Re: [squid-users] add DENIED tag by redirector for easy identification in logfile

2012-11-02 Thread Amm
- Original Message - > From: Alex Rousskov > Hi Amm, > >   There is a solution, but it requires switching from a url_rewriter > script to an eCAP adapter. Adapters can set annotations (name:value > "tags") that Squid can log via %adapt::

Re: [squid-users] add DENIED tag by redirector for easy identification in logfile

2012-11-02 Thread Alex Rousskov
On 10/31/2012 05:07 AM, Amm wrote: > I have a redirector which blocks certain sites. But in squid logs > there is no way to indicate if redirector blocked it. On 10/31/2012 06:36 AM, Amm wrote: > I suppose as of now there is no solution. But thanks again. Hi Amm, There is a solution, but it

RE: [squid-users] Re: HTTPS traffic in normal transparent proxy

2012-11-02 Thread Heinrich Hirtzel
Ah right I see, so a different use case :-) > Date: Fri, 2 Nov 2012 09:23:25 -0700 > From: m.ferlit...@gmail.com > To: squid-users@squid-cache.org > Subject: [squid-users] Re: HTTPS traffic in normal transparent proxy > > Ok. > I only have internet access

[squid-users] Re: HTTPS traffic in normal transparent proxy

2012-11-02 Thread Markus
Ok. I only have internet access via a http/s proxy. In your case the proxy server generates a new https request directly to the SSL-webserver but in my case the request must be send via parent http/s proxy. I only enabled dns-requests for this one virtual machine that transparent-mode works. For t

RE: [squid-users] Re: HTTPS traffic in normal transparent proxy

2012-11-02 Thread Heinrich Hirtzel
nope, I don't forward the https request through another proxy. Just use the config I posted in my previous email and it should work. > Date: Fri, 2 Nov 2012 08:39:01 -0700 > From: m.ferlit...@gmail.com > To: squid-users@squid-cache.org > Subject: [squid-u

[squid-users] Re: HTTPS traffic in normal transparent proxy

2012-11-02 Thread Markus
Cool! This was my next idea - to try other release of squid. But you don't forward the https request through a other proxy!? cache_peer http/s proxy parent 8080 0 default.. Did you try this or should it also work? -- View this message in context: http://squid-web-proxy-cache.1019090.n4.

RE: [squid-users] Re: HTTPS traffic in normal transparent proxy

2012-11-02 Thread Heinrich Hirtzel
Ok, here are my results: 3.1.2    -> didn't managed to get SSL interception working 3.2.3    -> didn't managed to get SSL interception working 3.3.0.1 -> WORKS! What I did: wget http://www.squid-cache.org/Versions/v3/3.3/squid-3.3.0.1.tar.gz tar xfvz squid-3.3.0.1.tar.gz ./configure --enable-ssl

RE: [squid-users] Re: HTTPS traffic in normal transparent proxy

2012-11-02 Thread Heinrich Hirtzel
> Could you resolve this issue? Na, unfortunately not. I've tried some other squid configurations and now I'm getting "Invalid URL: /". I'm currently setting up a VM with squid 3.3. (beta), will post the test result here as soon as I have them. > I thought that ssl-bump was made for this. In my

[squid-users] Re: HTTPS traffic in normal transparent proxy

2012-11-02 Thread Markus
Could you resolve this issue? I only tried it with firefox on clients. But I think that IE has same problems. I thought that ssl-bump was made for this. In my case the security is unimportant. But why it not works? -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabbl

RE: [squid-users] Re: HTTPS traffic in normal transparent proxy

2012-11-02 Thread Heinrich Hirtzel
> Date: Fri, 2 Nov 2012 05:13:41 -0700 > From: m.ferlit...@gmail.com > To: squid-users@squid-cache.org > Subject: [squid-users] Re: HTTPS traffic in normal transparent proxy > > Yes, I know but I have the problem that no https site will be opend on the > ta

[squid-users] Re: HTTPS traffic in normal transparent proxy

2012-11-02 Thread Markus
Yes, I know but I have the problem that no https site will be opend on the tablet or virtual machine. I can accept the untrustable certificate but website will not be opened. When I try to open https://outlook.com, in cache.log I see that the webbrowser tries to forward to http://outlook.com. Fire

Re: [squid-users] Re: HTTPS traffic in normal transparent proxy

2012-11-02 Thread E.S. Rosenberg
2012/11/2 Markus : > Ok, I understand but I thought that sslbump realize it so that the encrypted > data from client will be decrypted and it will be encrypted before sending > the request to parent proxy (man-in-the-middle). > This also should word with https, shouldn't? > > Can I fix this issue f

[squid-users] Re: HTTPS traffic in normal transparent proxy

2012-11-02 Thread Markus
Ok, I understand but I thought that sslbump realize it so that the encrypted data from client will be decrypted and it will be encrypted before sending the request to parent proxy (man-in-the-middle). This also should word with https, shouldn't? Can I fix this issue for me? Security is not importa