Re: [squid-users] Fwd: Problem with squid and Skype 3.5

From: Jakob Curdes <jc@dont-contact.us>
Date: Wed, 05 Dec 2007 15:31:52 +0100

Leandro Ferrrari schrieb:
>
> Besides, i installed 3Proxy with sock and this problem persist.
>
If you want to
say "I tried to use 3Proxy instead of squid and the problem persists"
then you just have shown that it is not a squid problem!
Generally, skype is very good in playing tricks at the firewall. The
proxy is the least problematic part here. Skype will try to use http,
https or even tricky UDP protocols to route traffic through the
firewall; it is even reported to get incoming connections going on a
outbound-only firewall setup by keeping a UDP session open all the time.
With this background, it is unpredictable how long a connection
persists. Besides, a skype PC connects arbitrary "servers" in arbitrary
places via HTTPS which is VERY UGLY for a security advisor. In short -
you cannot really track down what it does exactly as it is all "black
box" and so you cannot really adapt your system to it. Another point to
make is that it hard to keep up TCP sessions for hours ongoing; you need
a controlled environment for that which you do not have between two
skype sites over the internet.

Hope this helps,

Jakob Curdes
Received on Wed Dec 05 2007 - 07:32:14 MST

This archive was generated by hypermail pre-2.1.9 : Tue Jan 01 2008 - 12:00:01 MST