT
X-Cache: MISS from 10.0.1.15
X-Cache-Lookup: MISS from 10.0.1.15:3128
Via: 1.1 10.0.1.15 (squid/3.5.25)
Connection: keep-alive

Best,
Dan

On 19 Apr 2017, at 2:41 pm, Amos Jeffries <squid3@xxxxxxxxxxxxx> wrote:

Squid does not touch these headers itself unless you configure it to. So something there is altering them. It may be external MITM stuff, or Squid coping with broken input.

Try adding "debug_options 11,2" to see what is actually arriving and leaving that proxy.


Amos

_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux