[squid-users] intercept squid 3.5.1, http://mail.ru

[Dima Ermakov]

Thank you for your help, but your solution doesn't work on my server.
I have same error, but other ip addresses of uploadXXX.mail.ru servers.
Now I use:
acl mail_ru dstdomain .mail.ru
ssl_bump none mail_ru


Good day!

On 13 February 2015 at 21:37, Yuri Voinov <yvoinov at gmail.com> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Dmitry,
>
> you need to pass mail.ru attachments servers as dst no bump ACL's to work.
>
> In my configuration I use following workaround:
>
> squid.conf:
>
> # Only ip-based dst acl!
> acl dst_nobump dst "/usr/local/squid/etc/dst.nobump"
>
> # SSL bump rules
> sslproxy_cert_error allow all
> ssl_bump none localhost
> ssl_bump none url_nobump
> ssl_bump none dst_nobump
> ssl_bump server-first net_bump
>
> (squid 3.4.11)
>
> dst.nobump contents contains:
>
> # Attachments Mail.ru
> 94.100.180.215/32
> 94.100.180.216/32
> 217.69.139.215/32
> 217.69.139.216/32
> 217.69.139.126/32
>
> That's all. Works for me.
>
> Hope this helps.
>
> WBR, Yuri
>
> 14.02.15 0:32, Dima Ermakov пишет:
> > Good day!
> >
> > I have a problem with squid proxy in intercept ssl_bump mode.
> >
> > If I want to attach big file (>25MB) to my e-mail message on
> > https://mail.ru web site, I have error "Can not upload file".
> >
> > Into access.log I have errors: TCP_MISS_ABORTED/000
> >
> > My squid configuration, access.log, cache.log in attachment. Thank
> > you!
> >
> >
> >
> > _______________________________________________ squid-users mailing
> > list squid-users at lists.squid-cache.org
> > http://lists.squid-cache.org/listinfo/squid-users
> >
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2
>
> iQEcBAEBAgAGBQJU3kR3AAoJENNXIZxhPexGiCIIAJIBDEHPZdgjmupykCrUCpxc
> cSyKlHFhTNiEteUV9ZbgQSSqJ4cwXZD8eDdfazfs7uOkHQqMi2EE58tX+mp2aLV4
> sOjOViTsxDmfsc0oydda7isL2hc6iQ9x18IUSom0Z90XMzM6Tl/X2i9DfxZ++ZoL
> AK0xE+2bkfGP8XShzDxM/ZjSDT3DeD2ZN3noiDmwfHTn5nlJSqnSt9izUlCTCt0A
> tfm3qxv9gAZ4nTY3xW0JoA2/zpI4+4VahfIx304ezxwpjfcHu39HqhmPHmCB1/Ck
> 9s1JoAfr0WxVw2VFsbHbOMAhrVH6KDrmFS7KvH9MsZ1QRd0pnMmtxGX+YRN7Yfw=
> =0l+3
> -----END PGP SIGNATURE-----
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>



-- 
С уважением, Дмитрий Ермаков.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20150213/d545eae3/attachment.html>