Re: [squid-users] Help with Squid HTTPS proxy

From: Joshua B. <josh_at_linkstechblog.com>
Date: Mon, 17 Dec 2012 19:31:13 -0500

Netflix doesn't work through Squid
The only option you have to allow Netflix to work through a proxied
environment without adding exceptions on all your clients, is to put
this code in your configuration file:

acl netflix dstdomain .netflix.com
cache deny netflix

That allows Netflix to fully work through the proxy.
Tested and therefore knows it works on my network.

On 12-12-17 06:48 PM, Ali Jawad wrote:
> Hi
> I am trying to setup an HTTPS transparent proxy with latest stable
> squid with --enable-ssl compiled. Problem is that the squid server
> returns an error connection refused, but the thing is that it was
> trying to connect to itself. I did also check using tcpdump and
> actually no https requests are leaving for the destination site, all
> https is happening between the browser and the squid server.
>
> 2012/12/18 02:39:56.086 kid1| url.cc(385) urlParse: urlParse: Split
> URL 'https://signup.netflix.com/global' into proto='https',
> host='signup.netflix.com', port='443', path='/global'
> 2012/12/18 02:39:56.086 kid1| Address.cc(409) LookupHostIP: Given
> Non-IP 'signup.netflix.com': Name or service not known
>
> And basically the same happens for other hostnames, however when I do
> run nslookup on the squid server the lookup is correct, the
> resolv.conf file lists teht Google DNS as the top DNS server.
>
> Config below
>
> http://pastebin.com/Cm29hmXL
>
> Please advice
>
Received on Tue Dec 18 2012 - 00:31:23 MST

This archive was generated by hypermail 2.2.0 : Tue Dec 18 2012 - 12:00:07 MST