http - squid proxy - howto allow tcp connect - getting TCP_DENIAL/400 with ERR_INVALID_DOMAIN -


i'm having device needs connect internet service on tcp:80 network has no direct internet access. i'm using squid proxy solve this.

the device allows me enter proxyserver, port, username , password.

i figured out, device uses http connect instead of http (which working fine browser).

when device tries connect, gets http error 400. squid access.log gives me this:

1338885433.033      0 172.22.140.129 tcp_denied/400 1728 connect :0 - none/- text/html

so captured packets see whats going on:

request device:

 connect mydomain.com:0 http/1.0 user-agent: sequencer/5.5.0.5539

answer squid:

http/1.0 400 bad request squid/2.7.stable9 x-squid-error: err_invalid_url 0 close

my squid.conf:

 auth_param basic program /usr/lib/squid/pam_auth auth_param basic children 5 auth_param basic realm squid proxy-caching web server auth_param basic credentialsttl 2 hours auth_param basic casesensitive off  acl src acl manager proto cache_object acl localhost src 127.0.0.1/32 acl to_localhost dst 127.0.0.0/8 0.0.0.0/32  acl localnet src 10.0.0.0/8     # rfc1918 possible internal network acl localnet src 172.16.0.0/12  # rfc1918 possible internal network acl localnet src 192.168.0.0/16 # rfc1918 possible internal network  acl ssl_ports port 443          # https acl ssl_ports port 563          # snews acl ssl_ports port 873          # rsync  acl safe_ports port 80          # http acl safe_ports port 21          # ftp acl safe_ports port 443         # https acl safe_ports port 70          # gopher acl safe_ports port 210         # wais acl safe_ports port 1025-65535  # unregistered ports acl safe_ports port 280         # http-mgmt acl safe_ports port 488         # gss-http acl safe_ports port 591         # filemaker acl safe_ports port 777         # multiling http acl safe_ports port 631         # cups acl safe_ports port 873         # rsync acl safe_ports port 901         # swat  acl purge method purge acl connect method connect acl checkpw proxy_auth required  http_access allow manager localhost http_access deny manager http_access allow purge localhost http_access deny purge http_access deny !safe_ports http_access allow connect http_access allow localnet http_access allow localhost http_access allow checkpw http_access deny  icp_access allow localnet icp_access deny  http_port 3128  hierarchy_stoplist cgi-bin ?  access_log /var/log/squid/access.log squid  debug_options all,1 33,2 28,9  refresh_pattern ^ftp:           1440    20%     10080 refresh_pattern ^gopher:        1440    0%      1440 refresh_pattern -i (/cgi-bin/|\?) 0     0%      0 refresh_pattern (release|packages(.gz)*)$       0       20%     2880 refresh_pattern .               0       20%     4320  acl shoutcast rep_header x-http09-first-line ^icy.[0-9]  upgrade_http0.9 deny shoutcast  acl apache rep_header server ^apache  broken_vary_encoding allow apache  extension_methods report merge mkactivity checkout  hosts_file /etc/hosts  forwarded_for off  coredump_dir /var/spool/squid

is there solution rid of err_invalid_url? did missunderstood concept of squid proxy or request device invalid?

please let me know if other information needed.

thank in advance, christian.

i resolved same error commenting out default squid.conf:

# deny connect other secure ssl ports #http_access deny connect !ssl_ports

by default squid set not allow connect non-ssl ports. if want test without ssl can disable commenting out line above.


Comments

Post a Comment

Popular posts from this blog

java - Play! framework 2.0: How to display multiple image? -

i need display gallery of photos. here template: @(photos: list[photo]) @title = { <bold>gallery</bold> } @main(title,"photo"){ <ul class="thumbnails"> @for(photo <- photos) { <li class="span3"> <a href="#" class="thumbnail"> <img src="@photo.path" alt=""> </a> </li> } </ul> } and here controller method: public static result getphotos() { return ok(views.html.photo.gallery.render(photo.get())); } and here photo bean : @entity public class photo extends model { @id public long id; @required public string label; public string path; public photo(string path, string label) { this.path = path; this.label = label; } private static finder<long, photo> find = new finder<long, photo>( long.class, photo.class); public static list<phot...
Read more

gmail - Is there any documentation for read-only access to the Google Contacts API? -

i want read-only access user's google contacts. there stackoverflow member wanted this, , received following answer : yes, there is, use https://www.googleapis.com/auth/contacts.readonly scope , "view contacts". this exchange reference read-only access google contacts can find using google. simply using access token obtained attempt read usual google contacts api (i.e. https://www.google.com/m8/feeds ) fails insufficient permissions. similarly, using google contacts api on new target fails 404 errors (for example https://www.googleapis.com/auth/contacts.readonly/default/full ). is there documentation anywhere on how use api, or permissible way access google contacts api full read-write access?
Read more

php - Controller/JToolBar not working in Joomla 2.5 -

relevant code: jtoolbarhelper::custom('savecategories', 'save', '', 'save', false, false); ... <input type="hidden" name="controller" value="easyblogcontroller"> according can dig docs , own previous questions, should call savecategories() function in easyblogcontroller . i've tried setting value easyblog , easyblog.php (file name) current easyblogcontroller (class name). clicking on save button refreshes page. not redirect, echo or var_dump test code put in savecategories() function. var_dump ing jrequest::getvar('controller') , 'task' return correct values. creating controller object , using $controller->execute('task'); works. the values going depend on location of controller trying call, , have couple options here. typically there controller in base folder of component (likely components/com_easyblog) in file called controller.php , class name inside ...
Read more