Re: [squid-users] Bad HTTP requests trigger ICAP suspension

2016-12-06 Thread Silamael
On 06.12.2016 14:54, Amos Jeffries wrote: > > The exception was thrown from the HTTP request parser when handling the > ICAP service response - which was delivering a new HTTP request message > to use instead of the client-provided request message. > > Assuming your statement was correct about th

Re: [squid-users] Bad HTTP requests trigger ICAP suspension

2016-12-06 Thread Amos Jeffries
On 6/12/2016 9:03 p.m., Silamael wrote: > On 05.12.2016 13:58, Amos Jeffries wrote: >> On 5/12/2016 11:17 p.m., Silamael wrote: >>> This sounds somehow wrong to me, the ICAP service doesn't have a >>> problem, just the HTTP request being forwarded is borken. Therefor is no >> >> The ICAP service ap

Re: [squid-users] Bad HTTP requests trigger ICAP suspension

2016-12-06 Thread Silamael
On 05.12.2016 17:28, Eliezer Croitoru wrote: > Sorry a typo.. the dot needs to be escaped.. > acl buggyroot dstdom_regex ^\.$ > http_access deny buggyroot > > Eliezer Hi Eliezer, Thanks for the hint. We will block these URLs now before the reach Squid at all. -- Matthias ___

Re: [squid-users] Bad HTTP requests trigger ICAP suspension

2016-12-06 Thread Silamael
On 05.12.2016 13:58, Amos Jeffries wrote: > On 5/12/2016 11:17 p.m., Silamael wrote: >> This sounds somehow wrong to me, the ICAP service doesn't have a >> problem, just the HTTP request being forwarded is borken. Therefor is no > > The ICAP service appears to be producing URLs without any host se

Re: [squid-users] Bad HTTP requests trigger ICAP suspension

2016-12-05 Thread Eliezer Croitoru
...@lists.squid-cache.org] On Behalf Of Eliezer Croitoru Sent: Monday, December 5, 2016 5:06 PM To: 'Silamael' Cc: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Bad HTTP requests trigger ICAP suspension To resolve this issue quickly I would use a simple squid dstdom regex that

Re: [squid-users] Bad HTTP requests trigger ICAP suspension

2016-12-05 Thread Eliezer Croitoru
: [squid-users] Bad HTTP requests trigger ICAP suspension On 5/12/2016 11:17 p.m., Silamael wrote: > Hi, > > We are using the ICAP services of Squid for filtering HTTP-Requests. > Now we encountered the problem that a buggy? web application creates > requests with an URL with the

Re: [squid-users] Bad HTTP requests trigger ICAP suspension

2016-12-05 Thread Amos Jeffries
On 5/12/2016 11:17 p.m., Silamael wrote: > Hi, > > We are using the ICAP services of Squid for filtering HTTP-Requests. Now > we encountered the problem that a buggy? web application creates > requests with an URL with the hostname set to '.'. Ok. > These bad requests than cause the suspension o

[squid-users] Bad HTTP requests trigger ICAP suspension

2016-12-05 Thread Silamael
Hi, We are using the ICAP services of Squid for filtering HTTP-Requests. Now we encountered the problem that a buggy? web application creates requests with an URL with the hostname set to '.'. These bad requests than cause the suspension of the whole ICAP service which then causes the bypass of th