Re: [squid-users] How to allow traffic other than http

From: Henrik Nordstrom <hno@dont-contact.us>
Date: 14 Nov 2002 11:38:12 +0100

tor 2002-11-14 klockan 10.10 skrev Илья Шипицин:

> > Squid is an HTTP proxy. Either run an MTA (sendmail, postfix, exim, qmail,
> > ....) on the squid server or let the wintel clients talk to the ISP's mail
> > server by routing (and natting?) through the squid server.
>
> not only. squid is also https-proxy, it understands "CONNECT" method.
> If you don't know how to make use of CONNECT to implement those things
> like SMTP, IMAP, IRC, POP3, You'd better be keeping silence.
> It's no good to say "it's impossible for sure". If you don't know
> just "I don't know". And even better, don't say anything.

Sure, CONNECT can be used for any simple TCP proxying, but it SHOULD
not.

As Colin says Squid is a HTTP proxy. Part of being a HTTP proxy is also
the responsibility of proxying SSL requests from HTTP agents using the
CONNECT method. Any other uses of the CONNECT method is pure misuse of
the function and is strongly discouraged for many reasons even if
technically possible.

If you want a generic proxy for other protocols such as SMTP, IRC, IMAP,
POP3, etc then SOCKS is the proxy protocol you are after, not HTTP
CONNECT.

Regards
Henrik
Received on Thu Nov 14 2002 - 03:37:05 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:11:19 MST