Re: [squid-users] ssl-bump does not redirect to block page

2019-02-13 Thread Alex Rousskov
On 2/12/19 11:22 PM, leomessi...@yahoo.com wrote: > Actually i don't understand if it could be done or not!! And I do not know what you mean by "it" here. * Can Squid send a blocking error page to an HTTPS client? Yes. * Will the browser show that error page to the user without any additional

Re: [squid-users] Compiling with OpenSSL 1.1+

2019-02-13 Thread Santschi Yann
Many thanks for your help. I could have squid compiled. Squid was unable to find the OpenSSL installation because I didn't set the "--prefix" flag when I compiled OpenSSL. Once I set it with the same value as "--openssldir" squid compilation worked. I'm using CentOS 7 and OpenSSL 1.0.2 are

Re: [squid-users] Problem rtmp traffic through Squid

2019-02-13 Thread Amos Jeffries
On 14/02/19 1:37 am, Ahmad, Sarfaraz wrote: > Did you add them to “safe_ports” acl ? ( assuming you have one ) > Port 1935 is already part of the Safe_ports ACL by default. What it is not part of is the SSL_Ports ACL which prohibits almost all ports having CONNECT tunnels opened. If the Flash

Re: [squid-users] Problem rtmp traffic through Squid

2019-02-13 Thread Ahmad, Sarfaraz
Did you add them to "safe_ports" acl ? ( assuming you have one ) Look here some more inputs, http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-conf-blocking-live-video-stream-td4680866.html From: squid-users On Behalf Of ? ?? Sent: Wednesday, February 13, 2019

Re: [squid-users] ssl-bump does not redirect to block page

2019-02-13 Thread Amos Jeffries
On 14/02/19 1:10 am, leomessi983 wrote: > I use this configuration to solve my problem. > Whit this configuration at first step I use bump action for sites that i > want to block and show ACCESS_DENIED page then splice all other requests!! > My problem in this config is when my clients want to see

[squid-users] Problem rtmp traffic through Squid

2019-02-13 Thread Герасимов Никита Вячеславович
Hello! In our organization, we use squid proxy server. And we found a problem with viewing webinars that run on adobe Flash. Network engineers found out that rtmp traffic on port 1935 bypasses the proxy server, which is specified in the browser settings. In this connection, the site does not

Re: [squid-users] ssl-bump does not redirect to block page

2019-02-13 Thread leomessi...@yahoo.com
sing just step1 > knowledge). > A packet capture or an ALL,2 cache.log may distinguish those two cases. > Alex. Hi Alex Actually i don't understand if it could be done or not!! Amos said it is impossible you said no!! can you show me the correct configuration for blocking HTTPS reques

Re: [squid-users] Compiling with OpenSSL 1.1+

2019-02-13 Thread Amos Jeffries
On 13/02/19 10:26 pm, Santschi Yann wrote: > Hello everybody, > > I'm trying to compile Squid 4.4 with OpenSSL 1.1.1a and I'm getting > compilation errors like this one : > > > In file included from ../../src/security/Context.h:15:0, > from ../../src/security/forward.h:13, >    

[squid-users] Compiling with OpenSSL 1.1+

2019-02-13 Thread Santschi Yann
Hello everybody, I'm trying to compile Squid 4.4 with OpenSSL 1.1.1a and I'm getting compilation errors like this one : In file included from ../../src/security/Context.h:15:0, from ../../src/security/forward.h:13, from ../../src/SquidConfig.h:21,