<div dir="auto">You can try to use deny_info with a customized error page template or an icap service that will respond with a different page.<div dir="auto">I think that redirecting to an external website is a good choice.</div><div dir="auto">Many commercial products use this technique.</div><div dir="auto">If you want the traffic of this website to be bypassed from squid you can also do that with couple iptables lines.</div><div dir="auto"><br></div><div dir="auto">All The Bests,</div><div dir="auto">Eliezer</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">בתאריך יום ב׳, 31 בינו׳ 2022, 2:21, מאת David Touzeau <<a href="mailto:david@articatech.com">david@articatech.com</a>>:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#464646" bgcolor="#FFFFFF">
<font face="Arial">Hi<br>
<br>
I have built my own squid url_rewrite_program <br>
<br>
protocol requires answering with<br>
<br>
# OK status=301|302 url=<br>
Or<br>
# OK rewrite-url=<a href="http://blablaba" target="_blank" rel="noreferrer">"http://blablaba"</a><br>
<br>
In my case, especially for trackers/ads i would like to say to
browsers: "Go away !" without need them to redirect.<br>
<br>
Sure i can use these methods but...<br>
<br>
1) 127.0.0.1 - browser is in charge of getting out<br>
</font><font face="Arial"><font face="Arial">----------------------------------------------------------------<br>
</font>OK status=302 url=<a href="http://127.0.0.1" target="_blank" rel="noreferrer">"http://127.0.0.1"</a> But this ain't clean
or polished.<br>
<br>
</font><br>
<font face="Arial"><font face="Arial">2) 127.0.0.1 - Squid is in
charge of getting out<br>
</font><font face="Arial"><font face="Arial">----------------------------------------------------------------<br>
</font>OK rewrite-url=<a href="http://127.0.0.1" target="_blank" rel="noreferrer">"http://127.0.0.1"</a> But this very very
ain't clean or polished.</font><br>
Squid claim in logs for an unreachable URL and pollute events<br>
<br>
<br>
3) Redirect to a dummy page with a deny acl<br>
----------------------------------------------------------------<br>
</font><font face="Arial"><font face="Arial">OK status=302
url=<a href="http://dummy.com" target="_blank" rel="noreferrer">"http://dummy.com"</a> <br>
acl dummy dstdomain </font></font><font face="Arial"><font face="Arial"><font face="Arial"><font face="Arial"><a href="http://dummy.com" target="_blank" rel="noreferrer">dummy.com</a></font></font><br>
http_access deny dummy<br>
deny_info TCP_RESET dummy<br>
<br>
</font>But it makes 2 connections to the squid for just stopping
queries.<br>
It seems not really optimized.<br>
<br>
I notice that for several reasons i cannot switch to an
external_acl <br>
<br>
Is there a way / idea ?<br>
<br>
<br>
Regards<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
</font>
</div>
_______________________________________________<br>
squid-users mailing list<br>
<a href="mailto:squid-users@lists.squid-cache.org" target="_blank" rel="noreferrer">squid-users@lists.squid-cache.org</a><br>
<a href="http://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer noreferrer" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
</blockquote></div>