<html><head></head><body><div class="ydp8ef6616dyahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;">Hi all</div><div class="ydp8ef6616dyahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;">Can i use this conf only for blocking purpose?!</div><div class="ydp8ef6616dyahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;">Is set <span><span>dynamic_cert_mem_cache_size=0MB wrong?</span></span></div><div class="ydp8ef6616dyahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;"><span><span>I have more than 1000 clients and i only want to block http and https pages. <br></span></span></div><div class="ydp8ef6616dyahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;"><span><span></span></span> <br></div><div class="ydp8ef6616dyahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;">My configurations is like this:</div><div class="ydp8ef6616dyahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;">-----------------------------------------</div><div class="ydp8ef6616dyahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;"><span>https_port 3130 tproxy ssl-bump \<br> cert=/etc/squid/ssl_cert/myCA.pem \<br> generate-host-certificates=off dynamic_cert_mem_cache_size=0MB<br></span><div><span>sslcrtd_program /usr/lib64/squid/security_file_certgen<br></span></div><div><br></div><div><br></div><div><div><span><span>acl blk ssl::server_name "/var/blk.list"<br>ssl_bump bump blk<br>http_access deny blk<br></span>acl step1 at_step SslBump1</span></div><span>ssl_bump peek step1<br></span><div><span>ssl_bump splice all<br></span></div><div><div>-------------------------------------</div><div><br></div><div><br></div><div>tanx<br></div><span></span></div><span></span></div></div></body></html>