Re: [squid-users] SSL sites bypass authentication

2012-03-20 Thread Milen Pankov
On 20.03.2012 03:54, Amos Jeffries wrote: > So: > - user configured browser to use a proxy > - browser does not use proxy > > How is disobeying its own configuration details *not* a browser problem? > > Answer: when the problem is the user themselves misunderstanding the > browser configuration

Re: [squid-users] SSL sites bypass authentication

2012-03-20 Thread Milen Pankov
On 20.03.2012 07:31, Vishal Agarwal wrote: > Hi Amos, > > You are right. > > Will this work with transferring all the traffic to http port from iptables ? > > Iptables -t nat -A PREROUTING -s 192.168.1.0/24 -p tcp --dport 80 -j REDIRECT > --to-destination serverip:3128 > > And further checki

Re: [squid-users] SSL sites bypass authentication

2012-03-19 Thread Milen Pankov
On 19.03.2012 19:09, Matus UHLAR - fantomas wrote: > > it's impossible for the proxy to pass error page to the browser, when > the user bypasses the proxy and connects to the website directly. > > You must deny direct access to HTTPS (port 443) sites by a firewall and > force browsers to use the

Re: [squid-users] SSL sites bypass authentication

2012-03-19 Thread Milen Pankov
On 19.03.2012 07:35, Amos Jeffries wrote: > Tried the current 3.1.19 release? > > Is the second HTTPS request even going through the proxy? > > What is the rest of the config look like? > The partial piece of config you posted has no holes which this could be > using. > > Amos Hi, Thank you for

[squid-users] SSL sites bypass authentication

2012-03-18 Thread Milen Pankov
Hi, I have been using squid with basic authentication from quite some time without problems while recently I discovered that anyone can open https addresses trough the proxy without authenticating. If someone refuses the authentication dialog (clicks on Cancel) and receives a squid access denied e

[squid-users] squid_db_auth to support md5 encrypted passwords patch

2010-07-08 Thread Milen Pankov
Hi, Recently I needed to use squid_db_auth against mysql database with md5 encrypted passwords. I read a recent discussion on this list (Joomla DB authentication support hits Squid!:)) that was regarding integration with joomla database, but this wasn't working for me. Here's a patch that makes