Now i can upload, after adding ip addresses from my previous message to ssl_bump none acl.
Thank you.
On Feb 14, 2015 1:15 PM, "Yuri Voinov" <yvoinov@xxxxxxxxx> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
I.e, you want to say you cannot upload file above 25 megabytes?
14.02.15 12:55, Dima Ermakov пишет:
> I think, that it's not good solution too, but
> uploadXXX.files.mail.ru has about 100 servers.
>
> Now i write small script on python, that creates a file with ip
> addresses of uploadXXX.files.mail.ru.
>
> Script and list of ip addresses in attachment.
>
> On 13 February 2015 at 22:32, Yuri Voinov <yvoinov@xxxxxxxxx>
> wrote:
>
> You have no bump whole .mail.ru domain, which is contains minimum
> 40% and over overall traffic...... Not good solution.
>
> I think, be better to no bump only attachments servers.
>
> 14.02.15 1:28, Dima Ermakov пишет:
>>>> Thank you for your help, but your solution doesn't work on
>>>> my server. I have same error, but other ip addresses of
>>>> uploadXXX.mail.ru servers. Now I use: acl mail_ru dstdomain
>>>> .mail.ru ssl_bump none mail_ru
>>>>
>>>>
>>>> Good day!
>>>>
>>>> On 13 February 2015 at 21:37, Yuri Voinov
>>>> <yvoinov@xxxxxxxxx> wrote:
>>>>
>>>> Dmitry,
>>>>
>>>> you need to pass mail.ru attachments servers as dst no bump
>>>> ACL's to work.
>>>>
>>>> In my configuration I use following workaround:
>>>>
>>>> squid.conf:
>>>>
>>>> # Only ip-based dst acl! acl dst_nobump dst
>>>> "/usr/local/squid/etc/dst.nobump"
>>>>
>>>> # SSL bump rules sslproxy_cert_error allow all ssl_bump none
>>>> localhost ssl_bump none url_nobump ssl_bump none dst_nobump
>>>> ssl_bump server-first net_bump
>>>>
>>>> (squid 3.4.11)
>>>>
>>>> dst.nobump contents contains:
>>>>
>>>> # Attachments Mail.ru 94.100.180.215/32 94.100.180.216/32
>>>> 217.69.139.215/32 217.69.139.216/32 217.69.139.126/32
>>>>
>>>> That's all. Works for me.
>>>>
>>>> Hope this helps.
>>>>
>>>> WBR, Yuri
>>>>
>>>> 14.02.15 0:32, Dima Ermakov пишет:
>>>>>>> Good day!
>>>>>>>
>>>>>>> I have a problem with squid proxy in intercept
>>>>>>> ssl_bump mode.
>>>>>>>
>>>>>>> If I want to attach big file (>25MB) to my e-mail
>>>>>>> message on https://mail.ru web site, I have error "Can
>>>>>>> not upload file".
>>>>>>>
>>>>>>> Into access.log I have errors: TCP_MISS_ABORTED/000
>>>>>>>
>>>>>>> My squid configuration, access.log, cache.log in
>>>>>>> attachment. Thank you!
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> _______________________________________________
>>>>>>> squid-users mailing list
>>>>>>> squid-users@xxxxxxxxxxxxxxxxxxxxx
>>>>>>> http://lists.squid-cache.org/listinfo/squid-users
>>>>>>>
>>>>> _______________________________________________
>>>>> squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx
>>>>> http://lists.squid-cache.org/listinfo/squid-users
>>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> _______________________________________________ squid-users
>>>> mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx
>>>> http://lists.squid-cache.org/listinfo/squid-users
>>>>
>> _______________________________________________ squid-users
>> mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx
>> http://lists.squid-cache.org/listinfo/squid-users
>>
>
>
>
>
>
> _______________________________________________ squid-users mailing
> list squid-users@xxxxxxxxxxxxxxxxxxxxx
> http://lists.squid-cache.org/listinfo/squid-users
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iQEcBAEBAgAGBQJU3yBFAAoJENNXIZxhPexG/OwIAMg7v5BZTXx3tbGMbL8451zl
gYxLJoY+ooUk5kj90jgQjJr4XhFkdmH+GKM5MTn8o0lVnMrk9O6kA8XHVTTzirzR
k5Eo5Fv4ubdztwAnWkxGH1Oy4rkPjuySIRpejrlomtUqhOBqNDTS1PV0m049+CIc
gRiDir6jnVzCrNTv6vt8K1BJP8mS/lPNY0jBNYnm147NkLoV5hNZs+Y1PwOjIAxd
oT6+msic8jBrL4eNl2toqstimff3EoCl6VBhSwBMAPKoXA90cD09cVWIbijZEv6t
TK6J0RQm79DSvIx3R/YeeaEx2N1su4PJsuO/mnJHf0rrqq0eOzzUxIYpcyX/H+E=
=0+ks
-----END PGP SIGNATURE-----
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
