Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

2016-12-07 Thread Eliezer Croitoru
aissi [mailto:sameh.onai...@solcv.com] Sent: Thursday, December 8, 2016 12:51 AM To: Eliezer Croitoru Cc: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S Hello, thank you Eliezer! We managed to fix the issue, but we created an

Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

2016-12-07 Thread Sameh Onaissi
e: +972-5-28704261 Email: elie...@ngtech.co.il From: Sameh Onaissi [mailto:sameh.onai...@solcv.com] Sent: Wednesday, December 7, 2016 10:11 PM To: Eliezer Croitoru Cc: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S iptabl

Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

2016-12-07 Thread Eliezer Croitoru
, 2016 10:11 PM To: Eliezer Croitoru Cc: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S iptables is the same.. here is after I ran the script twice (with and without proxy) http://pastebin.com/YFtbG6St I have a script th

Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

2016-12-07 Thread Sameh Onaissi
he.org Subject: Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S iptables-save: http://pastebin.com/9JrVANtt ipset list : http://pastebin.com/wtMtzaQe http://pastebin.com/wtMtzaQe http://pastebin.com/wtMtzaQe pastebin.com http://pastebin.com/9JrVANtt ht

Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

2016-12-07 Thread Eliezer Croitoru
6:09 PM To: Eliezer Croitoru Cc: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S iptables-save:  http://pastebin.com/9JrVANtt ipset list : http://pastebin.com/wtMtzaQe http://pastebin.com/wtMtzaQe http://pastebin.com/w

Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

2016-12-07 Thread Sameh Onaissi
nistrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il From: Sameh Onaissi [mailto:sameh.onai...@solcv.com] Sent: Wednesday, December 7, 2016 5:23 PM To: Eliezer Croitoru Cc: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Skype for Business behind a transparent squid (TProxy) H

Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

2016-12-07 Thread Eliezer Croitoru
...@ngtech.co.il From: Sameh Onaissi [mailto:sameh.onai...@solcv.com] Sent: Wednesday, December 7, 2016 5:23 PM To: Eliezer Croitoru Cc: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S Still not working and I do not know what

Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

2016-12-07 Thread Sameh Onaissi
naissi [mailto:sameh.onai...@solcv.com] Sent: Wednesday, December 7, 2016 12:36 AM To: Eliezer Croitoru Cc: 'Amos Jeffries' ; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S Hello Eliezer and thanks again. I ran the script

Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

2016-12-07 Thread Eliezer Croitoru
Cc: 'Amos Jeffries' ; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S Hello Eliezer and thanks again. I ran the script with the tproxy argument. Tried to reconnect skype for business...  After about a 3 min w

Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

2016-12-07 Thread Sameh Onaissi
r http://ngtech.co.il/lmgtfy/ Linux System Administrator Mobile: +972-5-28704261 Email: mailto:elie...@ngtech.co.il From: Sameh Onaissi [mailto:sameh.onai...@solcv.com] Sent: Tuesday, December 6, 2016 7:29 PM To: Eliezer Croitoru <mailto:elie...@ngtech.co.il> Cc: Amos Jeffries <mailto:squ..

Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

2016-12-06 Thread Amos Jeffries
On 7/12/2016 11:35 a.m., Sameh Onaissi wrote: > > a new set showed up... > > what more can we do? > > keep adding ip ranges? Yes, this choice of approach means constatly keeping an eye out for and adding ranges as needed. Amos ___ squid-users mailin

Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

2016-12-06 Thread Eliezer Croitoru
, December 7, 2016 12:36 AM To: Eliezer Croitoru Cc: 'Amos Jeffries' ; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S Hello Eliezer and thanks again. I ran the script with the tproxy argument. Tried to reconnect

Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

2016-12-06 Thread Sameh Onaissi
s Jeffries ; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S Yes please, I would appreciate help with that script. As I aforementioned, totally new to all this Piensa en el medio ambiente antes de imprimir este email.

Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

2016-12-06 Thread Eliezer Croitoru
.@treenet.co.nz>; mailto:squid-users@lists.squid-cache.org Subject: Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S Hello, OK, I added the ssl_bump slice on the skype domains text file I installed ipset and ran the script. Now access.log has much less skype rela

Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

2016-12-06 Thread Sameh Onaissi
: Eliezer Croitoru <mailto:elie...@ngtech.co.il> Subject: Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S Amos, thanks for the reply. This is getting more confusing. I changed the script to: http://pastebin.com/jLgywstg And I ran it, but I am getting errors:

Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

2016-12-06 Thread Eliezer Croitoru
zer Croitoru <mailto:elie...@ngtech.co.il> Subject: Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S Amos, thanks for the reply. This is getting more confusing. I changed the script to: http://pastebin.com/jLgywstg And I ran it, but I am getting erro

Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

2016-12-06 Thread Sameh Onaissi
o.il> From: Sameh Onaissi [mailto:sameh.onai...@solcv.com] Sent: Tuesday, December 6, 2016 5:23 PM To: Amos Jeffries mailto:squ...@treenet.co.nz>> Cc: Eliezer Croitoru mailto:elie...@ngtech.co.il>> Subject: Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTT

Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

2016-12-06 Thread Pieter De Wit
If that is the edge server then it will be the audio/video Sent from my iPhone > On 6/12/2016, at 12:35, Amos Jeffries wrote: > >> On 6/12/2016 11:46 a.m., Sameh Onaissi wrote: >> >> I have a Ubuntu 16.04 server with Squid 3.5.22 installed. It acts as a >> gateway in a LAN. >> >> It is confi

Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

2016-12-05 Thread Amos Jeffries
On 6/12/2016 1:11 p.m., Sameh Onaissi wrote: Hey, Let me see if I understood that right. I can change TPROXY to REDIRECT in my iptables.sh and in the ssl-bump replace proxy with intercept. You _can_ but dont have to. It is just an optimization made possible by what that machine is doing to

Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

2016-12-05 Thread Sameh Onaissi
2016 1:28 AM To: Eliezer Croitoru mailto:elie...@ngtech.co.il>> Cc: squid-users@lists.squid-cache.org<mailto:squid-users@lists.squid-cache.org> Subject: Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S Hello Eliezer, thank you for the reply. Honestly, to get

Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

2016-12-05 Thread Amos Jeffries
On 6/12/2016 11:46 a.m., Sameh Onaissi wrote: I have a Ubuntu 16.04 server with Squid 3.5.22 installed. It acts as a gateway in a LAN. It is configured to intercept HTTP and HTTPS traffic (Transparent). So iptables redirects were used for ports 80 and 443. The server runs two scripts: _*nat

Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

2016-12-05 Thread Sameh Onaissi
Sameh Onaissi Sent: Tuesday, December 6, 2016 12:47 AM To: squid-users@lists.squid-cache.org<mailto:squid-users@lists.squid-cache.org> Subject: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S I have a Ubuntu 16.04 server with Squid 3.5.22 installed. It acts as a

[squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

2016-12-05 Thread Sameh Onaissi
I have a Ubuntu 16.04 server with Squid 3.5.22 installed. It acts as a gateway in a LAN. It is configured to intercept HTTP and HTTPS traffic (Transparent). So iptables redirects were used for ports 80 and 443. The server runs two scripts: nat.sh to bridge the two network cards, allowing LAN co