[squid-users] intercept squid 3.5.1, http://mail.ru

[Yuri Voinov]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dmitry,

you need to pass mail.ru attachments servers as dst no bump ACL's to work.

In my configuration I use following workaround:

squid.conf:

# Only ip-based dst acl!
acl dst_nobump dst "/usr/local/squid/etc/dst.nobump"

# SSL bump rules
sslproxy_cert_error allow all
ssl_bump none localhost
ssl_bump none url_nobump
ssl_bump none dst_nobump
ssl_bump server-first net_bump

(squid 3.4.11)

dst.nobump contents contains:

# Attachments Mail.ru
94.100.180.215/32
94.100.180.216/32
217.69.139.215/32
217.69.139.216/32
217.69.139.126/32

That's all. Works for me.

Hope this helps.

WBR, Yuri

14.02.15 0:32, Dima Ermakov пишет:
> Good day!
> 
> I have a problem with squid proxy in intercept ssl_bump mode.
> 
> If I want to attach big file (>25MB) to my e-mail message on
> https://mail.ru web site, I have error "Can not upload file".
> 
> Into access.log I have errors: TCP_MISS_ABORTED/000
> 
> My squid configuration, access.log, cache.log in attachment. Thank
> you!
> 
> 
> 
> _______________________________________________ squid-users mailing
> list squid-users at lists.squid-cache.org 
> http://lists.squid-cache.org/listinfo/squid-users
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBAgAGBQJU3kR3AAoJENNXIZxhPexGiCIIAJIBDEHPZdgjmupykCrUCpxc
cSyKlHFhTNiEteUV9ZbgQSSqJ4cwXZD8eDdfazfs7uOkHQqMi2EE58tX+mp2aLV4
sOjOViTsxDmfsc0oydda7isL2hc6iQ9x18IUSom0Z90XMzM6Tl/X2i9DfxZ++ZoL
AK0xE+2bkfGP8XShzDxM/ZjSDT3DeD2ZN3noiDmwfHTn5nlJSqnSt9izUlCTCt0A
tfm3qxv9gAZ4nTY3xW0JoA2/zpI4+4VahfIx304ezxwpjfcHu39HqhmPHmCB1/Ck
9s1JoAfr0WxVw2VFsbHbOMAhrVH6KDrmFS7KvH9MsZ1QRd0pnMmtxGX+YRN7Yfw=
=0l+3
-----END PGP SIGNATURE-----