| 

Index  | Alphabetical Index |

Option Name: deny_info

Replaces:
Requires:
Default Value: none
Suggested Config:

Usage: deny_info err_page_name acl

or deny_info http://... acl
or deny_info TCP_RESET acl

This can be used to return a ERR_ page for requests which

do not pass the 'http_access' rules. Squid remembers the last
acl it evaluated in http_access, and if a 'deny_info' line exists
for that ACL Squid returns a corresponding error page.

The acl is typically the last acl on the http_access deny line which
denied access. The exceptions to this rule are:
- When Squid needs to request authentication credentials. It's then
the first authentication related acl encountered
- When none of the http_access lines matches. It's then the last
acl processed on the last http_access line.
- When the decision to deny access was made by an adaptation service,
the acl name is the corresponding eCAP or ICAP service_name.

NP: If providing your own custom error pages with error_directory

you may also specify them by your custom file name:
Example: deny_info ERR_CUSTOM_ACCESS_DENIED bad_guys

By defaut Squid will send "403 Forbidden". A different 4xx or 5xx

may be specified by prefixing the file name with the code and a colon.
e.g. 404:ERR_CUSTOM_ACCESS_DENIED

Alternatively you can tell Squid to reset the TCP connection

by specifying TCP_RESET.

Or you can specify an error URL or URL pattern. The browsers will
get redirected to the specified URL after formatting tags have
been replaced. Redirect will be done with 302 or 307 according to
HTTP/1.1 specs. A different 3xx code may be specified by prefixing
the URL. e.g. 303:http://example.com/

URL FORMAT TAGS:

%a - username (if available. Password NOT included)
%B - FTP path URL
%e - Error number
%E - Error description
%h - Squid hostname
%H - Request domain name
%i - Client IP Address
%M - Request Method
%O - Unescaped message result from external ACL helper
%o - Message result from external ACL helper
%p - Request Port number
%P - Request Protocol name
%R - Request URL path
%T - Timestamp in RFC 1123 format
%U - Full canonical URL from client
(HTTPS URLs terminate with *)
%u - Full canonical URL from client
%w - Admin email from squid.conf
%x - Error name
%% - Literal percent (%) code

| Index  | Alphabetical Index |