https://redmine.pfsense.org/https://redmine.pfsense.org/favicon.ico?16780521162020-11-26T04:12:53ZpfSense bugtrackerpfSense Packages - Bug #8827: Squidguard: ACL redirect modes 'redirect' and 'err page' send unresolvable URLs to the client.https://redmine.pfsense.org/issues/8827?journal_id=497002020-11-26T04:12:53ZViktor Gurov
<ul></ul><p>You have to append</p>
<pre>
url_rewrite_access deny CONNECT
url_rewrite_access allow all
</pre>
<p>to your squid custom options to make the redirect page work in SSL MITM mode.</p>
<p>see <a class="external" href="https://forum.netgate.com/topic/119092/the-following-error-was-encountered-while-trying-to-retrieve-https-http/10">https://forum.netgate.com/topic/119092/the-following-error-was-encountered-while-trying-to-retrieve-https-http/10</a></p> pfSense Packages - Bug #8827: Squidguard: ACL redirect modes 'redirect' and 'err page' send unresolvable URLs to the client.https://redmine.pfsense.org/issues/8827?journal_id=518802021-03-03T04:12:58ZViktor Gurov
<ul></ul><p><a class="external" href="https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/65">https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/65</a></p> pfSense Packages - Bug #8827: Squidguard: ACL redirect modes 'redirect' and 'err page' send unresolvable URLs to the client.https://redmine.pfsense.org/issues/8827?journal_id=519142021-03-03T15:39:17ZJim Pingle
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Pull Request Review</i></li></ul> pfSense Packages - Bug #8827: Squidguard: ACL redirect modes 'redirect' and 'err page' send unresolvable URLs to the client.https://redmine.pfsense.org/issues/8827?journal_id=519652021-03-05T08:26:41ZRenato Botelhorenato@netgate.com
<ul><li><strong>Status</strong> changed from <i>Pull Request Review</i> to <i>Feedback</i></li><li><strong>Assignee</strong> set to <i>Viktor Gurov</i></li></ul><p>PR has been merged. Thanks!</p> pfSense Packages - Bug #8827: Squidguard: ACL redirect modes 'redirect' and 'err page' send unresolvable URLs to the client.https://redmine.pfsense.org/issues/8827?journal_id=579202021-12-21T05:10:50ZAzamat Khakimyanov
<ul><li><strong>Status</strong> changed from <i>Feedback</i> to <i>Assigned</i></li></ul><p>Tested on 21.05_p2</p>
<p>With redirect mode 'ext url redirect' I still got <br /><em>The following error was encountered while trying to retrieve the URL: <a class="external" href="https://https/">https://https/</a>*<br /> Unable to determine IP address from host name "https" <br />The DNS server returned:<br /> Name Error: The domain name does not exist.<br />This means that the cache was not able to resolve the hostname presented in the URL. Check if the address is correct.<br />Your cache administrator is admin@localhost.</em></p>
<p>so this bug is not solved.</p>
<p>For example 'mts.ru' were inside one of Target Category with 'ext url redirect' to 'orange.com' and I got this output for</p>
<blockquote>
<p><strong>echo "http://www.mts.ru 172.16.130.101/ - - GET" | squidGuard -d</strong></p>
</blockquote>
<p><em>2021-12-21 15:58:32 [76797] New setting: logdir: /var/squidGuard/log<br />2021-12-21 15:58:32 [76797] New setting: dbhome: /var/db/squidGuard<br />2021-12-21 15:58:32 [76797] init domainlist /var/db/squidGuard/G_to_Ya/domains<br />2021-12-21 15:58:32 [76797] loading dbfile /var/db/squidGuard/G_to_Ya/domains.db<br />2021-12-21 15:58:32 [76797] init domainlist /var/db/squidGuard/BlockMobiles/domains<br />2021-12-21 15:58:32 [76797] loading dbfile /var/db/squidGuard/BlockMobiles/domains.db<br />2021-12-21 15:58:32 [76797] init domainlist /var/db/squidGuard/AnotherSites/domains<br />2021-12-21 15:58:32 [76797] loading dbfile /var/db/squidGuard/AnotherSites/domains.db<br />2021-12-21 15:58:32 [76797] init domainlist /var/db/squidGuard/squidstatus/domains<br />2021-12-21 15:58:32 [76797] loading dbfile /var/db/squidGuard/squidstatus/domains.db<br />2021-12-21 15:58:32 [76797] squidGuard 1.4 started (1640102312.802)<br />2021-12-21 15:58:32 [76797] squidGuard ready for requests (1640102312.802)<br />2021-12-21 15:58:32 [76797] source not found<br />2021-12-21 15:58:32 [76797] no ACL matching source, using default<br />2021-12-21 15:58:32 [76797] Request(default/BlockMobiles/-) <a class="external" href="http://www.mts.ru">http://www.mts.ru</a> 172.16.130.101/- - - REDIRECT<br />OK rewrite-url="https://orange.com" <br />2021-12-21 15:58:32 [76797] squidGuard stopped (1640102312.802)</em></p>
<p>P.S. Option 'ext url move' works with no problem</p> pfSense Packages - Bug #8827: Squidguard: ACL redirect modes 'redirect' and 'err page' send unresolvable URLs to the client.https://redmine.pfsense.org/issues/8827?journal_id=579252021-12-21T05:48:59ZViktor Gurov
<ul><li><strong>Status</strong> changed from <i>Assigned</i> to <i>New</i></li></ul><p>This bugfix is reverted in <a class="issue tracker-8 status-3 priority-4 priority-default closed" title="Regression: SquidGuard 1.16.18_17 Not Filtering Blacklist No-Transparent Mode (Resolved)" href="https://redmine.pfsense.org/issues/11738">#11738</a></p> pfSense Packages - Bug #8827: Squidguard: ACL redirect modes 'redirect' and 'err page' send unresolvable URLs to the client.https://redmine.pfsense.org/issues/8827?journal_id=579262021-12-21T05:49:10ZViktor Gurov
<ul><li><strong>Affected Version</strong> deleted (<del><i>2.4.3_1</i></del>)</li></ul>