<div dir="ltr">Thanks for the information Alex, we will handle this at ICAP level then.<br><div><br></div><div>Regards,</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Nov 6, 2019 at 2:24 PM Alex Rousskov <<a href="mailto:rousskov@measurement-factory.com">rousskov@measurement-factory.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On 11/6/19 1:03 PM, Felipe Arturo Polanco wrote:<br>
> 4.7 from this branch:<br>
> <a href="https://github.com/measurement-factory/squid/tree/SQUID-323-WebSocket-support" rel="noreferrer" target="_blank">https://github.com/measurement-factory/squid/tree/SQUID-323-WebSocket-support</a> <br>
<br>
It looks like you are hitting a bug that has not been fixed yet:<br>
reply_header_add/httpHdrAdd() does not supply essential transaction info<br>
to ACL checks. There has been significant progress in fixing similar<br>
bugs recently, but this one was somehow missed AFAICT.<br>
<br>
Alex.<br>
<br>
<br>
> On Wed, Nov 6, 2019 at 12:47 PM Alex Rousskov wrote:<br>
> <br>
> On 11/6/19 8:49 AM, Felipe Arturo Polanco wrote:<br>
> > I have this warning in the logs:<br>
> ><br>
> > WARNING: 307_redirect ACL is used in context without an HTTP response.<br>
> > Assuming mismatch.<br>
> > Acl.cc(151) matches: checked: 307_redirect = 0<br>
> ><br>
> > I also tested using rep_header ACL and that causes the same<br>
> warning and<br>
> > defaulting to 0.<br>
> ><br>
> > Do I need anything else to make reply access lists to work?<br>
> <br>
> What is your Squid version?<br>
> <br>
> Alex.<br>
> <br>
> <br>
> > On Tue, Nov 5, 2019 at 6:01 PM Alex Rousskov wrote:<br>
> ><br>
> > On 11/5/19 4:23 PM, Felipe Arturo Polanco wrote:<br>
> > > I tried 200 status code from the<br>
> > > webserver directly and doesn't work either.<br>
> ><br>
> > Sounds like a Squid bug to me then. If you can reproduce with<br>
> Squid v4<br>
> > or later, please consider filing a bug report in Squid<br>
> bugzilla. Quality<br>
> > fixes welcomed.<br>
> ><br>
> > Alex.<br>
> ><br>
> ><br>
> > > On Tue, Nov 5, 2019 at 4:43 PM Alex Rousskov wrote:<br>
> > ><br>
> > > On 11/5/19 3:06 PM, Felipe Arturo Polanco wrote:<br>
> > ><br>
> > > > I have been trying to match http_status acl in my<br>
> squid.conf<br>
> > file<br>
> > > but it<br>
> > > > has no effect.<br>
> > > ><br>
> > > > My goal is to add a given header to specific HTTP<br>
> return codes.<br>
> > > ><br>
> > > > eg:<br>
> > > > This works:<br>
> > > > acl user1 src <a href="http://192.168.0.6/32" rel="noreferrer" target="_blank">192.168.0.6/32</a> <<a href="http://192.168.0.6/32" rel="noreferrer" target="_blank">http://192.168.0.6/32</a>><br>
> <<a href="http://192.168.0.6/32" rel="noreferrer" target="_blank">http://192.168.0.6/32</a>><br>
> > <<a href="http://192.168.0.6/32" rel="noreferrer" target="_blank">http://192.168.0.6/32</a>><br>
> > > <<a href="http://192.168.0.6/32" rel="noreferrer" target="_blank">http://192.168.0.6/32</a>><br>
> > > > reply_header_add Cache-Control "no-store" user1<br>
> > > ><br>
> > > > This doesn't work:<br>
> > > > acl 307_redirect http_status 307<br>
> > > > reply_header_add Cache-Control "no-store" 307_redirect<br>
> > > ><br>
> > > > Any ideas on what could I be missing here?<br>
> > ><br>
> > > Does that 307 response come from a server (including<br>
> > cache_peers) or is<br>
> > > it generated by Squid itself?<br>
> > ><br>
> > > Alex.<br>
> > > _______________________________________________<br>
> > > squid-users mailing list<br>
> > > <a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br>
> <mailto:<a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a>><br>
> > <mailto:<a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br>
> <mailto:<a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a>>><br>
> > > <mailto:<a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br>
> <mailto:<a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a>><br>
> > <mailto:<a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br>
> <mailto:<a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a>>>><br>
> > > <a href="http://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
> > ><br>
> ><br>
> <br>
<br>
</blockquote></div>