Ok i read the doc but I am afraid i do not know where yo start I know that netflix traffic comes from these server domains .netflix.com .ntflx.com .ntflximg.com .ntflxvideo.com But how can I setup my config file to just tell squid do not bump netflix traffic and i am not interested in caching it or guarding against it How can I use splice for that?
Sent from my iPhone > On Mar 2, 2016, at 12:48 PM, Yuri Voinov <yvoi...@gmail.com> wrote: > > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > With peek and splice feature. > > http://wiki.squid-cache.org/Features/SslPeekAndSplice > > 03.03.16 2:45, Bmahak2005 пишет: > > Thanks for the hint. How can I > do that ? > > > > > > > > > Sent from my iPhone > > > > > >> On Mar 2, 2016, at 11:09 AM, Yuri Voinov > <yvoi...@gmail.com> wrote: > > >> > > >> > > > Nobody can fight SSL pinning in proprietary apps. > > > > > > The only way I see is to put Netflex under splice ACL and do > not do SSL > > > bump for all Netflex CDN. > > > > > > 02.03.16 22:29, bma пишет: > > > >>> I have installed squid 3.15 on ubuntu 15.10 > server. squid was setup with > > > >>> sslbump for https traffic. The functionality > work without any problem > > > i.e. : > > > >>> all traffic from both http and https goes > through squid and all > > > internet can > > > >>> be accessed on all devices where certificates > are installed. With one > > > >>> exception : 'Netflix APP' no longer works on IOS > devices (iPhone, > > > iPad). no > > > >>> matter what I do. All other internet services > (safari, and other apps) > > > work > > > >>> properly on those devices. And I was able to run > Netflix from browser on > > > >>> linux boxes and even OS X safari. The only thing > that is not working is > > > >>> Netflix APP on IOS. > > > >>> > > > >>> Of course if I disable sslbump and only allow > http to go through squid > > > >>> netflix works. I tried both transparent mode and > proxy mode on the iPhone, > > > >>> still not working. > > > >>> > > > >>> Did anyone manage to make Netflix APP on IOS > devices work with squid with > > > >>> sslbump enabled ? > > > >>> > > > >>> > > > >>> > > > >>> -- > > > >>> View this message in context: > > > > http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-with-sslbump-blocking-Netflix-tp4676381.html > > > >>> Sent from the Squid - Users mailing list archive > at Nabble.com. > > > >>> _______________________________________________ > > > >>> squid-users mailing list > > > >>> squid-users@lists.squid-cache.org > > > >>> > http://lists.squid-cache.org/listinfo/squid-users > > > > > >> > > >> <0x613DEC46.asc> > > >> _______________________________________________ > > >> squid-users mailing list > > >> squid-users@lists.squid-cache.org > > >> http://lists.squid-cache.org/listinfo/squid-users > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2 > > iQEcBAEBCAAGBQJW11GEAAoJENNXIZxhPexGsMIIAIJemE2gpPVJCo8Licrt6Hs6 > vIxFb8KHUkq+sXRlRtJbqjwmHPU8m59wcHsVnsJfBFpDdOkd5sMDiBKs9xeTDKAQ > dFgtVW9LORvrienTKca3IhRoBlka/BdePA4vF00OosaGw47fQ20KjmjgPmgRihEs > I5RI1qxnB8RAmmQjMcS+vS6qtXYUkNBJlH6e6vDiuI2FlPDzuLWcGXD78PLJceGd > wWgIVWtQv6zjsBe4eMQzWC61xQ1ms+1ISTaihlyyBIztq1hIFtrOaoghXCJ1Ue6r > pdp+nqIuXbvbgC15fYC1gGJjaznenpPrJJ9gMszAKRuL9gfNGMHjCPZCbv4U/NE= > =TXwl > -----END PGP SIGNATURE----- > > <0x613DEC46.asc>
_______________________________________________ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users