On 2/02/2015 7:16 a.m., Yuri Voinov wrote: > > > 01.02.2015 23:48, Walter H. пишет: >> Hello, > <snip> >> acl ssl_bump_domains_bankingsites dstdomain banking.raiffeisen.at > banking.ing-diba.at ebanking.easybank.at services.kepler.at > www.kepler.at www.rcb.at >> acl ssl_bump_domains_msftupdates dstdomain .update.microsoft.com >> ssl_bump none ssl_bump_domains_bankingsites >> ssl_bump none ssl_bump_domains_msftupdates >> ssl_bump server-first all > You do it wrong. You don't know site names BEFORE bump. > No. His http_port settings are those which match a proxy being configured explicitly in the brower, which means CONNECT messages with domain name expected to be present. It might not be, which could be the problem. But that can only known by looking at the CONNECT request message itself. Amos _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
