Re: [squid-users] Skype, SSL bump and go.trouter.io

2016-07-07 Thread Eliezer Croitoru
rator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Steve Hill Sent: Wednesday, July 6, 2016 5:47 PM To: squid-users@lists.squid-cache.org Subject: [squid-users] Skype, SSL bum

Re: [squid-users] Skype, SSL bump and go.trouter.io

2016-07-07 Thread Alex Rousskov
On 07/07/2016 10:12 AM, Steve Hill wrote: > I've compared the headers and the original contains: > Upgrade: websocket > Connection: Upgrade > > Unfortunately, since Squid doesn't support websockets I think there's no > way around this Squid can be taught to recognize HTTP upgrades to un

Re: [squid-users] Skype, SSL bump and go.trouter.io

2016-07-07 Thread Steve Hill
On 07/07/16 11:07, Eliezer Croitoru wrote: Can you verify please using a debug 11,9 that squid is not altering the request in any form? Such as mentioned at: http://bugs.squid-cache.org/show_bug.cgi?id=4253 Thanks for this. I've compared the headers and the original contains: Upgrade

Re: [squid-users] Skype, SSL bump and go.trouter.io

2016-07-07 Thread Eliezer Croitoru
elie...@ngtech.co.il -Original Message- From: Steve Hill [mailto:st...@opendium.com] Sent: Thursday, July 7, 2016 11:45 AM To: Eliezer Croitoru; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Skype, SSL bump and go.trouter.io On 06/07/16 20:44, Eliezer Croitoru wrote: > There ar

Re: [squid-users] Skype, SSL bump and go.trouter.io

2016-07-07 Thread Steve Hill
On 06/07/16 20:44, Eliezer Croitoru wrote: There are couple options to the issue and a bad request can happen if squid transforms or modifies the request. Did you tried to use basic debug sections output to verify if you are able to "replicate" the request using a tiny script or curl? I think th

Re: [squid-users] Skype, SSL bump and go.trouter.io

2016-07-06 Thread Eliezer Croitoru
ists.squid-cache.org] On Behalf Of Steve Hill Sent: Wednesday, July 6, 2016 5:47 PM To: squid-users@lists.squid-cache.org Subject: [squid-users] Skype, SSL bump and go.trouter.io I've been finding some problems with Skype when combined with TProxy and HTTPS interception and wondered if anyon

[squid-users] Skype, SSL bump and go.trouter.io

2016-07-06 Thread Steve Hill
I've been finding some problems with Skype when combined with TProxy and HTTPS interception and wondered if anyone had seen this before: Skype works so long as HTTPS interception is not performed and traffic to TCP and UDP ports 1024-65535 is allowed directly out to the internet. Enabling S