[squid-users] Squid access.log
squid3 at treenet.co.nz
Thu Jan 16 19:59:18 UTC 2020
On 17/01/20 3:08 am, Alex Rousskov wrote:
> On 1/16/20 3:06 AM, Kornexl, Anton wrote:
>> I see many requests with CONNECT https:443 in my access.log
>> How are these entries triggered?
> These records are logged when your Squid is done with an HTTP CONNECT
> tunnel or after Squid intercepts a TLS connection. In very broad terms,
> they are a sign that your Squid participates in HTTPS transactions.
> Normally, there should be more than "https:443" in those CONNECT records.
This particular "https:443" happens when people use SquidGuard or
similarly broken redirector to tell Squid the *URI* (hostname:443) of a
CONNECT tunnel is a *URL* (https://hostname:443[path])..
If this is your case, fix the redirector or use this:
uri_rewrite_access deny CONNECT
More information about the squid-users