Search squid archive

Skype bypass using ssl_bump peek

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> Only if "skype_list" matches the TCP packet IP address (without rDNS
> being looked up) will the peek happen.

> I think you need to add at_step ACL test to peek always at step1, then
> do the other actions at step2 once SNI (domain name) is possibly
> available.

Hello Amos,

What if a non-SSL over 443 or a non-HTTP over SSL connections?
Skype voice connection seems an non standard SSL negotiation(Partial Handshake),
is it possible revert to tunnel mode at steps to bypass connection?

Thx.
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux