<html><head></head><body><div class="ydpa17d46fbyahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;"><span><pre>-<br>-<br>-<br>-<br>-<br>Hi all<br>Can i use this conf only for blocking purpose?!Is set dynamic_cert_mem_cache_size=0MB wrong?I have more than 1000 clients and i only want to <b>block</b> http and https pages and <b>show err page</b> for both of those.
My configurations is like this:<br>-----------------------------------------<br>https_port 3130 tproxy ssl-bump \
cert=/etc/squid/ssl_cert/myCA.pem \
generate-host-certificates=off dynamic_cert_mem_cache_size=0MB
sslcrtd_program /usr/lib64/squid/security_file_certgen
acl blk ssl::server_name "/var/blk.list"
ssl_bump bump blk
http_access deny blk
acl step1 at_step SslBump1ssl_bump peek step1
ssl_bump splice all
-------------------------------------
tanx</pre></span></div></body></html>