Re: [squid-users] Questions about Squid configuration

2024-10-03 Thread Alex Rousskov
On 2024-09-25 01:57, にば wrote: We then added the following settings that were in the existing Squid proxy # SSL_BUMP acl allowed_https_sites ssl::server_name "/etc/squid/whitelist" acl allowed_https_sites ssl::server_name "/etc/squid/whitelist_transparent" acl allowed_https_sites ssl::server_na

Re: [squid-users] Questions about Squid configuration

2024-09-24 Thread にば
Dear Alex. Thank you for your advice! >Do you run these "curl" commands on the same box that runs Squid? No, we have a Squid validation environment on an AWS EC2 instance, and the instance for Squid and the instance for running curl commands are separate. >However, you may want to double check w

Re: [squid-users] Questions about Squid configuration

2024-09-10 Thread Alex Rousskov
On 2024-09-05 04:58, にば wrote: I took the advice I received, reviewed the verification details, and verified again with the two recommended steps. The new verification includes the following four patterns: 1. successful communication of a valid request to an allowed site [command] curl https://p

Re: [squid-users] Questions about Squid configuration

2024-09-05 Thread にば
I'm sorry. I forgot to attach the configuration file used in the verification (partially masked). 2024年9月5日(木) 17:58 にば : > > Hi Alex > > Thanks for the reply ! > > I took the advice I received, reviewed the verification details, and > verified again with the two recommended steps. > The new verif

Re: [squid-users] Questions about Squid configuration

2024-09-05 Thread にば
Hi Alex Thanks for the reply ! I took the advice I received, reviewed the verification details, and verified again with the two recommended steps. The new verification includes the following four patterns: 1. successful communication of a valid request to an allowed site [command] curl https://py

Re: [squid-users] Questions about Squid configuration

2024-08-30 Thread Alex Rousskov
On 2024-08-29 22:28, にば wrote: With the newly reviewed configuration in the attachment OT: Please note that your configuration does not follow the recommended http_access rules order template in squid.conf.default and might, depending on your deployment environment, allow Squid to be used fo

Re: [squid-users] Questions about Squid configuration

2024-08-29 Thread にば
Alex, people in the Suquid community I really appreciate your cooperation. I am continuing to verify this based on the responses I have received. With the newly reviewed configuration in the attachment, I was able to confirm that any one of the SNI, IP, or Host in the request is incorrect (not wh

Re: [squid-users] Questions about Squid configuration

2024-08-08 Thread Alex Rousskov
On 2024-08-06 20:59, にば wrote: When using Squid transparently, is it possible to control the whitelist of the domain to connect to and inspect the Host field in the request header together? Short answer: Yes. According to the verification results, the Host field can be inspected by "host_ve

[squid-users] Questions about Squid configuration

2024-08-06 Thread にば
Dear Squid Community Nice to meet you. I am a newbie who just recently started using Squid. I have a question about Squid configuration. If there is any missing information or clarification, please let me know... ■Questions When using Squid transparently, is it possible to control the whitelist o