[squid-users] got error page type ERR_READ_ERROR, when a dnslabel can not be resolved

[Alex Rousskov]

On 10/10/22 04:05, Dieter Bloms wrote:

> since squid 5.7 I get the error page of type ERR_READ_ERROR, when a dns
> label can not be resolved (for example https://dnslabeldoesnotexist.com/).
> I expect the error page of type ERR_DNS_FAIL instead of ERR_READ_ERROR.
> 
> Can somebody confirm this behavior ?

I cannot quickly confirm or deny that specific behavior in v5, but I 
recently spotted[1] bugs/deficiencies in error relaying master/v6-based 
code that result in ERR_READ_ERROR instead of ERR_DNS_FAIL or, at the 
very least, ERR_CANNOT_FORWARD. Sounds like v5 needs similar fixes.

Do you use SslBump to handle that HTTPS site?

Alex.

[1]: 
https://github.com/measurement-factory/squid/blob/0d3687c69cf7c69c59c101fc125615d5e10a1dc7/src/FwdState.cc#L279-283