[squid-users] Allow some domains to bypass Squid

Nicolas Kovacs info at microlinux.fr
Sun Mar 11 18:39:35 UTC 2018


Le 11/03/2018 à 16:48, Alex Crow a écrit :
> 
> It would be a lot easier to just create exceptions on the squid device
> for sites where bumping doesn't work which cause then to be tunnelled or
> spliced rather then bumped. You can then at least use dstdomain or
> ssl:servername rules. dstdomain will let you tunnel or splice, whereas
> ssl servername you will only be able to splice as an SSL connection must
> already have been started AFAIK. Your firewall will probably need
> restarting every time one of the IP addresses behind those hostnames
> changes. Squid will at least do a lookup every request for dstdomain
> (you need a good DNS server nearby or on the squid box).

What would this configuration look like? Do you have a working example?

Niki

-- 
Microlinux - Solutions informatiques durables
7, place de l'église - 30730 Montpezat
Site : https://www.microlinux.fr
Blog : https://blog.microlinux.fr
Mail : info at microlinux.fr
Tél. : 04 66 63 10 32


More information about the squid-users mailing list