<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>
<div>
<div>Hi,</div>
</div>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div>
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>
<div id="">
<div apple-content-edited="true" class="" style="color: rgb(0, 0, 0); font-family: Calibri; font-size: 14px;">
<span class="Apple-style-span" style="font-family: Arial, sans-serif; font-size: x-large;">
<div class="" style="margin: 0cm 0cm 0.0001pt; font-size: 14px; font-family: 'Times New Roman', serif;">
<br>
</div>
<div class="" style="margin: 0cm 0cm 0.0001pt; font-size: 14px; font-family: 'Times New Roman', serif;">
When evaluating Squid 4 recently, I came across an issue (actually it’s an old issue that’s been posted about before) where if you are performing transparent proxy (IPtables or other) and a none-http based protocol appears on the relevant port (80/443) squid
will log error:invalid-request and the connection fails.</div>
<div class="" style="margin: 0cm 0cm 0.0001pt; font-size: 14px; font-family: 'Times New Roman', serif;">
<br>
</div>
<div class="" style="margin: 0cm 0cm 0.0001pt; font-size: 14px; font-family: 'Times New Roman', serif;">
Is there any scope for inspecting the received request and if it’s not HTTP simply passing it through a TCP session to the destination server? Specifically this has been an issue for SSL connections where they use SSL/TLS on Port 443 but the decrypted protocol
isn’t actually HTTP – intercepting these sessions will fail even if the SSL part worked correctly.</div>
<div class="" style="margin: 0cm 0cm 0.0001pt; font-size: 14px; font-family: 'Times New Roman', serif;">
<br>
</div>
<div class="" style="margin: 0cm 0cm 0.0001pt; font-size: 14px; font-family: 'Times New Roman', serif;">
<br>
</div>
</span></div>
<div><span class="Apple-style-span" style="orphans: 2; widows: 2;"><font face="Arial,sans-serif"><span style="font-size: 13px;">Even if the above isn’t possible, it’s quite hard to debug as the %<A / %<a log parameters doesn’t seem to be populated when squid
logs error:invalid-request – surely this is possible since we should at least have basic TCP information about the session?</span></font></span></div>
</div>
</div>
</div>
</div>
</span>
</body>
</html>