Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-12 Thread J Webster
rtmp can be used on squid with a big BUT. since rtmp is a tcp protocol you must allow a CONNECT and destination ports to be used through the proxy. but it's not such a safe and good idea to do so. since the squid box is a router in your case and you will intercept the port 80\443 rtmp will not

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-12 Thread Eliezer Croitoru
On 8/12/2012 11:26 AM, J Webster wrote: rtmp can be used on squid with a big BUT. since rtmp is a tcp protocol you must allow a CONNECT and destination ports to be used through the proxy. but it's not such a safe and good idea to do so. since the squid box is a router in your case and you will

[squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread J Webster
Is there a way to push all openvpn connections using http ports through a transparent squid and how? Also, can I log which openvpn certificate/client is accessing which pages in this way? I assume I would have to use an alternative port or use firewall rules to only allow squid connections from

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread Alex Crow
On 11/08/12 08:20, J Webster wrote: Is there a way to push all openvpn connections using http ports through a transparent squid and how? Also, can I log which openvpn certificate/client is accessing which pages in this way? I assume I would have to use an alternative port or use firewall rules

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread J Webster
But once the tunnel reaches the OpenVPN server, you can direct port 80 and 443 traffic from it via the proxy server can't you? Once it gets to the OpenVPN server (where you would also have the proxy server), isn't it decrypted? Lots of companies have VPN tunnels and then route web traffic

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread Eliezer Croitoru
On 8/11/2012 2:57 PM, J Webster wrote: But once the tunnel reaches the OpenVPN server, you can direct port 80 and 443 traffic from it via the proxy server can't you? Once it gets to the OpenVPN server (where you would also have the proxy server), isn't it decrypted? Lots of companies have VPN

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread J Webster
But once the tunnel reaches the OpenVPN server, you can direct port 80 and 443 traffic from it via the proxy server can't you? Once it gets to the OpenVPN server (where you would also have the proxy server), isn't it decrypted? Lots of companies have VPN tunnels and then route web traffic

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread Alex Crow
On 11/08/12 14:27, Eliezer Croitoru wrote: On 8/11/2012 2:57 PM, J Webster wrote: But once the tunnel reaches the OpenVPN server, you can direct port 80 and 443 traffic from it via the proxy server can't you? Once it gets to the OpenVPN server (where you would also have the proxy server), isn't

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread Eliezer Croitoru
On 8/11/2012 6:15 PM, J Webster wrote: But once the tunnel reaches the OpenVPN server, you can direct port 80 yes as the machine is a router. SNIP of course you can. it's a basic IPTABLES rules and since openvpn uses a tunX interface you can intercept all traffic from the tunX interface to the

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread J Webster
squid is a http proxy and not rtmp. rtmp use other ports then 80\443 and cannot be used over squid(you can if it's tcp and you allow CONNECT and unsafe ports which is not safe.. and will make the vpn connection vulnerable and maybe useless) if you have a solid reason to do so it can be a nice

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread Eliezer Croitoru
On 8/11/2012 8:23 PM, J Webster wrote: squid is a http proxy and not rtmp. rtmp use other ports then 80\443 and cannot be used over squid(you can if it's tcp and you allow CONNECT and unsafe ports which is not safe.. and will make the vpn connection vulnerable and maybe useless) if you have a