Re: [squid-users] ssl-bump does not redirect to block page

2019-02-13 Thread Alex Rousskov
On 2/12/19 11:22 PM, leomessi...@yahoo.com wrote: > Actually i don't understand if it could be done or not!! And I do not know what you mean by "it" here. * Can Squid send a blocking error page to an HTTPS client? Yes. * Will the browser show that error page to the user without any additional w

Re: [squid-users] Problem rtmp traffic through Squid

2019-02-13 Thread Amos Jeffries
On 14/02/19 2:19 am, Герасимов Никита Вячеславович wrote: > Thanks, but a guess we already opened: > We have settings like this: > > diff squid.conf squid.conf.old > 40c40 > < acl SSL_ports port 443 563 1935 > --- >> acl SSL_ports port 443 563 > > acl imind_ru_flash port 1935 1936 > acl imind_r

Re: [squid-users] Compiling with OpenSSL 1.1+

2019-02-13 Thread Santschi Yann
Many thanks for your help. I could have squid compiled. Squid was unable to find the OpenSSL installation because I didn't set the "--prefix" flag when I compiled OpenSSL. Once I set it with the same value as "--openssldir" squid compilation worked. I'm using CentOS 7 and OpenSSL 1.0.2 are in

Re: [squid-users] Problem rtmp traffic through Squid

2019-02-13 Thread Amos Jeffries
On 14/02/19 1:37 am, Ahmad, Sarfaraz wrote: > Did you add them to “safe_ports” acl ? ( assuming you have one ) > Port 1935 is already part of the Safe_ports ACL by default. What it is not part of is the SSL_Ports ACL which prohibits almost all ports having CONNECT tunnels opened. If the Flash a

Re: [squid-users] Problem rtmp traffic through Squid

2019-02-13 Thread Ahmad, Sarfaraz
Did you add them to "safe_ports" acl ? ( assuming you have one ) Look here some more inputs, http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-conf-blocking-live-video-stream-td4680866.html From: squid-users On Behalf Of ? ?? Sent: Wednesday, February 13, 2019

Re: [squid-users] ssl-bump does not redirect to block page

2019-02-13 Thread Amos Jeffries
On 14/02/19 1:10 am, leomessi983 wrote: > I use this configuration to solve my problem. > Whit this configuration at first step I use bump action for sites that i > want to block and show ACCESS_DENIED page then splice all other requests!! > My problem in this config is when my clients want to see

[squid-users] Problem rtmp traffic through Squid

2019-02-13 Thread Герасимов Никита Вячеславович
Hello! In our organization, we use squid proxy server. And we found a problem with viewing webinars that run on adobe Flash. Network engineers found out that rtmp traffic on port 1935 bypasses the proxy server, which is specified in the browser settings. In this connection, the site does not wor

Re: [squid-users] ssl-bump does not redirect to block page

2019-02-13 Thread leomessi...@yahoo.com
operly bump the client connection using just step1 > knowledge). > A packet capture or an ALL,2 cache.log may distinguish those two cases. > Alex. Hi Alex Actually i don't understand if it could be done or not!! Amos said it is impossible you said no!! can you show me the correct

Re: [squid-users] Compiling with OpenSSL 1.1+

2019-02-13 Thread Amos Jeffries
On 13/02/19 10:26 pm, Santschi Yann wrote: > Hello everybody, > > I'm trying to compile Squid 4.4 with OpenSSL 1.1.1a and I'm getting > compilation errors like this one : > > > In file included from ../../src/security/Context.h:15:0, > from ../../src/security/forward.h:13, >    

[squid-users] Compiling with OpenSSL 1.1+

2019-02-13 Thread Santschi Yann
Hello everybody, I'm trying to compile Squid 4.4 with OpenSSL 1.1.1a and I'm getting compilation errors like this one : In file included from ../../src/security/Context.h:15:0, from ../../src/security/forward.h:13, from ../../src/SquidConfig.h:21,