e certificate.
> If for any reason it doesn't work you can try ssl::server_name_regex with
> something like:
> (^|\.)activate\.redshift3d\.com$
>
> Or just to verify if there is a bug in squid code try:
> (^|\.)activate\.redshift3d\.com
>
> Now, the splice should be
eve this is considered a summary of the subject and if Alex and others
might think so it can be converted into an example article in the wiki.
Let me know if this makes sense and resolve the issue.
Yours,
Eliezer
From: robert k Wild
Sent: Thursday, June 29, 2023 12:18
To: ngtech1...@gmail.co
alnet special_url_any_of
> http_access deny all
> ## END OF FILE
>
> Once the above will work try to add other http_access rule like reply
> access rules
>
> Let me know what happens,
> Eliezer
>
> From: robert k Wild
> Sent: Tuesday, June 27, 2023 09:36
> To: ngtech
special_url_any_of
http_access deny all
## END OF FILE
Once the above will work try to add other http_access rule like reply access
rules
Let me know what happens,
Eliezer
From: robert k Wild
Sent: Tuesday, June 27, 2023 09:36
To: ngtech1...@gmail.com
Cc: Squid Users
Subject: Re: [squi
On 6/27/23 16:29, robert k Wild wrote:
Ok I've literally commented out "http deny all" so the proxy isn't
blocking anything and allowing everything
http_access allow activation whitelist
#http_access deny all
And still it's not allowing this specific URL to go through the proxy
activate.redsh
Ok I've literally commented out "http deny all" so the proxy isn't blocking
anything and allowing everything
http_access allow activation whitelist
#http_access deny all
And still it's not allowing this specific URL to go through the proxy
activate.redshift3d.com
Well it is but it isn't, as it'
Hi Eliezer,
this is a snippet of my whitelist and no intercept SSL config
#SSL Interception
acl DiscoverSNIHost at_step SslBump1
acl NoSSLIntercept ssl::server_name_regex
"/usr/local/squid/etc/interceptssl.txt"
ssl_bump peek DiscoverSNIHost
ssl_bump splice NoSSLIntercept
ssl_bump bump all
#
#SSL
Hey Robert,
I am not sure what forward proxy setup you have there.
A simple forward proxy?
What tool are you using for whitelisting?
You can use an external acl helper to allow dynamic updates of the whitelists or
to periodic update your lists and reload.
It will depend on the size of your lists.
