Want to do:

Browser --SSL--> Squid --SSL--> OWA

Here's my config:

visible_hostname xxxxxxx.algorithmics.com
cache_mgr [EMAIL PROTECTED]

https_port 443 cert=/opt/squid/etc/xxxxx.algorithmics.com.crt 
key=/opt/squid/etc/xxxxx.algorithmics.com.key defa
ultsite=xxxxx.algorithmics.com

cache_peer xxxxx.algorithmics.com parent 443 0 no-query proxy-only ssl 
sslflags=DONT_VERIFY_PEER

acl owa-host dst xx.xxx.x.xx/255.255.255.255
acl all-src src 0.0.0.0/0.0.0.0
acl all-dst dst 0.0.0.0/0.0.0.0

http_access allow owa-host
http_access allow all-src
http_access deny all-dst

Here's a section of my access.log:

1073940203.850   2412 xx.x.xx.xxx TCP_MISS/200 4352 GET 
https://xxxxx.algorithmics.com/exchange/ - FIRST_UP_PARENT/xxxxx.algorithmics.com 
text/html
1073940204.622    847 xx.x.xx.xxx TCP_MISS/501 368 GET 
https://xxxxx.algorithmics.com/WebID/sdiis.dll? - ANY_PARENT/xxxxx.algorithmics.com 
text/html
1073940204.625    842 xx.x.xx.xxx TCP_MISS/501 368 GET 
https://xxxxx.algorithmics.com/WebID/sdiis.dll? - ANY_PARENT/xxxxx.algorithmics.com 
text/html

Why does the initial page work but the sdiis.dll pages don't?

Also not sure how to allow internet access to OWA host but not allow proxy relaying.

Thanks,

Derek

Reply via email to