Re: [squid-users] can any transparent mode handle SSL and FTP for access control

mån 2006-12-11 klockan 08:11 -0700 skrev Shaun Skillin (home):

> I've been doing way too much reading, and so far not a "yes" answer, but
> thought I'd ask the list anyway...

It's a maybe..

FTP can be transparently intercepted by a FTP proxy capable of operating
in that mode. See for example frox which also interoperates with Squid
for caching.

Squid is not an FTP proxy. Squid is an HTTP proxy capable of acting as
an HTTP->FTP gateway for HTTP clients.

SSL is trickier as everything including the requested hostname is
encrypted when not configured to use a proxy. When configured to use a
proxy the hostname is revealed to the proxy in a CONNECT request.

Adding support for intercepting SSL connections, transforming them into
"anonymous" CONNECT ip:port request isn't a very difficult thing to do,
but none of the Squid developers have considered this important as the
usability of such function is very limited compared to have the browser
configured to use the proxy.

Regards
Henrik