-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 You have no bump whole .mail.ru domain, which is contains minimum 40% and over overall traffic...... Not good solution. I think, be better to no bump only attachments servers. 14.02.15 1:28, Dima Ermakov пишет: > Thank you for your help, but your solution doesn't work on my > server. I have same error, but other ip addresses of > uploadXXX.mail.ru servers. Now I use: acl mail_ru dstdomain > .mail.ru ssl_bump none mail_ru > > > Good day! > > On 13 February 2015 at 21:37, Yuri Voinov <yvoinov@xxxxxxxxx> > wrote: > > Dmitry, > > you need to pass mail.ru attachments servers as dst no bump ACL's > to work. > > In my configuration I use following workaround: > > squid.conf: > > # Only ip-based dst acl! acl dst_nobump dst > "/usr/local/squid/etc/dst.nobump" > > # SSL bump rules sslproxy_cert_error allow all ssl_bump none > localhost ssl_bump none url_nobump ssl_bump none dst_nobump > ssl_bump server-first net_bump > > (squid 3.4.11) > > dst.nobump contents contains: > > # Attachments Mail.ru 94.100.180.215/32 94.100.180.216/32 > 217.69.139.215/32 217.69.139.216/32 217.69.139.126/32 > > That's all. Works for me. > > Hope this helps. > > WBR, Yuri > > 14.02.15 0:32, Dima Ermakov пишет: >>>> Good day! >>>> >>>> I have a problem with squid proxy in intercept ssl_bump >>>> mode. >>>> >>>> If I want to attach big file (>25MB) to my e-mail message on >>>> https://mail.ru web site, I have error "Can not upload >>>> file". >>>> >>>> Into access.log I have errors: TCP_MISS_ABORTED/000 >>>> >>>> My squid configuration, access.log, cache.log in attachment. >>>> Thank you! >>>> >>>> >>>> >>>> _______________________________________________ squid-users >>>> mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx >>>> http://lists.squid-cache.org/listinfo/squid-users >>>> >> _______________________________________________ squid-users >> mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx >> http://lists.squid-cache.org/listinfo/squid-users >> > > > > > > _______________________________________________ squid-users mailing > list squid-users@xxxxxxxxxxxxxxxxxxxxx > http://lists.squid-cache.org/listinfo/squid-users > -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBAgAGBQJU3lEwAAoJENNXIZxhPexGuFgH/i//Is36huA3zIdvC8cAKLU1 feLbkiTnbMsvUDE7NfbCgkByguc4qt0/xcbke2HshpXVJQON79C4BG5LVunTPg61 N+c3nxNXJIWYmSXJFytfXQNtj8dI6SOav7//IvmNXpgBK/KVTXOhGdS5+E61IM20 32MJ3GpDs1BtEcOTseTbHEYiJ+St6zq0DhMd5sA7tWU+zYpo/6aTpeP3VMO4/hjW IE/AA8AQIc11WLizX3GxVYt08umGIhyZ9jM8ISUjZJ4Dcijo5Ku6ixf44ZwKeWot x5gpjE1iOyxzSJ6zjsxADeyKumgTdiTmiQw/Zwpo3rvj8xyktBphEip5mV6jrIk= =kIDJ -----END PGP SIGNATURE----- _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
