Re: [SQU] making SSL go direct (was RE: [SQUI] SQUID as IRC proxy???)

M. Yu wrote:

> My thinking is that, since CONNECT and the SSL ports are only used by
> SSL-encrypted connections, I can merely remove the appropriate lines to
> disable them. I don't want SSL connections to be made through the proxy
> since Squid can't cache them anyway. But if I'm following your explanations
> correctly, if I disable SSL ports and CONNECT, my browsers won't be able to
> connect via https.

To disable CONNECT, deny all access to it

acl CONNECT method CONNECT
http_access deny CONNECT

And only browsers configured to use your proxy as "secure proxy" or "ssl
proxy" will get denied by it.

--
Henrik Nordstrom
Squid hacker
--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html