[squid-users] Exclude users ip from white listed Ssl bump sites

2017-03-01 Thread Test1964
Hi, I exclude some sites like Banks (or even gmail.com) from ssl bump like this: acl exclude_sites ssl::server_name .banks.com ssl_bump peek step1 all ssl_bump splice exclude_sites ssl_bump stare step2 all ssl_bump all and this works for all users. How can I exclude some users based on users

Re: [squid-users] Squid 3.5.24 - Url_rewrite with ssl_bump in Transparent Mode

2017-02-25 Thread Test1964
Hi, About block urls, I run Php script that get Url and User ip and check in "Sqlite DB" if to Block (our users have fixed ip addr). Dan. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-u

Re: [squid-users] Squid 3.5.24 - Url_rewrite with ssl_bump in Transparent Mode

2017-02-25 Thread Test1964
Hi,  About block urls, I run Php script that get Url and User ip and check in  "Sqlite  DB"  if to Block (our users have fixed ip addr). Dan On 25-Feb-17 09:35, Amos Jeffries wrote: On 25/02/2017 8:28 p.m., Test

[squid-users] Squid 3.5.24 - Ssl Bump tlsv1 alert unknown ca

2017-02-22 Thread Test1964
HI, when using squid in transparent mode and try to access https://www.facebook.com from computer all working very well, but when I try to use Facebook app (on Iphone for example), I'm getting this error in cache.log: Error negotiating SSl connection on FD XX: error:14094418:SSL routines:SSL

[squid-users] Squid 3.5.24 - Url_rewrite with ssl_bump in Transparent Mode

2017-02-19 Thread Test1964
Hi, When I exclude some sites (like banks) with ssl_bump peek/splice that works well, Got a new problem that sites (that I exclude) can not be blocked using Url_Rewrite. I use Url_rewrite to block sites based on User IP and all all other sites(no in exclude list) it working very well. How

[squid-users] Squid 3.5.24 - Exclude https sites from ssl_bump in Transparent Mode

2017-02-19 Thread Test1964
Hi, When I try to exclude some sites like Banks (or even gmail.com) for users using squid in TRANSPARENT Mode, I get in Squid log : "SECURITY ALERT: On URL..." (all servers and users using same dns, so this not an issue). My config file regard to this: acl step1 at_step SslBump1 acl step2