<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Hello Eliezer, thank you for the reply.
<div class=""><br class="">
</div>
<div class="">Honestly, to get things working after several failed attempts to intercept HTTPS, I followed this guide: <a href="http://www.cyberscie.com/2015/08/installing-squid-357-as-transparent.html?showComment=1463513043421" class="">http://www.cyberscie.com/2015/08/installing-squid-357-as-transparent.html?showComment=1463513043421</a></div>
<div class=""><br class="">
</div>
<div class="">My squid.conf is simple: <a href="http://pastebin.com/9uZ4kxW6" class="">http://pastebin.com/9uZ4kxW6</a></div>
<div class=""><br class="">
</div>
<div class="">I have collected a few IPs that skype for business uses, I tried allowing them through IP-tables but it did not work. </div>
<div class=""><br class="">
</div>
<div class=""><br class="">
<div class=""><br class="Apple-interchange-newline" style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">
<span style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><span><img height="38" width="45" apple-inline="yes" id="59192208-231F-4AC4-9FCC-7EB986EB6C9D" apple-width="yes" apple-height="yes" src="cid:2FD1C3AB-E45C-49F0-84AB-0F8AC658BD11@routerb408e2.com" class=""></span><em style="font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; color: rgb(0, 128, 0); font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 16px; background-color: rgb(255, 255, 255);" class=""><strong class="">Piensa
en el medio ambiente antes de imprimir este email.</strong></em> </span></div>
<br class="">
<div>
<blockquote type="cite" class="">
<div class="">On Dec 5, 2016, at 6:16 PM, Eliezer Croitoru <<a href="mailto:eliezer@ngtech.co.il" class="">eliezer@ngtech.co.il</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class=""><font face="Calibri" size="2" style="font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-size: 11pt;" class="">
<div class="">Hey,</div>
<div class=""> </div>
<div class="">The first suggestion is to find out what servers needs to be in the exceptions from squid interception.</div>
<div class="">It should be a bunch of IP addresses.</div>
<div class="">The possibility of skype hosting services to hold unwanted sites or content is slight but not impossible.</div>
<div class="">You don’t need tproxy on this machine since it is masquerading in any case(just a pointer that will ease your life).</div>
<div class=""><font face="Times New Roman" size="3" class=""><span style="font-size: 12pt;" class=""> </span></font></div>
<div class="">We can try to recognize together what IP addresses are required to be “bypassed” from squid interception.</div>
<div class="">And we are missing the squid.conf so we are limited to even know if your setup should work to begin with.</div>
<div class=""> </div>
<div class="">Eliezer</div>
<div class=""><font face="Times New Roman" size="3" class=""><span style="font-size: 12pt;" class=""> </span></font></div>
<div class=""><font face="Times New Roman" class="">----</font></div>
<div class=""><font face="Times New Roman" size="3" class=""><span style="font-size: 12pt;" class=""><a href="http://ngtech.co.il/lmgtfy/" class=""><font face="Arial Rounded MT Bold" size="2" color="#0563C1" class=""><span style="font-size: 11pt;" class=""><u class="">Eliezer
Croitoru</u></span></font></a><br class="">
<font face="Arial Rounded MT Bold" size="2" class=""><span style="font-size: 11pt;" class="">Linux System Administrator<br class="">
Mobile: +972-5-28704261<br class="">
Email:<span class="Apple-converted-space"> </span><a href="mailto:eliezer@ngtech.co.il" class="">eliezer@ngtech.co.il</a></span></font></span></font></div>
<div class=""><font face="Times New Roman" size="3" class=""><span style="font-size: 12pt;" class=""><span id="cid:167EA76D6E153447353DE9D4055F4814A3C4E270@namprd05.prod.outlook.com"><Picture (Device Independent Bitmap) 1.jpg></span><font size="2" class=""><span style="font-size: 11pt;" class=""></span></font></span></font></div>
<div class=""><font face="Times New Roman" size="3" class=""><span style="font-size: 12pt;" class=""> </span></font></div>
<div class=""><b class="">From:</b><span class="Apple-converted-space"> </span>squid-users [<a href="mailto:squid-users-bounces@lists.squid-cache.org" class="">mailto:squid-users-bounces@lists.squid-cache.org</a>]<span class="Apple-converted-space"> </span><b class="">On
Behalf Of<span class="Apple-converted-space"> </span></b>Sameh Onaissi<br class="">
<b class="">Sent:</b><span class="Apple-converted-space"> </span>Tuesday, December 6, 2016 12:47 AM<br class="">
<b class="">To:</b><span class="Apple-converted-space"> </span><a href="mailto:squid-users@lists.squid-cache.org" class="">squid-users@lists.squid-cache.org</a><br class="">
<b class="">Subject:</b><span class="Apple-converted-space"> </span>[squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S</div>
<div class=""><font face="Times New Roman" size="3" class=""><span style="font-size: 12pt;" class=""> </span></font></div>
<div style="margin-bottom: 12pt;" class=""><font face="Arial" size="3" color="#242729" class=""><span style="font-size: 12pt;" class="">I have a Ubuntu 16.04 server with Squid 3.5.22 installed. It acts as a gateway in a LAN.</span></font></div>
<div style="margin-bottom: 12pt;" class=""><font face="Arial" size="3" color="#242729" class=""><span style="font-size: 12pt;" class="">It is configured to intercept HTTP and HTTPS traffic (Transparent). So iptables redirects were used for ports 80 and 443.</span></font></div>
<div class=""><font face="Times New Roman" size="3" class=""><span style="font-size: 12pt;" class="">The server runs two scripts: </span></font></div>
<div class=""><font face="Times New Roman" size="3" class=""><span style="font-size: 12pt;" class=""><b class=""><u class="">nat.sh</u></b><span class="Apple-converted-space"> </span>to bridge the two network cards, allowing LAN computers access to the internet
through the servers Internet interface card.</span></font></div>
<div class=""><font face="Times New Roman" size="3" class=""><span style="font-size: 12pt;" class=""><b class=""><u class="">iptables.sh</u></b><span class="Apple-converted-space"> </span>which defines the ip rules and port forwarding: <a href="http://pastebin.com/SqpbmYQQ" class=""><font face="Arial" color="blue" class=""><u class="">http://pastebin.com/SqpbmYQQ</u></font></a></span></font></div>
<div class=""><font face="Times New Roman" size="3" class=""><span style="font-size: 12pt;" class=""> </span></font></div>
<div class=""><font face="Times New Roman" size="3" class=""><span style="font-size: 12pt;" class=""> </span></font></div>
<div class=""><font face="Times New Roman" size="3" class=""><span style="font-size: 12pt;" class="">BEFORE RUNNING iptables.sh...</span></font></div>
<div style="margin-bottom: 12pt;" class=""><font face="Arial" size="3" color="#242729" class=""><span style="font-size: 12pt;" class="">When I connect a LAN computer to it, everything works as expected. Complete Internet access with some HTTP and HTTPS domains
blocked/redirected to another page. Skype for Business logs in successfully.</span></font></div>
<div class=""><font face="Times New Roman" size="3" class=""><span style="font-size: 12pt;" class=""> </span></font></div>
<div class=""><font face="Times New Roman" size="3" class=""><span style="font-size: 12pt;" class="">AFTER RUNNING iptables.sh</span></font></div>
<div class=""><font face="Arial" size="3" color="#242729" class=""><span style="font-size: 12pt;" class="">Skype for Business disconnects, and fails to re-connect, normal skype works just fine.</span></font></div>
<div class=""><font face="Times New Roman" size="3" color="#242729" class=""><span style="font-size: 12pt;" class=""><br class="">
</span></font></div>
<div class=""><font face="Arial" size="3" color="#242729" class=""><span style="font-size: 12pt;" class="">I revised: <a href="https://support.office.com/en-us/article/Create-DNS-records-at-eNomCentral-for-Office-365-a6626053-a9c8-445b-81ee-eeb6672fae77?ui=en-US&rs=en-US&ad=US" class=""><font color="#005999" class="">https://support.office.com/en-us/article/Create-DNS-records-at-eNomCentral-for-Office-365-a6626053-a9c8-445b-81ee-eeb6672fae77?ui=en-US&rs=en-US&ad=US#bkmk_verify</font></a> And
added all DNS configurations on enom.</span></font></div>
<div style="margin-bottom: 12pt;" class=""><font face="Arial" size="3" color="#242729" class=""><span style="font-size: 12pt;" class="">That got rid of the DNS error I was getting to another error saying service is temporarily unavailable.</span></font></div>
<div style="margin-bottom: 12pt;" class=""><font face="Arial" size="3" color="#242729" class=""><span style="font-size: 12pt;" class="">Any suggestions to why this is happening? Any solutions?</span></font></div>
<div class=""><font face="Arial" size="3" color="#242729" class=""><span style="font-size: 12pt;" class=""><b class="">Note:</b> both router and Ubuntu's WAN interface use Google's 8.8.8.8 DNS</span></font></div>
<div class=""><font face="Times New Roman" size="3" class=""><span style="font-size: 12pt;" class=""> </span></font></div>
<div class=""><font face="Times New Roman" size="3" class=""><span style="font-size: 12pt;" class="">Any help is really appreciated as I have been trying to fix this for days!</span></font></div>
<div style="margin-bottom: 12pt;" class=""><font face="Times New Roman" size="3" class=""><span style="font-size: 12pt;" class=""> </span></font></div>
<div class=""><font face="Times New Roman" size="3" class=""><span style="font-size: 12pt;" class=""><br class="">
<br class="">
<br class="">
<span id="cid:AE5B889F3B5AE9B43D8FC4806F9BADC5AFD840B6@namprd05.prod.outlook.com"><Picture (Device Independent Bitmap) 2.jpg></span><font face="Helvetica" size="2" class=""><span style="font-size: 9pt;" class=""><span class="Apple-converted-space"> </span></span></font><font face="Calibri" color="green" class=""><b class=""><i class="">Piensa
en el medio ambiente antes de impr</i></b></font><font face="Calibri" color="green" class=""><b class=""><i class="">imir este email.</i></b></font><font face="Helvetica" size="2" class=""><span style="font-size: 9pt;" class=""></span></font></span></font></div>
<div class=""><font face="Times New Roman" size="3" class=""><span style="font-size: 12pt;" class=""> </span></font></div>
<div class=""><font face="Times New Roman" size="3" class=""><span style="font-size: 12pt;" class=""> </span></font></div>
</span></font><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class=""></span></div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>