[squid-users] intercept squid 3.5.1, http://mail.ru

[Dima Ermakov]

I think, that it's not good solution too, but uploadXXX.files.mail.ru has
about 100 servers.

Now i write small script on python, that creates a file with ip addresses
of uploadXXX.files.mail.ru.

Script and list of ip addresses in attachment.

On 13 February 2015 at 22:32, Yuri Voinov <yvoinov at gmail.com> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> You have no bump whole .mail.ru domain, which is contains minimum 40%
> and over overall traffic...... Not good solution.
>
> I think, be better to no bump only attachments servers.
>
> 14.02.15 1:28, Dima Ermakov пишет:
> > Thank you for your help, but your solution doesn't work on my
> > server. I have same error, but other ip addresses of
> > uploadXXX.mail.ru servers. Now I use: acl mail_ru dstdomain
> > .mail.ru ssl_bump none mail_ru
> >
> >
> > Good day!
> >
> > On 13 February 2015 at 21:37, Yuri Voinov <yvoinov at gmail.com>
> > wrote:
> >
> > Dmitry,
> >
> > you need to pass mail.ru attachments servers as dst no bump ACL's
> > to work.
> >
> > In my configuration I use following workaround:
> >
> > squid.conf:
> >
> > # Only ip-based dst acl! acl dst_nobump dst
> > "/usr/local/squid/etc/dst.nobump"
> >
> > # SSL bump rules sslproxy_cert_error allow all ssl_bump none
> > localhost ssl_bump none url_nobump ssl_bump none dst_nobump
> > ssl_bump server-first net_bump
> >
> > (squid 3.4.11)
> >
> > dst.nobump contents contains:
> >
> > # Attachments Mail.ru 94.100.180.215/32 94.100.180.216/32
> > 217.69.139.215/32 217.69.139.216/32 217.69.139.126/32
> >
> > That's all. Works for me.
> >
> > Hope this helps.
> >
> > WBR, Yuri
> >
> > 14.02.15 0:32, Dima Ermakov пишет:
> >>>> Good day!
> >>>>
> >>>> I have a problem with squid proxy in intercept ssl_bump
> >>>> mode.
> >>>>
> >>>> If I want to attach big file (>25MB) to my e-mail message on
> >>>> https://mail.ru web site, I have error "Can not upload
> >>>> file".
> >>>>
> >>>> Into access.log I have errors: TCP_MISS_ABORTED/000
> >>>>
> >>>> My squid configuration, access.log, cache.log in attachment.
> >>>> Thank you!
> >>>>
> >>>>
> >>>>
> >>>> _______________________________________________ squid-users
> >>>> mailing list squid-users at lists.squid-cache.org
> >>>> http://lists.squid-cache.org/listinfo/squid-users
> >>>>
> >> _______________________________________________ squid-users
> >> mailing list squid-users at lists.squid-cache.org
> >> http://lists.squid-cache.org/listinfo/squid-users
> >>
> >
> >
> >
> >
> >
> > _______________________________________________ squid-users mailing
> > list squid-users at lists.squid-cache.org
> > http://lists.squid-cache.org/listinfo/squid-users
> >
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2
>
> iQEcBAEBAgAGBQJU3lEwAAoJENNXIZxhPexGuFgH/i//Is36huA3zIdvC8cAKLU1
> feLbkiTnbMsvUDE7NfbCgkByguc4qt0/xcbke2HshpXVJQON79C4BG5LVunTPg61
> N+c3nxNXJIWYmSXJFytfXQNtj8dI6SOav7//IvmNXpgBK/KVTXOhGdS5+E61IM20
> 32MJ3GpDs1BtEcOTseTbHEYiJ+St6zq0DhMd5sA7tWU+zYpo/6aTpeP3VMO4/hjW
> IE/AA8AQIc11WLizX3GxVYt08umGIhyZ9jM8ISUjZJ4Dcijo5Ku6ixf44ZwKeWot
> x5gpjE1iOyxzSJ6zjsxADeyKumgTdiTmiQw/Zwpo3rvj8xyktBphEip5mV6jrIk=
> =kIDJ
> -----END PGP SIGNATURE-----
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>



-- 
С уважением, Дмитрий Ермаков.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20150214/e126bd90/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: upload.files.mail.ru.py
Type: text/x-python
Size: 593 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20150214/e126bd90/attachment.py>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: files.mail.ru
Type: application/octet-stream
Size: 1523 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20150214/e126bd90/attachment.obj>