Hallo,

this are my errors while surfing to:

http://www.megaproxy.com:

squidGuard:
127.0.0.1 - - [20/Aug/2002:09:41:57 +0200] "GET
/cgi-bin/blocked.pl?clientaddr=10.96.211.101&url=http://www.megaproxy.com 
&group=suffixuser&user=yf5ws56
HTTP/1.0" 200 458

squid:
1029829550.769    270 10.96.211.101 TCP_MISS/200 654 GET
http://www.megaproxy.com/ - DIRECT/127.0.0.1 text/html

(thats ok, squidGuard is blocking, squid redirects correctly)

surfing to https://www.megaproxy.com:

squidGuard:
127.0.0.1 - - [20/Aug/2002:09:39:13 +0200] "GET/cgi-bin/blocked.pl?clientaddr=
10.96.211.101&url=http://www.megaproxy.com:443/&group=suffixuser&user=yf5ws56 
HTTP/1.0" 200 462

squid:
1029829591.857      6 10.96.211.101 TCP_MISS/000 0 CONNECT
www.megaproxy.com:443 - DIRECT/http -

(thats not ok, squidGuard is blocking, squid redirects to "http")

i tested in /etc/hosts:

127.0.0.1              http

without success. Then i modified the nameserver. Than i get 

         (79) Connection refused

ok, i build up a apache-webserver on port 443 (no SSL) and then there is a security-
problem. A real SSL-server can not solve the problem, or ???


a part of my only 2370 lines long squidGuard.conf:

src  suffixuser
{
userlist /opt/squidGuard/bank/suffixuser/suffixuser
}

dest suffixexpressions
{
  expressionlist /opt/squidGuard/blacklists/suffixexpressions
}

dest blacklistallow
{
  expressionlist /opt/squidGuard/blacklists/blacklistallowexpressions
}

dest blacklist
{
  domainlist     /opt/squidGuard/blacklists/domains 
  urllist        /opt/squidGuard/blacklists/urls
  expressionlist /opt/squidGuard/blacklists/expressions
}

# domains and domains.db includes megaproxy.com

                  #<acl part>

                    suffixuser {
                          pass blacklistallow !blacklist !download suffixexpressions 
none
                          redirect
                  http://127.0.0.1/cgi-bin/blocked.pl?clientaddr=%a&url=%u&group=
                  %s&user=%i

                    }

                  #</acl part>



Greeting from Germany


  Heinz Ahrens





Reply via email to