Typically one wishes to block Skype, but I'd like to enable it :-) Looking at the access.log, the following domains were excluded from ssl bump: .skype.com .skypeassets.com skype.tt.omtrdc.net But skype still tried for ages to login and never succeeds. In skype, despite have configure a proxy, it still tries to do lots of direct connections too. I did find a skype admin guide, but nothing useful on how to debug that opaque tool's traffic.. https://support.skype.com/resources/sites/SKYPE/content/live/DOCUMENTS/0/DO5/en_US/skype-it-administrators-guide.pdf Running 3.HEAD-20120814-r12282. Any tips? Sean