Re: [squid-users] SSL Peak and Splice

2015-05-14 Thread Amos Jeffries
On 15/05/2015 11:15 a.m., Casey Daniels wrote: > > > On 05/14/2015 12:37 AM, Amos Jeffries wrote: >>> Yes the second option, not the particular machine, but the FQDN >>> (i.e. ) >> >> # get TLS SNI details etc >> ssl_bump peek all >> >> # some get rejected >> acl b

Re: [squid-users] SSL Peak and Splice

2015-05-14 Thread Casey Daniels
On 05/14/2015 12:37 AM, Amos Jeffries wrote: Yes the second option, not the particular machine, but the FQDN (i.e. ) # get TLS SNI details etc ssl_bump peek all # some get rejected acl blocked ssl:server_name .example.com ssl_bump reject blocked # the res

Re: [squid-users] Youtube redirection loop?

2015-05-14 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 UPDATE: It is enoudg to strip User-Agent only for one domain: # For YT block useragent header acl youtube_dom dstdomain .youtube.com request_header_access User-Agent deny youtube_dom Note: Some clips can't play for unknown reason. Will research.

[squid-users] assertion Failed, when using dst_as

2015-05-14 Thread Walter H.
Hello, following 3 lines acl block_isps_list dst_as ### deny_info ERR_ISP_BLOCKED block_isps_list http_access deny block_isps_list bring when starting squid like this squid -N -d 1 the following messages assertion failed: mem.cc:220: "MemPools[type]" Aborted my system: a VM with CentOS 6.5 (6

Re: [squid-users] SSL Peak and Splice

2015-05-14 Thread Casey Daniels - mailinglist
> On May 14, 2015 at 12:37 AM Amos Jeffries wrote: > > > On 14/05/2015 10:47 a.m., Casey Daniels - mailinglist wrote: > >> On May 13, 2015 at 3:25 AM Amos Jeffries wrote: > >> > >> > >> On 13/05/2015 6:17 a.m., Casey Daniels wrote: > >>> Hi, > >>> I've been trying to figure out how to do some we