Hi,
I was wondering if it is possible to filter HTTPS URLs using squid (for
example to blacklist reddit.com but allow https://www.reddit.com/r/news/)?
I thought this may be possible using ssl_bump and url_regex. I have been
trying this using squid 3.5.13 but with no success.
Here is the squid co
On 11/02/2016 1:05 p.m., Victor Hugo wrote:
> Hi,
>
> I was wondering if it is possible to filter HTTPS URLs using squid (for
> example to blacklist reddit.com but allow https://www.reddit.com/r/news/)?
>
> I thought this may be possible using ssl_bump and url_regex. I have been
> trying this usi
Try adding
acl step1 at_step SslBump1
ssl_bump peek step1 bump_sites
This worked for me. Just a suggestion:)
On Thu, Feb 11, 2016 at 3:59 AM, Amos Jeffries wrote:
> On 11/02/2016 1:05 p.m., Victor Hugo wrote:
> > Hi,
> >
> > I was wondering if it is possible to filter HTTPS URLs using squid (
Hi Panda,
Thanks for the suggestion.
I'm assuming from Panda and Amos's responses that what I'm trying to
achieve should actually be possible?
I tried adding what you suggested but unfortunately it didn't work.
New Config (based on Panda's suggestion):
acl localnet src 10.0.0.0/8 # RFC1918 poss
On 12/02/2016 11:37 a.m., Victor Hugo wrote:
> Hi Panda,
>
> Thanks for the suggestion.
>
> I'm assuming from Panda and Amos's responses that what I'm trying to
> achieve should actually be possible?
Yes. Once the request message has been bumped there is no difference to
Squid between it and a r
Hi,
I have now tested this with squid 4.0.9 and can confirm that I encounter
the same problem and get the same results.
Victor
On Fri, Feb 12, 2016 at 1:18 PM, Amos Jeffries wrote:
> On 12/02/2016 11:37 a.m., Victor Hugo wrote:
> > Hi Panda,
> >
> > Thanks for the suggestion.
> >
> > I'm assum
Here's a strange one for you though, if I change:
acl whitelist-regex url_regex -i reddit.com/r/news
to:
acl whitelist-regex url_regex -i reddit\.com\/r\/news www\.reddit\.com\:443
it works every 2nd time but the match is too greedy and allows
www.reddit.com/r/anything every 2nd time.
Victor
it
On 6/05/2016 5:51 p.m., Victor Hugo wrote:
> Here's a strange one for you though, if I change:
> acl whitelist-regex url_regex -i reddit.com/r/news
>
> to:
> acl whitelist-regex url_regex -i reddit\.com\/r\/news www\.reddit\.com\:443
>
> it works every 2nd time but the match is too greedy and all
Wow that worked!
Thanks!
On Fri, May 6, 2016 at 5:00 PM, Amos Jeffries wrote:
> On 6/05/2016 5:51 p.m., Victor Hugo wrote:
> > Here's a strange one for you though, if I change:
> > acl whitelist-regex url_regex -i reddit.com/r/news
> >
> > to:
> > acl whitelist-regex url_regex -i reddit\.com\/r
