Re: intercept squid 3.5.1, http://mail.ru

[Dima Ermakov <demonihin@xxxxxxxxx>]

I think, that it's not good solution too, but uploadXXX.files.mail.ru has about 100 servers.

Now i write small script on python, that creates a file with ip addresses of uploadXXX.files.mail.ru.

Script and list of ip addresses in attachment.

On 13 February 2015 at 22:32, Yuri Voinov <yvoinov@xxxxxxxxx> wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

You have no bump whole .mail.ru domain, which is contains minimum 40%
and over overall traffic...... Not good solution.

I think, be better to no bump only attachments servers.

14.02.15 1:28, Dima Ermakov пишет:
> Thank you for your help, but your solution doesn't work on my
> server. I have same error, but other ip addresses of
> uploadXXX.mail.ru servers. Now I use: acl mail_ru dstdomain
> .mail.ru ssl_bump none mail_ru
>
>
> Good day!
>
> On 13 February 2015 at 21:37, Yuri Voinov <yvoinov@xxxxxxxxx>
> wrote:
>

> Dmitry,
>
> you need to pass mail.ru attachments servers as dst no bump ACL's
> to work.
>
> In my configuration I use following workaround:
>
> squid.conf:
>
> # Only ip-based dst acl! acl dst_nobump dst
> "/usr/local/squid/etc/dst.nobump"
>
> # SSL bump rules sslproxy_cert_error allow all ssl_bump none
> localhost ssl_bump none url_nobump ssl_bump none dst_nobump
> ssl_bump server-first net_bump
>
> (squid 3.4.11)
>
> dst.nobump contents contains:
>
> # Attachments Mail.ru 94.100.180.215/32 94.100.180.216/32
> 217.69.139.215/32 217.69.139.216/32 217.69.139.126/32
>
> That's all. Works for me.
>
> Hope this helps.
>
> WBR, Yuri
>
> 14.02.15 0:32, Dima Ermakov пишет:
>>>> Good day!
>>>>
>>>> I have a problem with squid proxy in intercept ssl_bump
>>>> mode.
>>>>
>>>> If I want to attach big file (>25MB) to my e-mail message on
>>>> https://mail.ru web site, I have error "Can not upload
>>>> file".
>>>>
>>>> Into access.log I have errors: TCP_MISS_ABORTED/000
>>>>
>>>> My squid configuration, access.log, cache.log in attachment.
>>>> Thank you!
>>>>
>>>>
>>>>
>>>> _______________________________________________ squid-users
>>>> mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx
>>>> http://lists.squid-cache.org/listinfo/squid-users
>>>>
>> _______________________________________________ squid-users
>> mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx
>> http://lists.squid-cache.org/listinfo/squid-users
>>
>
>
>
>
>
> _______________________________________________ squid-users mailing
> list squid-users@xxxxxxxxxxxxxxxxxxxxx
> http://lists.squid-cache.org/listinfo/squid-users
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBAgAGBQJU3lEwAAoJENNXIZxhPexGuFgH/i//Is36huA3zIdvC8cAKLU1
feLbkiTnbMsvUDE7NfbCgkByguc4qt0/xcbke2HshpXVJQON79C4BG5LVunTPg61
N+c3nxNXJIWYmSXJFytfXQNtj8dI6SOav7//IvmNXpgBK/KVTXOhGdS5+E61IM20
32MJ3GpDs1BtEcOTseTbHEYiJ+St6zq0DhMd5sA7tWU+zYpo/6aTpeP3VMO4/hjW
IE/AA8AQIc11WLizX3GxVYt08umGIhyZ9jM8ISUjZJ4Dcijo5Ku6ixf44ZwKeWot
x5gpjE1iOyxzSJ6zjsxADeyKumgTdiTmiQw/Zwpo3rvj8xyktBphEip5mV6jrIk=
=kIDJ

-----END PGP SIGNATURE-----
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users

--

С уважением, Дмитрий Ермаков.

# -*- coding: utf-8 -*-
"""
Created on Sat Feb 14 08:46:15 2015

@author: dev

You need to install dnspython library for this script
"""
import dns.resolver

iplist=list()

for i in range(1,1000):
    req="upload"+str(i)+".files.mail.ru"
    #print(req)
    try:
        res=dns.resolver.query(req,"A")
        for address in res:
            #print address
            iplist.append(address)
    except :
        pass
    
print "Ok"
iplist.sort()
file_out=open("files.mail.ru","w")

for el in iplist:
    print el
    file_out.write(str(el)+"\n")

file_out.flush()
file_out.close()

Attachment: files.mail.ru
Description: Binary data

_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users