|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 3.3.8 is antique at 2016. Upgrade at least to 3.5.20. 09.08.2016 2:39, Erdosain9 пишет: > > I want to limit the bandwidth for youtube, so I want to intercept https connections. I followed several tutorials and can not. Could someone give me a hand ?? Thanks to all. > > this is my squid.conf > > |# Squid listen Port > http_port 192.168.1.215:3128 <http://192.168.1.215:3128> ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB key=/etc/squid/example.com.private cert=/etc/squid/example.com.cert > # SSL Bump Config > always_direct allow all > ssl_bump server-first all > sslproxy_cert_error deny all > sslproxy_flags DONT_VERIFY_PEER > sslcrtd_program /usr/lib64/squid/ssl_crtd -s /var/lib/ssl_db -M 4MB sslcrtd_children 8 startup=1 idle=1| > I import the example.com.cert to the webbrowser and then any web https i go i get "The proxy server is refusing connections". if not https go well. > > this is access.log: > | > |192.168.1.172 TCP_HIT/200 52543 GET http://www.silencio.com.ar/wp-content/uploads/2016/07/AHJ8239-540x386.jpg - HIER_NONE/- image/jpeg > 192.168.1.172 TCP_HIT/200 49912 GET http://www.silencio.com.ar/wp-content/uploads/2016/07/strokes-2001-adentro-540x386.jpg - HIER_NONE/- image/jpeg > 192.168.1.172 TCP_HIT/200 43804 GET http://www.silencio.com.ar/wp-content/uploads/2016/07/ArcticMonkeys012-540x386.jpg - HIER_NONE/- image/jpeg > 192.168.1.172 TCP_DENIED/200 0 CONNECT www.google-analytics.com:443 <http://www.google-analytics.com:443> - HIER_NONE/- - > 192.168.1.172 TCP_MISS/301 807 GET http://www.youtube.com/ - HIER_DIRECT/64.233.186.91 <http://64.233.186.91> text/html > 192.168.1.172 NONE/200 0 CONNECT www.youtube.com:443 <http://www.youtube.com:443> - HIER_DIRECT/64.233.186.91 <http://64.233.186.91> - > 192.168.1.172 NONE/200 0 CONNECT blocklist.addons.mozilla.org:443 <http://blocklist.addons.mozilla.org:443> - HIER_DIRECT/52.35.149.230 <http://52.35.149.230> -|| > > > _______________________________________________ > squid-users mailing list > squid-users@xxxxxxxxxxxxxxxxxxxxx > http://lists.squid-cache.org/listinfo/squid-users -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJXqO5+AAoJENNXIZxhPexGUT4H/iFwAOK4xf2QIQf/b21H0vfZ j9+ldNZpMaWlsn12tw96ip6o8iQ9h+j5GuTlpbo8BTQolEsHWMG8YvI0HCdPsXZB nRLteQ/3ZDysNgbrnNuBXv6cmWdwd1S8rNamHVdxzDGpw/Guc2D1X7+rk+rwLndw rMw9N2iO1eW4/q8BZbFyMaRkHRO4LR/Dyz2cvSRTCn3BTeEyt/yJFK5s4IuU7YjY igUYC4fysRweUoVJxCGOOP/q90pT5CYJkdp+wgL3dG6Bx9AuUPVFaj8kv6atyMNZ EE5Ttbnp3+mnE2MF61WIu/fsls+7n7UEUnjm4jphWR1ch1Q78V1e3hzYTuzjmjg= =ZphP -----END PGP SIGNATURE----- |
Attachment:
0x613DEC46.asc
Description: application/pgp-keys
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
