<html>
  <head>
    <meta content="text/html; charset=utf-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <p><br>
    </p>
    <br>
    <div class="moz-cite-prefix">28.06.2016 13:39, --Ahmad-- пишет:<br>
    </div>
    <blockquote
      cite="mid:EB9E6998-A8D4-48D0-86B6-D53BA1953D75@netstream.ps"
      type="cite">
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
      Hi ,
      <div class="">i have squid that is working on 3.5 .</div>
      <div class="">
        <p class="MsoNormal">traffic of t 80 and 443 traffic to Squid
          via IPTables.</p>
        <p class="MsoNormal">Squid then passes traffic to ClamAV via
          C-ICAP. Squid is configured to intercept all SSL traffic and
          PKI has been setup and distributed to all clients.<o:p
            class=""></o:p></p>
        <p class="MsoNormal">we have a problem in  Skype of Business
          (Office 365) and Slack (Chat app)  seems its broken from squid
          intercept.</p>
        <div class=""><br class="">
        </div>
        <div class="">i tried to do exception for ssl for the domains
          that shown on the ACCess.log file when i use the APPs , but no
          luck </div>
        <div class=""><br class="">
        </div>
        <div class="">i tried to execlide the websites below :</div>
        <div class=""><br class="">
        </div>
        <div class=""><span
            data-story-id="story_f00ed05775c276de6e56bdadabf111af"
            data-timestamp="1467029157819" data-text="\.skype\.com$
            \.lync\.com$
            \.todyl\.com$
            \.fastly\.net$
            \.slack-msgs\.com$
            \.amazonaws\.com$
            \.slack\.com$" data-userid="639184147499655168"
            data-orgid="639184148136816640" style="box-sizing:
            border-box; color: rgb(73, 73, 73); font-family: 'Gotham
            SSm', Helvetica, Arial, sans-serif; font-size: 13px;"
            class=""><a moz-do-not-send="true" href="http://skype.com"
              class="">skype.com</a><br style="box-sizing: border-box;"
              class="">
            lync.com<br style="box-sizing: border-box;" class="">
            todyl.com<br style="box-sizing: border-box;" class="">
            fastly\.net<br style="box-sizing: border-box;" class="">
            .slack-msgs.com<br style="box-sizing: border-box;" class="">
            .amazonaws.com<br style="box-sizing: border-box;" class="">
            .<a moz-do-not-send="true" href="http://slack.com" class="">slack.com</a></span><img
            moz-do-not-send="true" style="box-sizing: border-box;
            border: 0px; vertical-align: middle; color: rgb(73, 73, 73);
            font-family: 'Gotham SSm', Helvetica, Arial, sans-serif;
            font-size: 13px;" class=""></div>
        <div class=""><br class="">
        </div>
        <div class=""><br class="">
        </div>
        <div class="">#########################################################</div>
        <div class="">but  it still not working and the APPS (( Skype of
          Business (Office 365) and Slack (Chat app))) are not working .</div>
        <div class=""><br class="">
        </div>
        <div class="">again , here is my nobump file :</div>
        <div class=""><br class="">
        </div>
        <div class=""><span style="color: rgb(73, 73, 73); font-family:
            'Gotham SSm', Helvetica, Arial, sans-serif; font-size:
            13px;" class=""><br class="">
          </span></div>
        <div class=""><span style="color: rgb(73, 73, 73); font-family:
            'Gotham SSm', Helvetica, Arial, sans-serif; font-size:
            13px;" class=""> </span><span style="font-family: 'Gotham
            SSm', Helvetica, Arial, sans-serif; font-size: 13px;"
            class=""><font class="" color="#ff2600">cat
              /opt/etc/squid.doms.nobump</font></span></div>
        <div class=""><span style="color: rgb(73, 73, 73); font-family:
            'Gotham SSm', Helvetica, Arial, sans-serif; font-size:
            13px;" class=""><br class="">
          </span></div>
        <div class=""><span
            data-story-id="story_f00ed05775c276de6e56bdadabf111af"
            data-timestamp="1467029157819" data-text="[root@1e46dccd2
            var]# cat /opt/etc/squid.doms.nobump
            \.skype\.com$
            \.lync\.com$
            \.todyl\.com$
            \.fastly\.net$
            \.slack-msgs\.com$
            \.amazonaws\.com$
            \.slack\.com$" data-userid="639184147499655168"
            data-orgid="639184148136816640" style="box-sizing:
            border-box; color: rgb(73, 73, 73); font-family: 'Gotham
            SSm', Helvetica, Arial, sans-serif; font-size: 13px;"
            class="">\.skype\.com$<br style="box-sizing: border-box;"
              class="">
            \.lync\.com$<br style="box-sizing: border-box;" class="">
            \.todyl\.com$<br style="box-sizing: border-box;" class="">
            \.fastly\.net$<br style="box-sizing: border-box;" class="">
            \.slack-msgs\.com$<br style="box-sizing: border-box;"
              class="">
            \.amazonaws\.com$<br style="box-sizing: border-box;"
              class="">
            \.slack\.com$</span><img moz-do-not-send="true"
            style="box-sizing: border-box; border: 0px; vertical-align:
            middle; color: rgb(73, 73, 73); font-family: 'Gotham SSm',
            Helvetica, Arial, sans-serif; font-size: 13px;" class=""></div>
      </div>
    </blockquote>
    <div class="">
      <div class="">Man, $ at the end of regex means you finish row scan
        here. <br>
        You no-bumps only domains and no one URL argument. Wny you
        expect it must work?<br>
      </div>
    </div>
    <blockquote
      cite="mid:EB9E6998-A8D4-48D0-86B6-D53BA1953D75@netstream.ps"
      type="cite">
      <div class="">
        <div class=""><br class="">
        </div>
        <div class="">##############################################################</div>
        <div class=""><br class="">
        </div>
        <div class="">current versions we have :</div>
        <div class="">
          <p class="MsoListParagraphCxSpFirst" style="text-indent:
            -0.25in;"><span class="" style="font-family: Symbol;">·<span
                class="" style="font-size: 7pt; line-height: normal;
                font-family: 'Times New Roman';">       </span></span>Squid
            3.5.19<o:p class=""></o:p></p>
          <p class="MsoListParagraphCxSpMiddle" style="text-indent:
            -0.25in;"><span class="" style="font-family: Symbol;">·<span
                class="" style="font-size: 7pt; line-height: normal;
                font-family: 'Times New Roman';">       </span></span>C-ICAP
            0.4.2<o:p class=""></o:p></p>
          <p class="MsoListParagraphCxSpMiddle" style="text-indent:
            -0.25in;"><span class="" style="font-family: Symbol;">·<span
                class="" style="font-size: 7pt; line-height: normal;
                font-family: 'Times New Roman';">       </span></span>SquidclamAV
            6.15<o:p class=""></o:p></p>
          <p class="MsoListParagraphCxSpLast" style="text-indent:
            -0.25in;"><span class="" style="font-family: Symbol;">·<span
                class="" style="font-size: 7pt; line-height: normal;
                font-family: 'Times New Roman';">       </span></span>ClamAV
            0.99.2<o:p class=""></o:p></p>
          <p class="MsoListParagraphCxSpLast" style="text-indent:
            -0.25in;">######################################################################</p>
          <p class="MsoListParagraphCxSpLast" style="text-indent:
            -0.25in;"><font class="" color="#001e57">   </font><font
              class="" color="#ff2600">   here is squid.conf :</font></p>
          <div class="">
            <div class="">
              <div class=""><font class="" color="#001e57"># Example
                  rule allowing access from your local networks.</font></div>
              <div class=""><font class="" color="#001e57"># Adapt to
                  list your (internal) IP networks from where browsing</font></div>
              <div class=""><font class="" color="#001e57"># should be
                  allowed</font></div>
              <div class=""><font class="" color="#001e57">acl localnet
                  src 10.0.0.0/8<span class="Apple-tab-span" style="white-space:pre"> </span>#
                  RFC1918 possible internal network</font></div>
              <div class=""><font class="" color="#001e57"><br class="">
                </font></div>
              <div class=""><font class="" color="#001e57"># Example
                  rule allowing access from your local networks.</font></div>
              <div class=""><font class="" color="#001e57"># Adapt
                  localnet in the ACL section to list your (internal) IP
                  networks</font></div>
              <div class=""><font class="" color="#001e57"># from where
                  browsing should be allowed</font></div>
              <div class=""><font class="" color="#001e57">http_access
                  allow localnet</font></div>
              <div class=""><font class="" color="#001e57">http_access
                  allow localhost</font></div>
              <div class=""><font class="" color="#001e57">http_access
                  allow localhost manager</font></div>
              <div class=""><font class="" color="#001e57">http_access
                  deny manager</font></div>
              <div class=""><font class="" color="#001e57"><br class="">
                </font></div>
              <div class=""><font class="" color="#001e57"># Squid
                  normally listens to port 3128</font></div>
              <div class=""><font class="" color="#001e57">http_port
                  3127</font></div>
              <div class=""><font class="" color="#001e57">http_port
                  3128 intercept</font></div>
              <div class=""><font class="" color="#001e57"><br class="">
                </font></div>
              <div class=""><font class="" color="#001e57"># Leave
                  coredumps in the first cache dir</font></div>
              <div class=""><font class="" color="#001e57">coredump_dir
                  /var/cache/squid</font></div>
              <div class=""><font class="" color="#001e57"><br class="">
                </font></div>
              <div class=""><font class="" color="#001e57">visible_hostname
                  shield.TodylInc.shield</font></div>
              <div class=""><font class="" color="#001e57"><br class="">
                </font></div>
              <div class=""><font class="" color="#001e57">cache_log
                  /opt/var/log/squid/cache_log</font></div>
              <div class=""><font class="" color="#001e57">cache_access_log
                  /opt/var/log/squid/access_log</font></div>
              <div class=""><font class="" color="#001e57"><br class="">
                </font></div>
              <div class=""><font class="" color="#001e57">#user and
                  group</font></div>
              <div class=""><font class="" color="#001e57">cache_effective_user
                  squid</font></div>
              <div class=""><font class="" color="#001e57">cache_effective_group
                  squid</font></div>
              <div class=""><font class="" color="#001e57"><br class="">
                </font></div>
              <div class=""><font class="" color="#001e57">acl todyl
                  dstdomain<span class="Apple-tab-span" style="white-space:pre">      </span><a
                    moz-do-not-send="true" href="http://todyl.com"
                    class="">todyl.com</a></font></div>
              <div class=""><font class="" color="#001e57">request_header_add
                  X-TODYL-GUID 1e46dccd2 todyl</font></div>
              <div class=""><font class="" color="#001e57"><br class="">
                </font></div>
              <div class=""><font class="" color="#001e57">#Custom Error
                  Pages</font></div>
              <div class=""><font class="" color="#001e57">error_directory
                  /opt/www/squid</font></div>
              <div class=""><font class="" color="#001e57"><br class="">
                </font></div>
              <div class=""><font class="" color="#001e57"># Squid
                  listen Port</font></div>
              <div class=""><font class="" color="#001e57">https_port
                  3129 intercept ssl-bump generate-host-certificates=on
                  dynamic_cert_mem_cache_size=4MB
                  key=/opt/etc/pki/squid/ca-key.pem
                  cert=/opt/etc/pki/squid/ca.pem
                  options=NO_SSLv2,NO_SSLv3,SINGLE_DH_USE</font></div>
              <div class=""><font class="" color="#001e57"><br class="">
                </font></div>
              <div class=""><font class="" color="#001e57"># SSL Bump
                  Config</font></div>
              <div class=""><font class="" color="#001e57">always_direct
                  allow all</font></div>
              <div class=""><font class="" color="#001e57">ssl_bump
                  server-first all </font></div>
              <div class=""><font class="" color="#001e57">sslcrtd_program
                  /opt/libexec/ssl_crtd -s /opt/lib/ssl_db -M 4MB</font></div>
              <div class=""><font class="" color="#001e57">sslcrtd_children
                  32 startup=5 idle=1</font></div>
              <div class=""><font class="" color="#001e57"><br class="">
                </font></div>
              <div class=""><font class="" color="#001e57">##############################################</font></div>
              <div class=""><font class="" color="#001e57">acl
                  DiscoverSNIHost at_step SslBump1</font></div>
              <div class=""><font class="" color="#0433ff">acl
                  NoSSLIntercept ssl::server_name_regex -i
                  "/opt/etc/squid.doms.nobump"</font></div>
              <div class=""><font class="" color="#001e57"> </font></div>
              <div class=""><font class="" color="#001e57">ssl_bump
                  splice NoSSLIntercept</font></div>
              <div class=""><font class="" color="#001e57">ssl_bump peek
                  DiscoverSNIHost</font></div>
              <div class=""><font class="" color="#001e57">ssl_bump bump
                  all</font></div>
              <div class=""><font class="" color="#001e57"> </font></div>
              <div class=""><font class="" color="#001e57">##################</font></div>
              <div class=""><font class="" color="#001e57"><br class="">
                </font></div>
              <div class=""><font class="" color="#001e57">#Hardening</font></div>
              <div class=""><font class="" color="#001e57">sslproxy_options
                  NO_SSLv2,NO_SSLv3,SINGLE_DH_USE,SINGLE_ECDH_USE</font></div>
              <div class=""><font class="" color="#001e57">sslproxy_cipher
EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS</font></div>
              <div class=""><font class="" color="#001e57"><br class="">
                </font></div>
              <div class=""><font class="" color="#001e57"># TUNING</font></div>
              <div class=""><font class="" color="#001e57">cache_dir
                  aufs /var/cache/squid 40000 16 256</font></div>
              <div class=""><font class="" color="#001e57">store_dir_select_algorithm
                  round-robin</font></div>
              <div class=""><font class="" color="#001e57">minimum_object_size
                  0 KB</font></div>
              <div class=""><font class="" color="#001e57">maximum_object_size
                  96 MB</font></div>
              <div class=""><font class="" color="#001e57">memory_pools
                  off</font></div>
              <div class=""><font class="" color="#001e57">quick_abort_min
                  0 KB</font></div>
              <div class=""><font class="" color="#001e57">quick_abort_max
                  0 KB</font></div>
              <div class=""><font class="" color="#001e57">log_icp_queries
                  off</font></div>
              <div class=""><font class="" color="#001e57">client_db off</font></div>
              <div class=""><font class="" color="#001e57">cache_mem
                  1500 MB</font></div>
              <div class=""><font class="" color="#001e57">buffered_logs
                  on</font></div>
              <div class=""><font class="" color="#001e57">half_closed_clients
                  off</font></div>
              <div class=""><font class="" color="#001e57"><br class="">
                </font></div>
              <div class=""><font class="" color="#001e57">dns_nameservers
                  10.192.0.1</font></div>
              <div class=""><font class="" color="#001e57">##################################################################</font></div>
              <div class=""><font class="" color="#001e57"><br class="">
                </font></div>
              <div class=""><font class="" color="#001e57"><br class="">
                </font></div>
              <div class=""><font class="" color="#001e57">here is squid
                  -k parse :</font></div>
              <div class=""><font class="" color="#001e57"><br class="">
                </font></div>
              <div class="">
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">[root@1e46dccd2
                    var]# squid -k parse</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Startup: Initializing Authentication
                    Schemes ...</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Startup: Initialized Authentication Scheme
                    'basic'</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Startup: Initialized Authentication Scheme
                    'digest'</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Startup: Initialized Authentication Scheme
                    'negotiate'</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Startup: Initialized Authentication Scheme
                    'ntlm'</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Startup: Initialized Authentication.</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing Configuration File:
                    /opt/etc/squid.conf (depth 0)</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: acl localnet src 10.0.0.0/8 #
                    RFC1918 possible internal network</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: http_access allow localnet</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: http_access allow localhost</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: http_access allow localhost
                    manager</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: http_access deny manager</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: http_port 3127</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: http_port 3128 intercept</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Starting Authentication on port [::]:3128</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Disabling Authentication on port [::]:3128
                    (interception enabled)</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: coredump_dir /var/cache/squid</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: visible_hostname
                    shield.TodylInc.shield</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: cache_log
                    /opt/var/log/squid/cache_log</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: cache_access_log
                    /opt/var/log/squid/access_log</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: cache_effective_user squid</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: cache_effective_group squid</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: acl todyl dstdomain <a
                      moz-do-not-send="true" href="http://todyl.com"
                      class="">todyl.com</a></span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: request_header_add
                    X-TODYL-GUID 1e46dccd2 todyl</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: error_directory /opt/www/squid</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: https_port 3129 intercept
                    ssl-bump generate-host-certificates=on
                    dynamic_cert_mem_cache_size=4MB
                    key=/opt/etc/pki/squid/ca-key.pem
                    cert=/opt/etc/pki/squid/ca.pem
                    options=NO_SSLv2,NO_SSLv3,SINGLE_DH_USE</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Starting Authentication on port [::]:3129</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Disabling Authentication on port [::]:3129
                    (interception enabled)</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: always_direct allow all</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: ssl_bump server-first all</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: sslcrtd_program
                    /opt/libexec/ssl_crtd -s /opt/lib/ssl_db -M 4MB</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: sslcrtd_children 32 startup=5
                    idle=1</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: acl DiscoverSNIHost at_step
                    SslBump1</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: acl NoSSLIntercept
                    ssl::server_name_regex -i
                    "/opt/etc/squid.doms.nobump"</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: ssl_bump splice NoSSLIntercept</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: ssl_bump peek DiscoverSNIHost</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: ssl_bump bump all</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: sslproxy_options
                    NO_SSLv2,NO_SSLv3,SINGLE_DH_USE,SINGLE_ECDH_USE</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: sslproxy_cipher
EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: cache_dir aufs
                    /var/cache/squid 40000 16 256</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: store_dir_select_algorithm
                    round-robin</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: minimum_object_size 0 KB</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: maximum_object_size 96 MB</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: memory_pools off</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: quick_abort_min 0 KB</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: quick_abort_max 0 KB</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: log_icp_queries off</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: client_db off</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: cache_mem 1500 MB</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: buffered_logs on</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: half_closed_clients off</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Processing: dns_nameservers 10.192.0.1</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Initializing https proxy context</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Initializing https_port [::]:3129 SSL
                    context</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">2016/06/27
                    08:06:08| Using certificate in
                    /opt/etc/pki/squid/ca.pem</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class="">—————————————————————————————————</span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class=""><br class="">
                  </span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class=""><br class="">
                  </span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal; color: rgb(73, 73, 73);" class=""><span
                    style="font-kerning: none" class=""><br class="">
                  </span></div>
                <div style="margin: 0px; font-size: 13px; line-height:
                  normal;" class=""><span style="-webkit-font-kerning:
                    none;" class=""><font class="" color="#ff2600">here
                      is access.log</font></span></div>
              </div>
              <div class=""><font class="" color="#001e57"><br class="">
                </font></div>
              <div class="">
                <div class="" style="color: rgb(0, 30, 87);"><br
                    class="">
                </div>
                <div class="" style="color: rgb(0, 30, 87);">1467029265.989
                      50 10.192.0.12 TAG_NONE/200 0 CONNECT
                  52.84.29.139:443 - ORIGINAL_DST/52.84.29.139 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029265.999
                      59 10.192.0.12 TAG_NONE/200 0 CONNECT
                  52.84.29.139:443 - ORIGINAL_DST/52.84.29.139 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029266.070
                      59 10.192.0.12 TCP_MISS/200 13171 GET <a
                    moz-do-not-send="true"
                    href="https://slack.com/help/test" class=""><a class="moz-txt-link-freetext" href="https://slack.com/help/test">https://slack.com/help/test</a></a>
                  - ORIGINAL_DST/52.84.29.139 text/html</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029266.222
                      53 10.192.0.12 TAG_NONE/200 0 CONNECT
                  172.217.5.14:443 - ORIGINAL_DST/172.217.5.14 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029266.234
                      66 10.192.0.12 TCP_MISS/200 598 GET <a
                    moz-do-not-send="true"
                    href="https://slack.com/beacon/track/?" class=""><a class="moz-txt-link-freetext" href="https://slack.com/beacon/track/">https://slack.com/beacon/track/</a>?</a>
                  - ORIGINAL_DST/52.84.29.139 image/gif</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029266.274
                      26 10.192.0.12 TCP_MISS/200 557 GET <a
                    moz-do-not-send="true"
                    href="https://www.google-analytics.com/r/collect?"
                    class=""><a class="moz-txt-link-freetext" href="https://www.google-analytics.com/r/collect">https://www.google-analytics.com/r/collect</a>?</a>
                  - ORIGINAL_DST/172.217.5.14 image/gif</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029266.314
                      66 10.192.0.12 TAG_NONE/200 0 CONNECT
                  169.54.33.172:443 - ORIGINAL_DST/169.54.33.172 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029266.368
                      21 10.192.0.12 TCP_MISS/200 547 GET <a
                    moz-do-not-send="true"
                    href="https://api.mixpanel.com/track/?" class=""><a class="moz-txt-link-freetext" href="https://api.mixpanel.com/track/">https://api.mixpanel.com/track/</a>?</a>
                  - ORIGINAL_DST/169.54.33.172 application/json</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029266.469
                      42 10.192.0.12 TAG_NONE/200 0 CONNECT
                  199.27.76.249:443 - ORIGINAL_DST/199.27.76.249 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029266.722
                     231 10.192.0.12 TCP_MISS/200 11968 GET <a
                    moz-do-not-send="true"
href="https://slack.global.ssl.fastly.net/beacons/boomerang1/image-0.png?"
                    class=""><a class="moz-txt-link-freetext" href="https://slack.global.ssl.fastly.net/beacons/boomerang1/image-0.png">https://slack.global.ssl.fastly.net/beacons/boomerang1/image-0.png</a>?</a>
                  - ORIGINAL_DST/199.27.76.249 image/png</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029267.044
                     303 10.192.0.12 TAG_NONE/200 0 CONNECT
                  54.231.161.8:443 - ORIGINAL_DST/54.231.161.8 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029267.231
                     170 10.192.0.12 TCP_MISS/200 11994 GET <a
                    moz-do-not-send="true"
href="https://s3-us-west-2.amazonaws.com/slack-files2/beacons/boomerang1/image-0.png?"
                    class=""><a class="moz-txt-link-freetext" href="https://s3-us-west-2.amazonaws.com/slack-files2/beacons/boomerang1/image-0.png">https://s3-us-west-2.amazonaws.com/slack-files2/beacons/boomerang1/image-0.png</a>?</a>
                  - ORIGINAL_DST/54.231.161.8 image/png</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029267.482
                     145 10.192.0.12 TAG_NONE/200 0 CONNECT
                  54.172.232.15:443 - ORIGINAL_DST/54.172.232.15 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029267.563
                      63 10.192.0.12 TCP_MISS_ABORTED/000 0 GET <a
                    moz-do-not-send="true"
href="https://mpmulti-y6oq.slack-msgs.com/websocket/_CONNECTION_TEST_TOKEN_"
                    class=""><a class="moz-txt-link-freetext" href="https://mpmulti-y6oq.slack-msgs.com/websocket/_CONNECTION_TEST_TOKEN_">https://mpmulti-y6oq.slack-msgs.com/websocket/_CONNECTION_TEST_TOKEN_</a></a>
                  - ORIGINAL_DST/54.172.232.15 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029267.771
                     167 10.192.0.12 TAG_NONE/200 0 CONNECT
                  52.91.147.164:443 - ORIGINAL_DST/52.91.147.164 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029267.891
                     110 10.192.0.12 TCP_MISS_ABORTED/000 0 GET <a
                    moz-do-not-send="true"
href="https://mpmulti-f4bz.slack-msgs.com/websocket/_CONNECTION_TEST_TOKEN_"
                    class=""><a class="moz-txt-link-freetext" href="https://mpmulti-f4bz.slack-msgs.com/websocket/_CONNECTION_TEST_TOKEN_">https://mpmulti-f4bz.slack-msgs.com/websocket/_CONNECTION_TEST_TOKEN_</a></a>
                  - ORIGINAL_DST/52.91.147.164 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029268.106
                     153 10.192.0.12 TAG_NONE/200 0 CONNECT
                  52.23.253.30:443 - ORIGINAL_DST/52.23.253.30 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029268.194
                      79 10.192.0.12 TCP_MISS_ABORTED/000 0 GET <a
                    moz-do-not-send="true"
href="https://mpmulti-zdjz.slack-msgs.com/websocket/_CONNECTION_TEST_TOKEN_"
                    class=""><a class="moz-txt-link-freetext" href="https://mpmulti-zdjz.slack-msgs.com/websocket/_CONNECTION_TEST_TOKEN_">https://mpmulti-zdjz.slack-msgs.com/websocket/_CONNECTION_TEST_TOKEN_</a></a>
                  - ORIGINAL_DST/52.23.253.30 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029268.449
                     160 10.192.0.12 TAG_NONE/200 0 CONNECT
                  52.201.253.102:443 - ORIGINAL_DST/52.201.253.102 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029268.567
                     110 10.192.0.12 TCP_MISS_ABORTED/000 0 GET <a
                    moz-do-not-send="true"
href="https://mpmulti-2pbf.slack-msgs.com/websocket/_CONNECTION_TEST_TOKEN_"
                    class=""><a class="moz-txt-link-freetext" href="https://mpmulti-2pbf.slack-msgs.com/websocket/_CONNECTION_TEST_TOKEN_">https://mpmulti-2pbf.slack-msgs.com/websocket/_CONNECTION_TEST_TOKEN_</a></a>
                  - ORIGINAL_DST/52.201.253.102 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029268.764
                     149 10.192.0.12 TAG_NONE/200 0 CONNECT
                  52.91.121.224:443 - ORIGINAL_DST/52.91.121.224 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029268.845
                      74 10.192.0.12 TCP_MISS_ABORTED/000 0 GET <a
                    moz-do-not-send="true"
href="https://mpmulti-x1if.slack-msgs.com/websocket/_CONNECTION_TEST_TOKEN_"
                    class=""><a class="moz-txt-link-freetext" href="https://mpmulti-x1if.slack-msgs.com/websocket/_CONNECTION_TEST_TOKEN_">https://mpmulti-x1if.slack-msgs.com/websocket/_CONNECTION_TEST_TOKEN_</a></a>
                  - ORIGINAL_DST/52.91.121.224 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029268.967
                     108 10.192.0.12 TCP_MISS/200 516 GET <a
                    moz-do-not-send="true"
href="https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif?"
                    class=""><a class="moz-txt-link-freetext" href="https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif">https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif</a>?</a>
                  - ORIGINAL_DST/199.27.76.249 image/gif</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029269.169
                     187 10.192.0.12 TCP_MISS/200 517 GET <a
                    moz-do-not-send="true"
href="https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif?"
                    class=""><a class="moz-txt-link-freetext" href="https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif">https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif</a>?</a>
                  - ORIGINAL_DST/199.27.76.249 image/gif</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029269.285
                     101 10.192.0.12 TCP_MISS/200 516 GET <a
                    moz-do-not-send="true"
href="https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif?"
                    class=""><a class="moz-txt-link-freetext" href="https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif">https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif</a>?</a>
                  - ORIGINAL_DST/199.27.76.249 image/gif</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029269.467
                     167 10.192.0.12 TCP_MISS/200 517 GET <a
                    moz-do-not-send="true"
href="https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif?"
                    class=""><a class="moz-txt-link-freetext" href="https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif">https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif</a>?</a>
                  - ORIGINAL_DST/199.27.76.249 image/gif</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029269.643
                     160 10.192.0.12 TCP_MISS/200 517 GET <a
                    moz-do-not-send="true"
href="https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif?"
                    class=""><a class="moz-txt-link-freetext" href="https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif">https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif</a>?</a>
                  - ORIGINAL_DST/199.27.76.249 image/gif</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029269.824
                     165 10.192.0.12 TCP_MISS/200 517 GET <a
                    moz-do-not-send="true"
href="https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif?"
                    class=""><a class="moz-txt-link-freetext" href="https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif">https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif</a>?</a>
                  - ORIGINAL_DST/199.27.76.249 image/gif</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029270.004
                     164 10.192.0.12 TCP_MISS/200 517 GET <a
                    moz-do-not-send="true"
href="https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif?"
                    class=""><a class="moz-txt-link-freetext" href="https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif">https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif</a>?</a>
                  - ORIGINAL_DST/199.27.76.249 image/gif</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029270.186
                     165 10.192.0.12 TCP_MISS/200 517 GET <a
                    moz-do-not-send="true"
href="https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif?"
                    class=""><a class="moz-txt-link-freetext" href="https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif">https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif</a>?</a>
                  - ORIGINAL_DST/199.27.76.249 image/gif</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029270.295
                      94 10.192.0.12 TCP_MISS/200 516 GET <a
                    moz-do-not-send="true"
href="https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif?"
                    class=""><a class="moz-txt-link-freetext" href="https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif">https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif</a>?</a>
                  - ORIGINAL_DST/199.27.76.249 image/gif</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029270.489
                     173 10.192.0.12 TCP_MISS/200 517 GET <a
                    moz-do-not-send="true"
href="https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif?"
                    class=""><a class="moz-txt-link-freetext" href="https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif">https://slack.global.ssl.fastly.net/beacons/boomerang1/image-l.gif</a>?</a>
                  - ORIGINAL_DST/199.27.76.249 image/gif</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029270.656
                     151 10.192.0.12 TCP_MISS_ABORTED/000 0 GET <a
                    moz-do-not-send="true"
href="https://slack.global.ssl.fastly.net/beacons/boomerang1/image-0.png?"
                    class=""><a class="moz-txt-link-freetext" href="https://slack.global.ssl.fastly.net/beacons/boomerang1/image-0.png">https://slack.global.ssl.fastly.net/beacons/boomerang1/image-0.png</a>?</a>
                  - ORIGINAL_DST/199.27.76.249 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029273.699
                      57 10.192.0.12 TCP_MISS/200 951 GET <a
                    moz-do-not-send="true"
                    href="http://lyncdiscover.todyl.com/?" class=""><a class="moz-txt-link-freetext" href="http://lyncdiscover.todyl.com/">http://lyncdiscover.todyl.com/</a>?</a>
                  - ORIGINAL_DST/131.253.163.205
                  application/vnd.microsoft.rtc.autodiscover+xml</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029273.713
                      72 10.192.0.12 TAG_NONE/200 0 CONNECT
                  131.253.163.205:443 - ORIGINAL_DST/131.253.163.205 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029273.797
                      73 10.192.0.12 TAG_NONE/200 0 CONNECT
                  131.253.161.142:443 - ORIGINAL_DST/131.253.161.142 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029273.874
                      70 10.192.0.12 TCP_MISS/200 1453 GET <a
                    moz-do-not-send="true"
href="https://webdir2a.online.lync.com/Autodiscover/AutodiscoverService.svc/root?"
                    class=""><a class="moz-txt-link-freetext" href="https://webdir2a.online.lync.com/Autodiscover/AutodiscoverService.svc/root">https://webdir2a.online.lync.com/Autodiscover/AutodiscoverService.svc/root</a>?</a>
                  - ORIGINAL_DST/131.253.161.142
                  application/vnd.microsoft.rtc.autodiscover+xml</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029273.952
                      74 10.192.0.12 TAG_NONE/200 0 CONNECT
                  131.253.161.142:443 - ORIGINAL_DST/131.253.161.142 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029273.985
                      25 10.192.0.12 TCP_MISS/401 2206 GET <a
                    moz-do-not-send="true"
href="https://webdir2a.online.lync.com/Autodiscover/AutodiscoverService.svc/root/user?"
                    class=""><a class="moz-txt-link-freetext" href="https://webdir2a.online.lync.com/Autodiscover/AutodiscoverService.svc/root/user">https://webdir2a.online.lync.com/Autodiscover/AutodiscoverService.svc/root/user</a>?</a>
                  - ORIGINAL_DST/131.253.161.142 text/html</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029274.077
                      76 10.192.0.12 TAG_NONE/200 0 CONNECT
                  131.253.161.142:443 - ORIGINAL_DST/131.253.161.142 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029274.217
                     132 10.192.0.12 TCP_MISS/200 18842 POST <a
                    moz-do-not-send="true"
href="https://webdir2a.online.lync.com/WebTicket/WebTicketService.svc/mex"
                    class=""><a class="moz-txt-link-freetext" href="https://webdir2a.online.lync.com/WebTicket/WebTicketService.svc/mex">https://webdir2a.online.lync.com/WebTicket/WebTicketService.svc/mex</a></a>
                  - ORIGINAL_DST/131.253.161.142 application/soap+xml</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029274.430
                     152 10.192.0.12 TAG_NONE/200 0 CONNECT
                  23.96.208.238:443 - ORIGINAL_DST/23.96.208.238 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029274.631
                     180 10.192.0.12 TCP_MISS/200 16835 POST <a
                    moz-do-not-send="true"
                    href="https://login.microsoftonline.com/RST2.srf"
                    class=""><a class="moz-txt-link-freetext" href="https://login.microsoftonline.com/RST2.srf">https://login.microsoftonline.com/RST2.srf</a></a>
                  - ORIGINAL_DST/23.96.208.238 application/soap+xml</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029274.720
                      75 10.192.0.12 TAG_NONE/200 0 CONNECT
                  131.253.161.142:443 - ORIGINAL_DST/131.253.161.142 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029274.858
                     131 10.192.0.12 TCP_MISS/200 6107 POST <a
                    moz-do-not-send="true"
href="https://webdir2a.online.lync.com/WebTicket/WebTicketAdvancedService.svc/WsFed_bearer"
                    class=""><a class="moz-txt-link-freetext" href="https://webdir2a.online.lync.com/WebTicket/WebTicketAdvancedService.svc/WsFed_bearer">https://webdir2a.online.lync.com/WebTicket/WebTicketAdvancedService.svc/WsFed_bearer</a></a>
                  - ORIGINAL_DST/131.253.161.142 text/xml</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029274.936
                      73 10.192.0.12 TAG_NONE/200 0 CONNECT
                  131.253.161.142:443 - ORIGINAL_DST/131.253.161.142 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029274.998
                      55 10.192.0.12 TCP_MISS/200 2507 GET <a
                    moz-do-not-send="true"
href="https://webdir2a.online.lync.com/Autodiscover/AutodiscoverService.svc/root/user?"
                    class=""><a class="moz-txt-link-freetext" href="https://webdir2a.online.lync.com/Autodiscover/AutodiscoverService.svc/root/user">https://webdir2a.online.lync.com/Autodiscover/AutodiscoverService.svc/root/user</a>?</a>
                  - ORIGINAL_DST/131.253.161.142
                  application/vnd.microsoft.rtc.autodiscover+xml</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029275.099
                      72 10.192.0.12 TAG_NONE/200 0 CONNECT
                  131.253.161.139:443 - ORIGINAL_DST/131.253.161.139 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029275.216
                      70 10.192.0.12 TAG_NONE/200 0 CONNECT
                  131.253.161.147:443 - ORIGINAL_DST/131.253.161.147 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029275.524
                     107 10.192.0.12 TAG_NONE/200 0 CONNECT
                  134.170.113.218:443 - ORIGINAL_DST/134.170.113.218 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029279.731
                      24 10.192.0.12 TCP_MISS/200 951 GET <a
                    moz-do-not-send="true"
                    href="http://lyncdiscover.todyl.com/?" class=""><a class="moz-txt-link-freetext" href="http://lyncdiscover.todyl.com/">http://lyncdiscover.todyl.com/</a>?</a>
                  - ORIGINAL_DST/131.253.163.205
                  application/vnd.microsoft.rtc.autodiscover+xml</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029279.778
                      71 10.192.0.12 TAG_NONE/200 0 CONNECT
                  131.253.163.205:443 - ORIGINAL_DST/131.253.163.205 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029279.814
                      76 10.192.0.12 TAG_NONE/200 0 CONNECT
                  131.253.161.142:443 - ORIGINAL_DST/131.253.161.142 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029279.847
                      27 10.192.0.12 TCP_MISS/200 1453 GET <a
                    moz-do-not-send="true"
href="https://webdir2a.online.lync.com/Autodiscover/AutodiscoverService.svc/root?"
                    class=""><a class="moz-txt-link-freetext" href="https://webdir2a.online.lync.com/Autodiscover/AutodiscoverService.svc/root">https://webdir2a.online.lync.com/Autodiscover/AutodiscoverService.svc/root</a>?</a>
                  - ORIGINAL_DST/131.253.161.142
                  application/vnd.microsoft.rtc.autodiscover+xml</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029279.922
                      70 10.192.0.12 TAG_NONE/200 0 CONNECT
                  131.253.161.142:443 - ORIGINAL_DST/131.253.161.142 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029279.952
                      24 10.192.0.12 TCP_MISS/401 2206 GET <a
                    moz-do-not-send="true"
href="https://webdir2a.online.lync.com/Autodiscover/AutodiscoverService.svc/root/user?"
                    class=""><a class="moz-txt-link-freetext" href="https://webdir2a.online.lync.com/Autodiscover/AutodiscoverService.svc/root/user">https://webdir2a.online.lync.com/Autodiscover/AutodiscoverService.svc/root/user</a>?</a>
                  - ORIGINAL_DST/131.253.161.142 text/html</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029280.032
                      73 10.192.0.12 TAG_NONE/200 0 CONNECT
                  131.253.161.142:443 - ORIGINAL_DST/131.253.161.142 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029280.092
                      54 10.192.0.12 TCP_MISS/200 2507 GET <a
                    moz-do-not-send="true"
href="https://webdir2a.online.lync.com/Autodiscover/AutodiscoverService.svc/root/user?"
                    class=""><a class="moz-txt-link-freetext" href="https://webdir2a.online.lync.com/Autodiscover/AutodiscoverService.svc/root/user">https://webdir2a.online.lync.com/Autodiscover/AutodiscoverService.svc/root/user</a>?</a>
                  - ORIGINAL_DST/131.253.161.142
                  application/vnd.microsoft.rtc.autodiscover+xml</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029280.180
                      73 10.192.0.12 TAG_NONE/200 0 CONNECT
                  131.253.161.139:443 - ORIGINAL_DST/131.253.161.139 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029280.270
                      73 10.192.0.12 TAG_NONE/200 0 CONNECT
                  131.253.161.147:443 - ORIGINAL_DST/131.253.161.147 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029280.396
                     107 10.192.0.12 TAG_NONE/200 0 CONNECT
                  134.170.113.218:443 - ORIGINAL_DST/134.170.113.218 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029287.555
                      75 10.192.0.12 TAG_NONE/200 0 CONNECT
                  157.55.133.204:443 - ORIGINAL_DST/157.55.133.204 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029287.673
                      92 10.192.0.12 TAG_NONE/200 0 CONNECT
                  157.55.133.204:443 - ORIGINAL_DST/157.55.133.204 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029287.681
                      41 10.192.0.12 TCP_MISS/200 607 GET <a
                    moz-do-not-send="true"
                    href="http://login.live.com/ppcrlcheck.srf" class=""><a class="moz-txt-link-freetext" href="http://login.live.com/ppcrlcheck.srf">http://login.live.com/ppcrlcheck.srf</a></a>
                  - ORIGINAL_DST/131.253.61.68 text/html</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029287.729
                      41 10.192.0.12 TAG_NONE/200 0 CONNECT
                  157.55.133.204:443 - ORIGINAL_DST/157.55.133.204 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029287.784
                      46 10.192.0.12 TAG_NONE/200 0 CONNECT
                  157.55.133.204:443 - ORIGINAL_DST/157.55.133.204 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029287.801
                      92 10.192.0.12 TAG_NONE/200 0 CONNECT
                  131.253.61.68:443 - ORIGINAL_DST/131.253.61.68 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029287.859
                      61 10.192.0.12 TAG_NONE/200 0 CONNECT
                  157.55.133.204:443 - ORIGINAL_DST/157.55.133.204 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029287.926
                      52 10.192.0.12 TAG_NONE/200 0 CONNECT
                  157.55.133.204:443 - ORIGINAL_DST/157.55.133.204 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029287.964
                     134 10.192.0.12 TCP_MISS/200 10828 POST <a
                    moz-do-not-send="true"
                    href="https://login.live.com/RST2.srf" class=""><a class="moz-txt-link-freetext" href="https://login.live.com/RST2.srf">https://login.live.com/RST2.srf</a></a>
                  - ORIGINAL_DST/131.253.61.68 application/soap+xml</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029287.998
                      56 10.192.0.12 TAG_NONE/200 0 CONNECT
                  157.55.133.204:443 - ORIGINAL_DST/157.55.133.204 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029288.051
                      40 10.192.0.12 TAG_NONE/200 0 CONNECT
                  157.55.133.204:443 - ORIGINAL_DST/157.55.133.204 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029288.204
                      46 10.192.0.12 TCP_MISS/302 538 GET <a
                    moz-do-not-send="true"
                    href="http://go.microsoft.com/fwlink/?" class=""><a class="moz-txt-link-freetext" href="http://go.microsoft.com/fwlink/">http://go.microsoft.com/fwlink/</a>?</a>
                  - ORIGINAL_DST/23.66.120.244 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029288.389
                     147 10.192.0.12 TCP_MISS/302 1786 GET <a
                    moz-do-not-send="true"
                    href="http://www.microsoft.com/security/encyclopedia/adlpackages.aspx?"
                    class=""><a class="moz-txt-link-freetext" href="http://www.microsoft.com/security/encyclopedia/adlpackages.aspx">http://www.microsoft.com/security/encyclopedia/adlpackages.aspx</a>?</a>
                  - ORIGINAL_DST/23.203.90.59 text/html</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029288.422
                      48 10.192.0.12 TAG_NONE/200 0 CONNECT
                  13.90.208.215:443 - ORIGINAL_DST/13.90.208.215 -</div>
                <div class="" style="color: rgb(0, 30, 87);">1467029288.882
                     311 10.192.0.12 TAG_NONE/200 0 CONNECT
                  104.41.32.78:443 - ORIGINAL_DST/104.41.32.78 -</div>
                <div style="color: rgb(0, 30, 87);" class=""><br
                    class="">
                </div>
                <div style="color: rgb(0, 30, 87);" class=""><br
                    class="">
                </div>
                <div style="color: rgb(0, 30, 87);" class=""><br
                    class="">
                </div>
                <div style="color: rgb(0, 30, 87);" class=""><br
                    class="">
                </div>
                <div style="color: rgb(0, 30, 87);" class=""><br
                    class="">
                </div>
                <div style="color: rgb(0, 30, 87);" class=""><br
                    class="">
                </div>
                <div style="color: rgb(0, 30, 87);" class=""><br
                    class="">
                </div>
                <div style="color: rgb(0, 30, 87);" class=""><br
                    class="">
                </div>
                <div style="color: rgb(0, 30, 87);" class=""><br
                    class="">
                </div>
                <div style="color: rgb(0, 30, 87);" class=""><br
                    class="">
                </div>
                <div style="color: rgb(0, 30, 87);" class=""><br
                    class="">
                </div>
                <div style="color: rgb(0, 30, 87);" class=""><br
                    class="">
                </div>
                <div class=""><font class="" color="#ff2600">Any Help
                    ????</font></div>
                <div style="color: rgb(0, 30, 87);" class=""><br
                    class="">
                </div>
              </div>
            </div>
          </div>
          <div class=""><font class="" style="font-size: 14px;"
              face="Times"><b class=""><br class="">
              </b></font></div>
        </div>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
squid-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>