Re: [squid-users] SSL-Bump to specific users

2015-10-30 Thread Amos Jeffries
On 31/10/2015 7:36 a.m., Rodrigo de Lima Silva wrote: >> >>> >>> There's a way to join ssl_bump + a simple acl? Basicly, I would like to >>> permit access to some sites, like facebbok, linkedin, for example. >> during a >>> period of day time, for example: >>> >>> acl after_work time MTWHFAS 18:00-

Re: [squid-users] SSL-Bump to specific users

2015-10-30 Thread Amos Jeffries
On 31/10/2015 5:36 a.m., Rodrigo de Lima Silva wrote: > Thanks for your reply Alex, > > I understood your considerations. Maybe, I really didn't understand very > well how the SslBump works, the differences between peek and splice and > steps SslBump1, 2 and 3. > > I'm searching and studing about

Re: [squid-users] SSL-Bump to specific users

2015-10-30 Thread Alex Rousskov
On 10/30/2015 10:36 AM, Rodrigo de Lima Silva wrote: > There's a way to join ssl_bump + a simple acl? Basicly, I would like to > permit access to some sites, like facebbok, linkedin, for example. > during a period of day time, for example: > > acl after_work time MTWHFAS 18:00-21:00 > ssl_bump te

Re: [squid-users] SSL-Bump to specific users

2015-10-30 Thread Rodrigo de Lima Silva
Thanks for your reply Alex, I understood your considerations. Maybe, I really didn't understand very well how the SslBump works, the differences between peek and splice and steps SslBump1, 2 and 3. I'm searching and studing about this last two days, and I need to undertand better about this quest

Re: [squid-users] SSL-Bump to specific users

2015-10-29 Thread Alex Rousskov
On 10/29/2015 04:09 PM, Rodrigo de Lima Silva wrote: > I've been configured Squid version 3.5.9 and transparent proxy. To do > this. I used the "peek and splice" feature to works with https protocol > in transparent mode. It's works fine. > > There is a "acl" to block some sites, like facebook.co

[squid-users] SSL-Bump to specific users

2015-10-29 Thread Rodrigo de Lima Silva
Hi all, I've been configured Squid version 3.5.9 and transparent proxy. To do this. I used the "peek and splice" feature to works with https protocol in transparent mode. It's works fine. There is a "acl" to block some sites, like facebook.com, linkedin.com, etc... It's works fine too. acl deny_