> > > > > Elsen Marc wrote: > > > Whether or not this proxying is fully HTTP compliant can > for instance > > be verified by checking squid's access log for request(s) coming > > from this 'source'. > > Also check squid's cache.log for further info and or errors. > > This is what I get in access.log: > > 1084802777.627 6 10.167.211.11 TCP_DENIED/403 1353 CONNECT > login.oscar.aol.com:5190 - NONE/- text/html > > 1084803020.025 2 10.167.211.11 TCP_DENIED/403 1357 CONNECT > messenger.hotmail.com:1863 - NONE/- text/html > > > Nothing to mention in cache.log. > > What else? > You get TCP_DENIED errors because the ports used, in this case 5190 and 1863 are not listed in your SSL_ports acl.
Allowing SQUID's CONNECT , for such applications has be done with care. Avoid proxy abuse and or or 'unwanted' proxy behavior towards the outside world. M.
