Now i can upload, after adding ip addresses from my previous message to ssl_bump none acl. Thank you. On Feb 14, 2015 1:15 PM, "Yuri Voinov" <yvoi...@gmail.com> wrote:
> -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I.e, you want to say you cannot upload file above 25 megabytes? > > 14.02.15 12:55, Dima Ermakov пишет: > > I think, that it's not good solution too, but > > uploadXXX.files.mail.ru has about 100 servers. > > > > Now i write small script on python, that creates a file with ip > > addresses of uploadXXX.files.mail.ru. > > > > Script and list of ip addresses in attachment. > > > > On 13 February 2015 at 22:32, Yuri Voinov <yvoi...@gmail.com> > > wrote: > > > > You have no bump whole .mail.ru domain, which is contains minimum > > 40% and over overall traffic...... Not good solution. > > > > I think, be better to no bump only attachments servers. > > > > 14.02.15 1:28, Dima Ermakov пишет: > >>>> Thank you for your help, but your solution doesn't work on > >>>> my server. I have same error, but other ip addresses of > >>>> uploadXXX.mail.ru servers. Now I use: acl mail_ru dstdomain > >>>> .mail.ru ssl_bump none mail_ru > >>>> > >>>> > >>>> Good day! > >>>> > >>>> On 13 February 2015 at 21:37, Yuri Voinov > >>>> <yvoi...@gmail.com> wrote: > >>>> > >>>> Dmitry, > >>>> > >>>> you need to pass mail.ru attachments servers as dst no bump > >>>> ACL's to work. > >>>> > >>>> In my configuration I use following workaround: > >>>> > >>>> squid.conf: > >>>> > >>>> # Only ip-based dst acl! acl dst_nobump dst > >>>> "/usr/local/squid/etc/dst.nobump" > >>>> > >>>> # SSL bump rules sslproxy_cert_error allow all ssl_bump none > >>>> localhost ssl_bump none url_nobump ssl_bump none dst_nobump > >>>> ssl_bump server-first net_bump > >>>> > >>>> (squid 3.4.11) > >>>> > >>>> dst.nobump contents contains: > >>>> > >>>> # Attachments Mail.ru 94.100.180.215/32 94.100.180.216/32 > >>>> 217.69.139.215/32 217.69.139.216/32 217.69.139.126/32 > >>>> > >>>> That's all. Works for me. > >>>> > >>>> Hope this helps. > >>>> > >>>> WBR, Yuri > >>>> > >>>> 14.02.15 0:32, Dima Ermakov пишет: > >>>>>>> Good day! > >>>>>>> > >>>>>>> I have a problem with squid proxy in intercept > >>>>>>> ssl_bump mode. > >>>>>>> > >>>>>>> If I want to attach big file (>25MB) to my e-mail > >>>>>>> message on https://mail.ru web site, I have error "Can > >>>>>>> not upload file". > >>>>>>> > >>>>>>> Into access.log I have errors: TCP_MISS_ABORTED/000 > >>>>>>> > >>>>>>> My squid configuration, access.log, cache.log in > >>>>>>> attachment. Thank you! > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> _______________________________________________ > >>>>>>> squid-users mailing list > >>>>>>> squid-users@lists.squid-cache.org > >>>>>>> http://lists.squid-cache.org/listinfo/squid-users > >>>>>>> > >>>>> _______________________________________________ > >>>>> squid-users mailing list squid-users@lists.squid-cache.org > >>>>> http://lists.squid-cache.org/listinfo/squid-users > >>>>> > >>>> > >>>> > >>>> > >>>> > >>>> > >>>> _______________________________________________ squid-users > >>>> mailing list squid-users@lists.squid-cache.org > >>>> http://lists.squid-cache.org/listinfo/squid-users > >>>> > >> _______________________________________________ squid-users > >> mailing list squid-users@lists.squid-cache.org > >> http://lists.squid-cache.org/listinfo/squid-users > >> > > > > > > > > > > > > _______________________________________________ squid-users mailing > > list squid-users@lists.squid-cache.org > > http://lists.squid-cache.org/listinfo/squid-users > > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2 > > iQEcBAEBAgAGBQJU3yBFAAoJENNXIZxhPexG/OwIAMg7v5BZTXx3tbGMbL8451zl > gYxLJoY+ooUk5kj90jgQjJr4XhFkdmH+GKM5MTn8o0lVnMrk9O6kA8XHVTTzirzR > k5Eo5Fv4ubdztwAnWkxGH1Oy4rkPjuySIRpejrlomtUqhOBqNDTS1PV0m049+CIc > gRiDir6jnVzCrNTv6vt8K1BJP8mS/lPNY0jBNYnm147NkLoV5hNZs+Y1PwOjIAxd > oT6+msic8jBrL4eNl2toqstimff3EoCl6VBhSwBMAPKoXA90cD09cVWIbijZEv6t > TK6J0RQm79DSvIx3R/YeeaEx2N1su4PJsuO/mnJHf0rrqq0eOzzUxIYpcyX/H+E= > =0+ks > -----END PGP SIGNATURE----- > _______________________________________________ > squid-users mailing list > squid-users@lists.squid-cache.org > http://lists.squid-cache.org/listinfo/squid-users >
_______________________________________________ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users