problemas con el squid

Andres Cabeza

Greetings friends, I have problems with the squid proxy, it blocks my web pages and gives me this message
Bad Response An error was encountered while trying to process the request:

GET /web/index.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:103.0) Gecko/20100101 Firefox/103.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: es-ES,es;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Host: www.cne.gob.ve

The HTTP Response message received from the contacted server could not be understood or had some malformation. Please contact the site operator.

Perhaps your cache manager can give you more details about the exact nature of the problem if necessary.

Your cache manager is admin@localhost.
if someone

I would like to know how I can solve it, create an acl to release pages and in the same way it blocks them

stephenw10

It's probably trying to redirect to an https error page over http (or the reverse).

Check the Squid logs when you try to access that site.

Steve

Andres Cabeza

@stephenw10 [squidGuard.log](Invalid file type. Allowed types are: .png, .jpg, .bmp, .txt, .gif, .xls, .gz, .zip, .pcap, .pcapng, .7z, .xml, .jpeg, .diff, .patch, .tgz, .tar, .0, .cap) [cache.log](Invalid file type. Allowed types are: .png, .jpg, .bmp, .txt, .gif, .xls, .gz, .zip, .pcap, .pcapng, .7z, .xml, .jpeg, .diff, .patch, .tgz, .tar, .0, .cap)
Greetings, I enclose the log every time I go to open a page, at least the one from www.cne.gob.ve, www.bancodevenezuela.com, if you can help me, it says that something with solving dns

Andres Cabeza

@stephenw10 I'm trying to mount the logs so you can see them and it won't let me

stephenw10

Try putting the logs in pastebin (or similar) and linking to them.
We need to see the actual log and the error shown in the browser.

Steve

Andres Cabeza

@stephenw10 squidguard-log.txt

Andres Cabeza

@stephenw10 https://files.fm/andres.cabeza#sduq8xhqt that is the browser error

stephenw10

Hmm, looks like it's triggering Squidguard then.

I assume you see that in the main Squid logs?

Andres Cabeza

@stephenw10 if I am using squid proxy server, squid reverse proxy and squidguard proxy filter to control the use of web pages filtering a network of 60 computers to restrict the use of social networks

stephenw10

In the Squid logs though (not Squidguard) you should see traffic blocked when you try to connect as long as you have Log Pages Denied by SquidGuard set in the Squid settings.

It looks like it's being blocked because the url contains //. It sees that as an attempt to bypass the proxy.

Steve

dalla

Hola andres,

Tengo configurado pfsense 2.6 con squid y squidguard. presento el mismo problema para acceder a la pagina web del cne: http://www.cne.gob.ve/web/index.php

Aplique varias configuraciones en el squid :
X-Forwarded Header Mode : probe la opcion de truncate, borrar.

Deshabliite este parametro: Disable VIA Header
If not set, Squid will include a Via header in requests and replies as required by RFC2616.

Verifique la resolución de los dns

Agregue la url completa en el squidguard,
Agregue la url dentro del whitelist del squid

y aun persiste la falla.

Queria saber si habias encontrado una solución.

Gracias