[squid-users] intercept squid 3.5.1, http://mail.ru

[Yuri Voinov]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I.e, you want to say you cannot upload file above 25 megabytes?

14.02.15 12:55, Dima Ermakov пишет:
> I think, that it's not good solution too, but
> uploadXXX.files.mail.ru has about 100 servers.
> 
> Now i write small script on python, that creates a file with ip
> addresses of uploadXXX.files.mail.ru.
> 
> Script and list of ip addresses in attachment.
> 
> On 13 February 2015 at 22:32, Yuri Voinov <yvoinov at gmail.com>
> wrote:
> 
> You have no bump whole .mail.ru domain, which is contains minimum
> 40% and over overall traffic...... Not good solution.
> 
> I think, be better to no bump only attachments servers.
> 
> 14.02.15 1:28, Dima Ermakov пишет:
>>>> Thank you for your help, but your solution doesn't work on
>>>> my server. I have same error, but other ip addresses of 
>>>> uploadXXX.mail.ru servers. Now I use: acl mail_ru dstdomain 
>>>> .mail.ru ssl_bump none mail_ru
>>>> 
>>>> 
>>>> Good day!
>>>> 
>>>> On 13 February 2015 at 21:37, Yuri Voinov
>>>> <yvoinov at gmail.com> wrote:
>>>> 
>>>> Dmitry,
>>>> 
>>>> you need to pass mail.ru attachments servers as dst no bump
>>>> ACL's to work.
>>>> 
>>>> In my configuration I use following workaround:
>>>> 
>>>> squid.conf:
>>>> 
>>>> # Only ip-based dst acl! acl dst_nobump dst 
>>>> "/usr/local/squid/etc/dst.nobump"
>>>> 
>>>> # SSL bump rules sslproxy_cert_error allow all ssl_bump none 
>>>> localhost ssl_bump none url_nobump ssl_bump none dst_nobump 
>>>> ssl_bump server-first net_bump
>>>> 
>>>> (squid 3.4.11)
>>>> 
>>>> dst.nobump contents contains:
>>>> 
>>>> # Attachments Mail.ru 94.100.180.215/32 94.100.180.216/32 
>>>> 217.69.139.215/32 217.69.139.216/32 217.69.139.126/32
>>>> 
>>>> That's all. Works for me.
>>>> 
>>>> Hope this helps.
>>>> 
>>>> WBR, Yuri
>>>> 
>>>> 14.02.15 0:32, Dima Ermakov пишет:
>>>>>>> Good day!
>>>>>>> 
>>>>>>> I have a problem with squid proxy in intercept
>>>>>>> ssl_bump mode.
>>>>>>> 
>>>>>>> If I want to attach big file (>25MB) to my e-mail
>>>>>>> message on https://mail.ru web site, I have error "Can
>>>>>>> not upload file".
>>>>>>> 
>>>>>>> Into access.log I have errors: TCP_MISS_ABORTED/000
>>>>>>> 
>>>>>>> My squid configuration, access.log, cache.log in
>>>>>>> attachment. Thank you!
>>>>>>> 
>>>>>>> 
>>>>>>> 
>>>>>>> _______________________________________________
>>>>>>> squid-users mailing list
>>>>>>> squid-users at lists.squid-cache.org 
>>>>>>> http://lists.squid-cache.org/listinfo/squid-users
>>>>>>> 
>>>>> _______________________________________________
>>>>> squid-users mailing list squid-users at lists.squid-cache.org 
>>>>> http://lists.squid-cache.org/listinfo/squid-users
>>>>> 
>>>> 
>>>> 
>>>> 
>>>> 
>>>> 
>>>> _______________________________________________ squid-users
>>>> mailing list squid-users at lists.squid-cache.org 
>>>> http://lists.squid-cache.org/listinfo/squid-users
>>>> 
>> _______________________________________________ squid-users
>> mailing list squid-users at lists.squid-cache.org 
>> http://lists.squid-cache.org/listinfo/squid-users
>> 
> 
> 
> 
> 
> 
> _______________________________________________ squid-users mailing
> list squid-users at lists.squid-cache.org 
> http://lists.squid-cache.org/listinfo/squid-users
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBAgAGBQJU3yBFAAoJENNXIZxhPexG/OwIAMg7v5BZTXx3tbGMbL8451zl
gYxLJoY+ooUk5kj90jgQjJr4XhFkdmH+GKM5MTn8o0lVnMrk9O6kA8XHVTTzirzR
k5Eo5Fv4ubdztwAnWkxGH1Oy4rkPjuySIRpejrlomtUqhOBqNDTS1PV0m049+CIc
gRiDir6jnVzCrNTv6vt8K1BJP8mS/lPNY0jBNYnm147NkLoV5hNZs+Y1PwOjIAxd
oT6+msic8jBrL4eNl2toqstimff3EoCl6VBhSwBMAPKoXA90cD09cVWIbijZEv6t
TK6J0RQm79DSvIx3R/YeeaEx2N1su4PJsuO/mnJHf0rrqq0eOzzUxIYpcyX/H+E=
=0+ks
-----END PGP SIGNATURE-----