<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.gmail-pl-k
{mso-style-name:gmail-pl-k;}
span.gmail-pl-en
{mso-style-name:gmail-pl-en;}
span.gmail-pl-c
{mso-style-name:gmail-pl-c;}
span.gmail-pl-smi
{mso-style-name:gmail-pl-smi;}
span.gmail-pl-c1
{mso-style-name:gmail-pl-c1;}
span.gmail-pl-s
{mso-style-name:gmail-pl-s;}
span.gmail-pl-pds
{mso-style-name:gmail-pl-pds;}
span.EmailStyle25
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal>I am not sure if it’s for Squid-dev but anyway to clear out the doubts I would suggest attaching the squid.conf <br>and remember to remove any sensitive data.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Eliezer<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>----<o:p></o:p></p><p class=MsoNormal>Eliezer Croitoru<o:p></o:p></p><p class=MsoNormal>NgTech, Tech Support<o:p></o:p></p><p class=MsoNormal>Mobile: +972-5-28704261<o:p></o:p></p><p class=MsoNormal>Email: <a href="mailto:ngtech1ltd@gmail.com">ngtech1ltd@gmail.com</a><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> squid-dev <squid-dev-bounces@lists.squid-cache.org> <b>On Behalf Of </b>YFone Ling<br><b>Sent:</b> Thursday, March 3, 2022 22:55<br><b>To:</b> squid-dev@lists.squid-cache.org<br><b>Subject:</b> [squid-dev] ERR_CONFLICT_HOST for HTTP CONNECT request on port 80<o:p></o:p></p></div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>My application sends HTTP CONNECT requests to a HTTP proxy port 80, but gets a squid ERR_CONFLICT_HOST error page.<o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Is the following code really working as the comments pointed out "ignore them" since the following if condition is "http->request->method != Http::METHOD_CONNECT"<o:p></o:p></p></div><div><p class=MsoNormal>and the rest has been blocked by error page "repContext->setReplyToError(ERR_CONFLICT_HOST, Http::scConflict,"?<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Does "ignore them" mean block them? <o:p></o:p></p><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 style='background:#0D1117;border-collapse:collapse;border-spacing:0px'><tr style='box-sizing:border-box'><td style='background:transparent;padding:.75pt .75pt .75pt .75pt'></td></tr><tr style='box-sizing:border-box'><td valign=top style='background:transparent;padding:0in 7.5pt 0in 7.5pt;box-sizing:border-box;overflow:visible' id=gmail-LC536><p class=MsoNormal style='line-height:15.0pt'><span class=gmail-pl-k><span style='font-size:9.0pt;font-family:Consolas;color:#C9D1D9'>void</span></span><span style='font-size:9.0pt;font-family:Consolas;color:#C9D1D9'><o:p></o:p></span></p></td></tr><tr style='box-sizing:border-box'><td width=50 nowrap valign=top style='width:37.5pt;padding:0in 7.5pt 0in 7.5pt;box-sizing:border-box;min-width:50px' id=gmail-L537></td><td valign=top style='padding:0in 7.5pt 0in 7.5pt;box-sizing:border-box;overflow:visible' id=gmail-LC537><p class=MsoNormal style='line-height:15.0pt'><span class=gmail-pl-en><span style='font-size:9.0pt;font-family:Consolas;color:#C9D1D9'>ClientRequestContext::hostHeaderVerifyFailed</span></span><span style='font-size:9.0pt;font-family:Consolas;color:#C9D1D9'>(<span class=gmail-pl-k>const</span> <span class=gmail-pl-k>char</span> *A, <span class=gmail-pl-k>const</span> <span class=gmail-pl-k>char</span> *B)<o:p></o:p></span></p></td></tr><tr style='box-sizing:border-box'><td width=50 nowrap valign=top style='width:37.5pt;background:transparent;padding:0in 7.5pt 0in 7.5pt;box-sizing:border-box;min-width:50px' id=gmail-L538></td><td valign=top style='background:transparent;padding:0in 7.5pt 0in 7.5pt;box-sizing:border-box;overflow:visible' id=gmail-LC538><p class=MsoNormal style='line-height:15.0pt'><span style='font-size:9.0pt;font-family:Consolas;color:#C9D1D9'>{<o:p></o:p></span></p></td></tr><tr style='box-sizing:border-box'><td width=50 nowrap valign=top style='width:37.5pt;padding:0in 7.5pt 0in 7.5pt;box-sizing:border-box;min-width:50px' id=gmail-L539></td><td valign=top style='padding:0in 7.5pt 0in 7.5pt;box-sizing:border-box;overflow:visible' id=gmail-LC539><p class=MsoNormal style='line-height:15.0pt'><span style='font-size:9.0pt;font-family:Consolas;color:#C9D1D9'> <span class=gmail-pl-c>// IP address validation for Host: failed. Admin wants to ignore them.</span><o:p></o:p></span></p></td></tr><tr style='box-sizing:border-box'><td width=50 nowrap valign=top style='width:37.5pt;background:transparent;padding:0in 7.5pt 0in 7.5pt;box-sizing:border-box;min-width:50px' id=gmail-L540></td><td valign=top style='background:transparent;padding:0in 7.5pt 0in 7.5pt;box-sizing:border-box;overflow:visible' id=gmail-LC540><p class=MsoNormal style='line-height:15.0pt'><span style='font-size:9.0pt;font-family:Consolas;color:#C9D1D9'> <span class=gmail-pl-c>// NP: we do not yet handle CONNECT tunnels well, so ignore for them</span><o:p></o:p></span></p></td></tr><tr style='box-sizing:border-box'><td width=50 nowrap valign=top style='width:37.5pt;padding:0in 7.5pt 0in 7.5pt;box-sizing:border-box;min-width:50px' id=gmail-L541></td><td valign=top style='padding:0in 7.5pt 0in 7.5pt;box-sizing:border-box;overflow:visible' id=gmail-LC541><p class=MsoNormal style='line-height:15.0pt'><span style='font-size:9.0pt;font-family:Consolas;color:#C9D1D9'> <span class=gmail-pl-k>if</span> (!Config.<span class=gmail-pl-smi>onoff</span>.<span class=gmail-pl-smi>hostStrictVerify</span> && http-><span class=gmail-pl-smi>request</span>-><span class=gmail-pl-smi>method</span> != Http::METHOD_CONNECT) {<o:p></o:p></span></p></td></tr><tr style='box-sizing:border-box'><td width=50 nowrap valign=top style='width:37.5pt;background:transparent;padding:0in 7.5pt 0in 7.5pt;box-sizing:border-box;min-width:50px' id=gmail-L542></td><td valign=top style='background:transparent;padding:0in 7.5pt 0in 7.5pt;box-sizing:border-box;overflow:visible' id=gmail-LC542><p class=MsoNormal style='line-height:15.0pt'><span style='font-size:9.0pt;font-family:Consolas;color:#C9D1D9'> <span class=gmail-pl-c1>debugs</span>(<span class=gmail-pl-c1>85</span>, <span class=gmail-pl-c1>3</span>, <span class=gmail-pl-pds>"</span><span class=gmail-pl-s>SECURITY ALERT: Host header forgery detected on </span><span class=gmail-pl-pds>"</span> << http-><span class=gmail-pl-c1>getConn</span>()-><span class=gmail-pl-smi>clientConnection</span> <<<o:p></o:p></span></p></td></tr><tr style='box-sizing:border-box'><td width=50 nowrap valign=top style='width:37.5pt;padding:0in 7.5pt 0in 7.5pt;box-sizing:border-box;min-width:50px' id=gmail-L543></td><td valign=top style='padding:0in 7.5pt 0in 7.5pt;box-sizing:border-box;overflow:visible' id=gmail-LC543><p class=MsoNormal style='line-height:15.0pt'><span style='font-size:9.0pt;font-family:Consolas;color:#C9D1D9'> <span class=gmail-pl-pds>"</span><span class=gmail-pl-s> (</span><span class=gmail-pl-pds>"</span> << A << <span class=gmail-pl-pds>"</span><span class=gmail-pl-s> does not match </span><span class=gmail-pl-pds>"</span> << B << <span class=gmail-pl-pds>"</span><span class=gmail-pl-s>) on URL: </span><span class=gmail-pl-pds>"</span> << http-><span class=gmail-pl-smi>request</span>-><span class=gmail-pl-c1>effectiveRequestUri</span>());<o:p></o:p></span></p></td></tr><tr style='box-sizing:border-box'><td style='background:transparent;padding:.75pt .75pt .75pt .75pt'></td><td style='background:transparent;padding:.75pt .75pt .75pt .75pt'></td></tr></table></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><div><p class=MsoNormal>How does the squid get "hostHeaderVerifyFailed" for a normal HTTP CONNECT request to a HTTP Proxy as simple as below?<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><blockquote style='margin-left:30.0pt;margin-right:0in'><div><p class=MsoNormal>CONNECT <a href="http://www.zscaler.com:80">www.zscaler.com:80</a> HTTP/1.1<o:p></o:p></p></div><div><p class=MsoNormal>Host: <a href="http://www.zscaler.com:80">www.zscaler.com:80</a><o:p></o:p></p></div><div><p class=MsoNormal>User-Agent: Windows Microsoft Windows 10 Enterprise ZTunnel/1.0<o:p></o:p></p></div><div><p class=MsoNormal>Proxy-Connection: keep-alive<o:p></o:p></p></div><div><p class=MsoNormal>Connection: keep-alive<o:p></o:p></p></div></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div></div><blockquote style='margin-left:30.0pt;margin-right:0in'><div><div><p class=MsoNormal>HTTP/1.1 409 Conflict<o:p></o:p></p></div></div><div><div><p class=MsoNormal>Server: squid<o:p></o:p></p></div></div><div><div><p class=MsoNormal>Mime-Version: 1.0<o:p></o:p></p></div></div><div><div><p class=MsoNormal>Date: Tue, 22 Feb 2022 20:59:42 GMT<o:p></o:p></p></div></div><div><div><p class=MsoNormal>Content-Type: text/html;charset=utf-8<o:p></o:p></p></div></div><div><div><p class=MsoNormal>Content-Length: 2072<o:p></o:p></p></div></div><div><div><p class=MsoNormal>X-Squid-Error: ERR_CONFLICT_HOST 0<o:p></o:p></p></div></div><div><div><p class=MsoNormal>Vary: Accept-Language<o:p></o:p></p></div></div><div><div><p class=MsoNormal>Content-Language: en<o:p></o:p></p></div></div><div><div><p class=MsoNormal>X-Cache: MISS from 3<o:p></o:p></p></div></div><div><div><p class=MsoNormal>Via: 1.1 3 (squid)<o:p></o:p></p></div></div><div><div><p class=MsoNormal>Connection: keep-alive<o:p></o:p></p></div></div></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><blockquote style='margin-left:30.0pt;margin-right:0in'><div><p class=MsoNormal></head><body id=ERR_CONFLICT_HOST><o:p></o:p></p></div><div><p class=MsoNormal><div id="titles"><o:p></o:p></p></div><div><p class=MsoNormal><h1>ERROR</h1><o:p></o:p></p></div><div><p class=MsoNormal><h2>The requested URL could not be retrieved</h2><o:p></o:p></p></div><div><p class=MsoNormal></div><o:p></o:p></p></div><div><p class=MsoNormal><hr><o:p></o:p></p></div></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><blockquote style='margin-left:30.0pt;margin-right:0in'><div><p class=MsoNormal><div id="content"><o:p></o:p></p></div><div><p class=MsoNormal><p>The following error was encountered while trying to retrieve the URL: <a href="<a href="http://www.zscaler.com:80">www.zscaler.com:80</a>"><a href="http://www.zscaler.com:80">www.zscaler.com:80</a></a></p><o:p></o:p></p></div><div><p class=MsoNormal>......<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div></blockquote><div><p class=MsoNormal>Thank you for any help on the understanding!<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Paul Ling<o:p></o:p></p></div></div></div></body></html>