Squidguard url-rewrite for Google safe search strange string !

Arthur · Oct 8, 2015, 12:37 PM

i use squid+squidguard+clamAV+ssl bump, all is ok but the rewrite safe search for google don't work.

when i search "test" in https://www.google.com then the rewrite process change the URL with "https://www.google.fr/?gws_rd=ssl#q=test&safe=active192.168.1.131/-internetGET" instead of "https://www.google.fr/?gws_rd=ssl#q=test&safe=active"

i don't known where the string "192.168.1.131/-internetGET" com from..
just 192.168.1.131 is my lan ip but why squid or squidguard add this in my URL ?

i use the standard rewrite rule : s@(google..*/search?.q=.)@&safe=active@i

any help or idea is welcome

chris4916 · Oct 8, 2015, 12:54 PM

transparent proxy ? ???

Arthur · Oct 9, 2015, 6:29 AM

hi,

no transparent proxy, i use wpad and ldap authentification on AD server.

chris4916 · Oct 9, 2015, 8:02 AM

wow strange :o

did you try without MITM?

I can't see any reason why either Squid or Squidguard would add anything to URL string.
I wonder if it has some link with the need for keeping any reference of source client because of MITM :-X (although it should not show in URL ::))

Arthur · Oct 9, 2015, 10:52 AM

yes i try without mitm but without mitm rewrite don't work because google is ssl website.
so URL is not change.

i try without clamav, without LDAP authentification, same result :-(

very very strange ! MITM bug ?

maverik1 · Oct 10, 2015, 12:42 AM

Instead of trying a re-write maybe you can the following to the dns forwarder advanced options:

address=/google.com/216.239.38.120

It works for me

Arthur · Oct 12, 2015, 12:51 PM

yes the dns hack work for me too for google but i want to safesearch bing.com too and i don't found the same DNS hack for bing.
do you have a DNS tweak for bing ?

maverik1 · Oct 13, 2015, 12:25 AM

I am currently using the following for bing.

address=/bing.com/216.239.38.120

This just redirects it to google.

I couldn't get the re-writes working

Arthur · Oct 13, 2015, 7:51 AM

thanks for this tweak.

it's ok when a make a search directly from www.bing.com.

but i have a problem when i make a search with the integrate search bar in star menu in windows 8 or 10.
it 's redirect to www.google.fr but with bing.com and some URL parameters.

so i have and ssl certificat error that say me URL is not the same as URL in certificat.
and finaly i have "404. That’s an error." message from google that's say me page not found with this parameters :-(