Re: [squid-users] hotmail yahoo transparent proxy

From: Squid Support (Henrik Nordstrom) <hno@dont-contact.us>
Date: Fri, 22 Feb 2002 02:19:42 +0100

Actually SSL cannot be proxied, only tunneled.

There is no point in transparently redirecting SSL to Squid, and
Squid won't understand the encrypted data it suddenly is receiving.

Recommendation: Use masquerading for SSL.

Regards
Henrik Nordström

On Thursday 21 February 2002 20:15, Mohsin Khan wrote:
> a-o-a
> thats is ssl proxying ...and i do not think squid
> suuport https.......well you have to study more about
> this simple masqurading or port redirecting wont work
>
> --- "Kancha ." <kancha2np@yahoo.com> wrote:
> > I've already done and it is not working that's why i
> > put this problem in the list. Using ipchains i've
> > redirected 443 port to 3128 and I've a masquraded
> > networkk
> >
> > +-----+
> >
> > public| lnx |192.168.1.0/24
> > ------| box |----------
> > ip +-----+
> >
> >
> > lnx box runs squid and masqurades.
> >
> > --- Joe Cooper <joe@swelltech.com> wrote:
> > > Nope. Squid can't transparently proxy secure
> > > connections.
> > >
> > > IP masquerading, or simple forwarding (if clients
> > > have routable IPs) is
> > > what is needed.
> > >
> > > Ionel GARDAIS wrote:
> > > > yahoo mail logging send a request to a secure
> > >
> > > server.
> > >
> > > > you must "ipchains" port 443 (i think it's this
> > >
> > > one)
> > >
> > > > to port 3128 in order to proxy these requests
> >
> > too.
> >
> > > > hope this help,
> > > > c u,
> > > > ioio
> > >
> > > --
> > > Joe Cooper <joe@swelltech.com>
> > > http://www.swelltech.com
> > > Web Caching Appliances and Support
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Send FREE Valentine eCards with Yahoo! Greetings!
> > http://greetings.yahoo.com
>
> =====
> Regards,
> Mohsin Khan
>
> >>>Happy is the who can smile<<<
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Sports - Coverage of the 2002 Olympic Games
> http://sports.yahoo.com

-- 
MARA Systems AB, Giving you basic free Squid support
Customized solutions, packaged solutions and priority support
available on request
Received on Thu Feb 21 2002 - 18:29:29 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:06:30 MST