Re: [squid-users] can any transparent mode handle SSL and FTP for access control

On Mon, Dec 11, 2006, Shaun Skillin (home) wrote:

> I have squid working fine for HTTP traffic using WCCPv2, and have used
> it with policy routing without issue. I know that squid can't cache SSL
> connections, but is there a way (in a transparent mode, not configuring
> each browser) to use squid for access control of SSL and FTP
> connections?

I've got some ideas for doing SSL access control (based on just source/destination
IPs for the time being) for WCCPv2-intercepted SSL in client-ip-spoofing modes
(eg with TPROXY.)

But it first requires a better WCCPv2 implementation, so I'm working on that in
my spare time.

So, the answer atm is "not without hacking up Squid"..

Adrian

-- 
- Xenion - http://www.xenion.com.au/ - VPS Hosting - Commercial Squid Support -