On Tuesday, June 22nd, 2021 at 1:44 PM, Antony Stone <Antony.Stone@xxxxxxxxxxxxxxxxxxxx> wrote: > On Tuesday 22 June 2021 at 22:37:16, Alex Rousskov wrote: > > > On 6/22/21 4:28 PM, Arctic5824 wrote: > > > > > Hey! thanks for the info, I just tried that but it seems https is still > > > > > > being allowed, and I can see it in the logs as well "TCP_TUNNEL/200 717 > > > > > > CONNECT s.youtube.com:443 -" > > > > > > my config is https://pastebin.com/8txzkEnG > > > > > > and a version of the config without comments: > > > > > > https://pastebin.com/zuJYQpXW > > > Squid bugs notwithstanding, either your Squid is not running with the > > > > configuration that you have shared with us OR that logged request comes > > > > from localhost. If you are not sure, I suggest shutting down Squid, > > > > making sure that nobody listens on port 3128 and then restarting Squid. > > > > Due to the first http_access rule, the test request must not come from > > > > the same machine Squid runs on. > > I would also comment on: > > #http_access deny !Safe_ports > > Has that been consciously and deliberately commented-out? > > #http_access allow localnet > > http_access allow localhost > > Is that a typo? Did you mean to allow access from your local networks, rather > > than just from localhost? > > #http_access deny all > > Has that been consciously and deliberately commented-out? > > Antony. Hey, all of those where deliberately done, although I have only been using this program for a short amount of time, so they might be incorrect/dumb, I am not sure, -Arctic _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
