Re: [squid-users] (SQUID 4.11) SSl_bump Fails on IOS and Android devices

2020-05-10 Thread Allan Raymond Ignacio
Any other suggestions besides TLS cause i need to have this running for my kids' home schooling as they rely on their ipads (schoology and seesaw)? On Sun, May 10, 2020, 8:00 PM Amos Jeffries wrote: > On 11/05/20 8:26 am, Allan Raymond Ignacio wrote: > > I have compiled and installed SQUID_4.11-

Re: [squid-users] (SQUID 4.11) SSl_bump Fails on IOS and Android devices

2020-05-10 Thread Amos Jeffries
On 11/05/20 8:26 am, Allan Raymond Ignacio wrote: > I have compiled and installed SQUID_4.11-3 with SSL, CRTD on debian10 > and here is my configuration -  > > ... > > ### I can browse https on laptops BUT when I used IOS devices or > android, I get errors with this - > > > 1589083941.053     

Re: [squid-users] deny extensions not working for some https

2020-05-10 Thread Amos Jeffries
On 11/05/20 12:21 pm, robert k Wild wrote: > Sorry I mean when you click that url link it downloads an iso file > > Your right that url link ends with > > id=5842 > Actually that is ".aspx" - the pattern I gave you ignores the query-string. There is actually no relationship between file type a

Re: [squid-users] deny extensions not working for some https

2020-05-10 Thread robert k Wild
Sorry I mean when you click that url link it downloads an iso file Your right that url link ends with id=5842 On Mon, 11 May 2020, 01:17 robert k Wild, wrote: > It ends in an iso extension tho or am I wrong? > > On Mon, 11 May 2020, 01:06 Amos Jeffries, wrote: > >> On 11/05/20 11:00 am, robe

Re: [squid-users] deny extensions not working for some https

2020-05-10 Thread robert k Wild
It ends in an iso extension tho or am I wrong? On Mon, 11 May 2020, 01:06 Amos Jeffries, wrote: > On 11/05/20 11:00 am, robert k Wild wrote: > > so i have made this > > > > #deny extension types > > acl exttype urlpath_regex -i "/usr/local/squid/etc/extdeny.txt" > > http_access deny exttype > >

Re: [squid-users] deny extensions not working for some https

2020-05-10 Thread Amos Jeffries
On 11/05/20 11:00 am, robert k Wild wrote: > so i have made this > > #deny extension types > acl exttype urlpath_regex -i "/usr/local/squid/etc/extdeny.txt" > http_access deny exttype > > /usr/local/squid/etc/extdeny.txt > > \.exe(\?.*)?$ > \.msi(\?.*)?$ > \.msu(\?.*)?$ > \.zip(\?.*)?$ > \.iso(\

[squid-users] deny extensions not working for some https

2020-05-10 Thread robert k Wild
so i have made this #deny extension types acl exttype urlpath_regex -i "/usr/local/squid/etc/extdeny.txt" http_access deny exttype /usr/local/squid/etc/extdeny.txt \.exe(\?.*)?$ \.msi(\?.*)?$ \.msu(\?.*)?$ \.zip(\?.*)?$ \.iso(\?.*)?$ the majority of websites it works, like 7zip, anydesk, teamvi

[squid-users] Terminate squid abnormally

2020-05-10 Thread leomessi983
hi I have an intercepted squid proxy for HTTP and HTTPS requests in my network. I use same DNS-Server on my clients and my squid server, but when my clients try to get HTTPS URLs they got error messages and can not open any URL. Is there any configuration directive in squid to does not resolve re

[squid-users] (SQUID 4.11) SSl_bump Fails on IOS and Android devices

2020-05-10 Thread Allan Raymond Ignacio
I have compiled and installed SQUID_4.11-3 with SSL, CRTD on debian10 and here is my configuration - # SQUID.CONF SNAPSHOT (START) ## # Manual connection on 3128 http_port 3128 # Standard intercept http_port 3129 intercept # intercept & bump SSL connections https_port 3130 inter