RE: [squid-users] HTTPS & transparent proxy

From: Mike Leong <leongmzlist@dont-contact.us>
Date: Fri, 10 Mar 2006 16:21:10 -0800

You can use iptables on the gateway to do nat on https (iptables -A
POSTROUTING -t nat -i <internal nic> -s <internet net> -p tcp --dport 443
-j MASQUERADE) . You can't juse -j REDIRECT on https connections since its
considered session hijacking/man in middle attack.

mike

At 03:55 PM 3/10/2006, LinuXKiD wrote:

>In other words:
>
>if FROX is an FTP transparent Proxy ,
>
>there is a XXX Proxy for HTTPS traffic ?
>
>thank you
>
>
>
>->
>-> tor 2006-03-09 klockan 17:03 -0300 skrev LinuXKiD:
>-> > There is a way to process HTTPS request
>-> > with IPTABLES as transparent proxy ?
>->
>-> No meaningful way, so it has not been implemented..
>->
>-> Regards
>-> Henrik
>->
Received on Fri Mar 10 2006 - 17:21:16 MST

This archive was generated by hypermail pre-2.1.9 : Sat Apr 01 2006 - 12:00:03 MST