On Wed, 20 Nov 2002 [EMAIL PROTECTED] wrote:

> G'day all...
>
> Just wanting to check something...
>
> When I manually set my browser to proxy via our squid cache, and I type in
> a mangled web address into my browser, I get a squid error message back.
>
> However, when I'm using transparent proxying via nat using iptables, and I
> type in a bogus web address into my browser, I get a browser  error
> message back.
>
> Actual web addresses appear in /var/log/squid/access.log and
> /var/log/squid/store.log but requests for the bogus ones do not.
>
> Is this normal behaviour? Is there a way to adjust this?

Sounds pretty normal.  Given a proxied mangled address, the browser is
successful in reaching the proxy and simply relays the message the proxy
sends.  You can probably mess with the error message the proxy sends, but
it's not going to hide the proxy - the tcp connection to the proxy is
successfully established, even if the browser thinks its talking directly
to the web server.  It's not till after the tcp handshake is complete that
the proxy can discover that the URL is no good.

If the proxying is transparent, then DNS errors will be caught by the
browser before the TCP connection is established, so that will give you a
browser error.  If there's no answer from the server though, this will be
discovered by the proxy after it has caught the connection from the
browser, so that error will be generated by the proxy.

Andrew

------------------------------------------------------------------
Andrew McNaughton                   In Sydney and looking for work
[EMAIL PROTECTED]          http://staff.scoop.co.nz/andrew/cv.doc
Mobile: +61 422 753 792



-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Reply via email to