Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-21 Thread A. Pechenin
But I don't use sslbump in the proxy server configuration. In general, I do not understand the procedure for further actions to resolve the problem. вс, 22 дек. 2024 г. в 00:01, Jonathan Lee : > You apply it as a custom setting in Squid. I would seek out what header > request is failing and star

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-21 Thread A. Pechenin
No, ssl_bump is not used in any form in Squid, I intentionally reproduced the problem on the default configuration file. In access.log i do not observe any questionable recordings when reproducing the problem: acl hasRequest has request access_log daemon:/var/log/squid/access.log squid hasRequest

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-21 Thread Alex Rousskov
On 2024-12-21 12:26, A. Pechenin wrote: This week, when connecting users through a proxy server, some Google services became inaccessible, such as Calendar, Translator, user profile. Do you use any ssl_bump directives? You have mentioned a test with "default configuration file" below. That con

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-21 Thread Jonathan Lee
Yes, you would need to find the http get request for that specific item and add it as splice always. I do not know what request your country uses mine it’s Gmail and other items but you can add domain approvals, because you use them and they are trusted. I do not know what you have for the get requ

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-21 Thread Jonathan Lee
You apply it as a custom setting in Squid. I would seek out what header request is failing and start from there to fix your issue. Good luck. > On Dec 21, 2024, at 12:18, A. Pechenin wrote: > > OK, but how can ACL data be applied in practice to solve the problem I > described? > > сб, 21

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-21 Thread A. Pechenin
I do not use users with Android and iOS, all my users are Windows clients with Google and Mozilla Firefox browsers and Yandex Browser. сб, 21 дек. 2024 г. в 23:10, Jonathan Lee : > Ref: > Android Enterprise Network Requirements - Android Enterprise Help >

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-21 Thread A. Pechenin
OK, but how can ACL data be applied in practice to solve the problem I described? сб, 21 дек. 2024 г. в 22:57, Jonathan Lee : > You can use the following > > acl NoSSLIntercept ssl::server_name_regex -i > "/usr/local/pkg/reg.url.nobump" > acl NoBumpDNS dstdomain "/usr/local/pkg/dns.nobump" > > I

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-21 Thread Jonathan Lee
Ref: Android Enterprise Network Requirements - Android Enterprise Help Android Enterprise Network Requirements - Google Help The following article has been designed for IT

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-21 Thread Jonathan Lee
You can use the following acl NoSSLIntercept ssl::server_name_regex -i "/usr/local/pkg/reg.url.nobump" acl NoBumpDNS dstdomain "/usr/local/pkg/dns.nobump" I created a regex based no bump file and or use a dns based no bump file to mark splice only sites. Example of what is in reg.url.nobump fil

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-21 Thread A. Pechenin
I apologize for the formatting of the text of the letter? I will be incorrect if I do not say that there are entries in the cache.log, although the IP does not resolve directly to google subdomains, but according to whois, this is the Google LLC farm. 2024/12/21 21:54:57 kid1| conn43356657 local

Re: [squid-users] SQUID problem with unavailability of Google services

2024-12-21 Thread Jonathan Lee
Have you created a splice only file with lists of items that must be spliced at all times, Google mail ethically should be spliced just as an example. Some know sites must be spliced. Sent from my iPhone > On Dec 21, 2024, at 09:32, A. Pechenin wrote: > >  > This week, when connecting users

[squid-users] SQUID problem with unavailability of Google services

2024-12-21 Thread A. Pechenin
This week, when connecting users through a proxy server, some Google services became inaccessible, such as Calendar, Translator, user profile. When clicking on the services section in the browser on the Google portal, the page does not open and then a connection error is displayed. When directly