[squid-users] intercept squid 3.5.1, http://mail.ru

[Dima Ermakov]

Yes! No problem;) Thank you!!!
On Feb 14, 2015 1:22 PM, "Yuri Voinov" <yvoinov at gmail.com> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> No problem. ;)
>
> 100 ip's is no problem. If they in one subnet, you can pass only this
> sublet with one row in acl. Overall *.mail.ru is much more networks,
> so 100 ip's no matter. ;) But bumping remains can give your better hit
> rate.
>
>
> 14.02.15 16:20, Dima Ermakov пишет:
> > Now i can upload, after adding ip addresses from my previous
> > message to ssl_bump none acl. Thank you. On Feb 14, 2015 1:15 PM,
> > "Yuri Voinov" <yvoinov at gmail.com> wrote:
> >
> > I.e, you want to say you cannot upload file above 25 megabytes?
> >
> > 14.02.15 12:55, Dima Ermakov пишет:
> >>>> I think, that it's not good solution too, but
> >>>> uploadXXX.files.mail.ru has about 100 servers.
> >>>>
> >>>> Now i write small script on python, that creates a file with
> >>>> ip addresses of uploadXXX.files.mail.ru.
> >>>>
> >>>> Script and list of ip addresses in attachment.
> >>>>
> >>>> On 13 February 2015 at 22:32, Yuri Voinov
> >>>> <yvoinov at gmail.com> wrote:
> >>>>
> >>>> You have no bump whole .mail.ru domain, which is contains
> >>>> minimum 40% and over overall traffic...... Not good
> >>>> solution.
> >>>>
> >>>> I think, be better to no bump only attachments servers.
> >>>>
> >>>> 14.02.15 1:28, Dima Ermakov пишет:
> >>>>>>> Thank you for your help, but your solution doesn't work
> >>>>>>> on my server. I have same error, but other ip addresses
> >>>>>>> of uploadXXX.mail.ru servers. Now I use: acl mail_ru
> >>>>>>> dstdomain .mail.ru ssl_bump none mail_ru
> >>>>>>>
> >>>>>>>
> >>>>>>> Good day!
> >>>>>>>
> >>>>>>> On 13 February 2015 at 21:37, Yuri Voinov
> >>>>>>> <yvoinov at gmail.com> wrote:
> >>>>>>>
> >>>>>>> Dmitry,
> >>>>>>>
> >>>>>>> you need to pass mail.ru attachments servers as dst no
> >>>>>>> bump ACL's to work.
> >>>>>>>
> >>>>>>> In my configuration I use following workaround:
> >>>>>>>
> >>>>>>> squid.conf:
> >>>>>>>
> >>>>>>> # Only ip-based dst acl! acl dst_nobump dst
> >>>>>>> "/usr/local/squid/etc/dst.nobump"
> >>>>>>>
> >>>>>>> # SSL bump rules sslproxy_cert_error allow all ssl_bump
> >>>>>>> none localhost ssl_bump none url_nobump ssl_bump none
> >>>>>>> dst_nobump ssl_bump server-first net_bump
> >>>>>>>
> >>>>>>> (squid 3.4.11)
> >>>>>>>
> >>>>>>> dst.nobump contents contains:
> >>>>>>>
> >>>>>>> # Attachments Mail.ru 94.100.180.215/32
> >>>>>>> 94.100.180.216/32 217.69.139.215/32 217.69.139.216/32
> >>>>>>> 217.69.139.126/32
> >>>>>>>
> >>>>>>> That's all. Works for me.
> >>>>>>>
> >>>>>>> Hope this helps.
> >>>>>>>
> >>>>>>> WBR, Yuri
> >>>>>>>
> >>>>>>> 14.02.15 0:32, Dima Ermakov пишет:
> >>>>>>>>>> Good day!
> >>>>>>>>>>
> >>>>>>>>>> I have a problem with squid proxy in intercept
> >>>>>>>>>> ssl_bump mode.
> >>>>>>>>>>
> >>>>>>>>>> If I want to attach big file (>25MB) to my
> >>>>>>>>>> e-mail message on https://mail.ru web site, I
> >>>>>>>>>> have error "Can not upload file".
> >>>>>>>>>>
> >>>>>>>>>> Into access.log I have errors:
> >>>>>>>>>> TCP_MISS_ABORTED/000
> >>>>>>>>>>
> >>>>>>>>>> My squid configuration, access.log, cache.log in
> >>>>>>>>>> attachment. Thank you!
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>> _______________________________________________
> >>>>>>>>>> squid-users mailing list
> >>>>>>>>>> squid-users at lists.squid-cache.org
> >>>>>>>>>> http://lists.squid-cache.org/listinfo/squid-users
> >>>>>>>>>>
> >>>>>>>>
> >>>>>>>>>>
> _______________________________________________
> >>>>>>>> squid-users mailing list
> >>>>>>>> squid-users at lists.squid-cache.org
> >>>>>>>> http://lists.squid-cache.org/listinfo/squid-users
> >>>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>> _______________________________________________
> >>>>>>> squid-users mailing list
> >>>>>>> squid-users at lists.squid-cache.org
> >>>>>>> http://lists.squid-cache.org/listinfo/squid-users
> >>>>>>>
> >>>>> _______________________________________________
> >>>>> squid-users mailing list squid-users at lists.squid-cache.org
> >>>>> http://lists.squid-cache.org/listinfo/squid-users
> >>>>>
> >>>>
> >>>>
> >>>>
> >>>>
> >>>>
> >>>> _______________________________________________ squid-users
> >>>> mailing list squid-users at lists.squid-cache.org
> >>>> http://lists.squid-cache.org/listinfo/squid-users
> >>>>
> >> _______________________________________________ squid-users
> >> mailing list squid-users at lists.squid-cache.org
> >> http://lists.squid-cache.org/listinfo/squid-users
> >>
> >
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2
>
> iQEcBAEBAgAGBQJU3yHiAAoJENNXIZxhPexGN34H/2fo1Ky6mBpjUCYqmfLOMcNA
> UD8pmQlvsPEc+AFzq0aGod9Wd7Dv/LJSxYx9WeUZb5ltUUCaG6MnVAkh/fxhMH6X
> /CYswYi83j+o6C/PmfD2vilm/Ee4kGuhTlT3Tq7L3oT/8g4MiF3o1z2aLEfN1xYy
> evl6dKUm8obEDO8qsx+PLPPGVeFpR546g4qmLPbIVY0T3GY4zxwOrzvSg4G3VDJY
> C07H6jpzFa35nDFiwbqQPsUlNOIqS3DLFp+47cRonUBCvbaESXJvjQ2Y4mMlYR0Q
> xR8nAdZz+ZoWwZyzBybdFXsF2OYCJPpujc8h0KnXJj29652/0zBB8Q+qKGSRO3c=
> =oF+/
> -----END PGP SIGNATURE-----
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20150214/7dbd14dc/attachment.html>