<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor=white lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Bro you were awsome !<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Thank you it worked<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>I appreciate your help a lot<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>I wish there is feedback in mailing list to give you 5/5 stars<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:Wingdings;color:#1F497D'>J</span><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>cheers<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:windowtext'>From:</span></b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:windowtext'> Yuri Voinov [mailto:yvoinov@gmail.com] <br><b>Sent:</b> Wednesday, November 11, 2015 1:04 PM<br><b>To:</b> Ahmad Alzaeem<br><b>Cc:</b> squid-users@lists.squid-cache.org<br><b>Subject:</b> Re: [squid-users] cache peer only forward http , not https !!!<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'>You need to locate URLs which must be forward to parent.<br><br>If this is all URL's, config must looks like this:<br><br>never_direct allow all<br>cache_peer <peer_ip> parent <peer_port> 0 no-query no-digest default<br>cache_peer_access 127.0.0.1 allow all<br><br>And, finally, you must use Squid 3.5.x. Thit will not be work on 3.4.x.<o:p></o:p></p><div><p class=MsoNormal>11.11.15 14:39, Ahmad Alzaeem пишет:<o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Here is what I mean </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>[2.2.2-RELEASE][<a href="mailto:root@pfSense.mne">root@pfSense.mne</a>]/root: tail -f /var/squid/logs/access.log </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>1447234509.328 9718 172.23.101.251 TCP_MISS/200 1448 CONNECT tiles-cloudfront.cdn.mozilla.net:443 - HIER_DIRECT/54.192.55.248 -</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>1447234514.482 9622 172.23.101.251 TCP_MISS/200 1448 CONNECT shavar.services.mozilla.com:443 - HIER_DIRECT/54.187.101.179 -</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>1447234519.858 59952 172.23.101.251 TCP_MISS/503 0 CONNECT <a href="http://www.youtube.com:443">www.youtube.com:443</a> - HIER_NONE/- -</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>1447234560.135 71105 172.23.101.251 TCP_MISS/503 0 CONNECT incoming.telemetry.mozilla.org:443 - HIER_NONE/- -</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>1447234569.644 70033 172.23.101.251 TCP_MISS/503 0 CONNECT tiles-cloudfront.cdn.mozilla.net:443 - HIER_NONE/- -</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>1447234569.644 70033 172.23.101.251 TCP_MISS/503 0 CONNECT tiles-cloudfront.cdn.mozilla.net:443 - HIER_NONE/- -</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>1447234569.644 70033 172.23.101.251 TCP_MISS/503 0 CONNECT tiles-cloudfront.cdn.mozilla.net:443 - HIER_NONE/- -</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>1447234575.091 60607 172.23.101.251 TCP_MISS/503 0 CONNECT shavar.services.mozilla.com:443 - HIER_NONE/- -</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>1447234605.998 76379 172.23.101.251 TCP_MISS/503 0 CONNECT self-repair.mozilla.org:443 - HIER_NONE/- -</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>1447234651.018 75705 172.23.101.251 TCP_MISS/503 0 CONNECT safebrowsing.google.com:443 - HIER_NONE/- -</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>cheers</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'> </span><o:p></o:p></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:windowtext'>From:</span></b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:windowtext'> Yuri Voinov [<a href="mailto:yvoinov@gmail.com">mailto:yvoinov@gmail.com</a>] <br><b>Sent:</b> Wednesday, November 11, 2015 12:49 AM<br><b>To:</b> Ahmad Alzaeem<br><b>Cc:</b> <a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>; 'Amos Jeffries'<br><b>Subject:</b> Re: [squid-users] cache peer only forward http , not https !!!</span><o:p></o:p></p></div></div><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal><br>-----BEGIN PGP SIGNED MESSAGE----- <br>Hash: SHA256 <br> <br>Are you see in access.log ip:443 CONNECT records?<br><br>I.e., does your HTTPS traffic incoming to Squid?<br><br>11.11.15 1:45, Ahmad Alzaeem пишет:<br>> Hi I don’t have ssl pump<br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > <br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > All my users user ip:port to have internet<br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > <br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > <br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > I already have ISA windows server and it works with http and<o:p></o:p></p><p class=MsoNormal> https<br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > <br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > Im wondering why all complexity needed for peer https <br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > !!!<br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > <br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > <br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > Anyway hnere is squid.conf<br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > <br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > # This file is automatically generated by pfSense<br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > # Do not edit manually !<br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > <br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > http_port 172.23.101.253:3128<br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > icp_port 0<br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > dns_v4_first on<br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > pid_filename /var/run/squid/squid.pid<br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > cache_effective_user proxy<br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > cache_effective_group proxy<br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > error_default_language en<br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > icon_directory /usr/pbi/squid-amd64/local/etc/squid/icons<br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > visible_hostname mne<br><br><br><o:p></o:p></p><p class=MsoNormal> ><br><br><br><o:p></o:p></p><p class=MsoNormal> > cache_mgr <a href="mailto:azaeem@mne.ps">azaeem@mne.ps</a> <a href="mailto:azaeem@mne.ps"><mailto:azaeem@mne.ps></a> <br> <o:p></o:p></p></blockquote><p class=MsoNormal><o:p> </o:p></p></div></body></html>