[squid-users] squid with sslbump blocking Netflix

[Bmahak2005]

Ok i read the doc but I am afraid i do not know where yo start
I know that netflix traffic comes from these server domains
.netflix.com
.ntflx.com
.ntflximg.com
.ntflxvideo.com
But how can I setup my config file to just tell squid do not bump netflix traffic and i am not interested in caching it or guarding against it
How can I use splice for that?

Sent from my iPhone

> On Mar 2, 2016, at 12:48 PM, Yuri Voinov <yvoinov at gmail.com> wrote:
> 
> 
> -----BEGIN PGP SIGNED MESSAGE----- 
> Hash: SHA256 
>  
> With peek and splice feature.
> 
> http://wiki.squid-cache.org/Features/SslPeekAndSplice
> 
> 03.03.16 2:45, Bmahak2005 пишет:
> > Thanks for the hint. How can I
>       do that ?
> 
>       >
> 
>       >
> 
>       > Sent from my iPhone
> 
>       >
> 
>       >> On Mar 2, 2016, at 11:09 AM, Yuri Voinov
>       <yvoinov at gmail.com> wrote:
> 
>       >>
> 
>       >>
> 
>       > Nobody can fight SSL pinning in proprietary apps.
> 
>       >
> 
>       > The only way I see is to put Netflex under splice ACL and do
>       not do SSL
> 
>       > bump for all Netflex CDN.
> 
>       >
> 
>       > 02.03.16 22:29, bma пишет:
> 
>       > >>> I have installed squid 3.15 on ubuntu 15.10
>       server. squid was setup with
> 
>       > >>> sslbump for https traffic. The functionality
>       work without any problem
> 
>       > i.e. :
> 
>       > >>> all traffic from both http and https goes
>       through squid and all
> 
>       > internet can
> 
>       > >>> be accessed on all devices where certificates
>       are installed. With one
> 
>       > >>> exception : 'Netflix APP' no longer works on IOS
>       devices (iPhone,
> 
>       > iPad). no
> 
>       > >>> matter what I do. All other internet services
>       (safari, and other apps)
> 
>       > work
> 
>       > >>> properly on those devices. And I was able to run
>       Netflix from browser on
> 
>       > >>> linux boxes and even OS X safari. The only thing
>       that is not working is
> 
>       > >>> Netflix APP on IOS.
> 
>       > >>>
> 
>       > >>> Of course if I disable sslbump and only allow
>       http to go through squid
> 
>       > >>> netflix works. I tried both transparent mode and
>       proxy mode on the iPhone,
> 
>       > >>> still not working.
> 
>       > >>>
> 
>       > >>> Did anyone manage to make Netflix APP on IOS
>       devices work with squid with
> 
>       > >>> sslbump enabled ?
> 
>       > >>>
> 
>       > >>>
> 
>       > >>>
> 
>       > >>> --
> 
>       > >>> View this message in context:
> 
>       >
> http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-with-sslbump-blocking-Netflix-tp4676381.html
> 
>       > >>> Sent from the Squid - Users mailing list archive
>       at Nabble.com.
> 
>       > >>> _______________________________________________
> 
>       > >>> squid-users mailing list
> 
>       > >>> squid-users at lists.squid-cache.org
> 
>       > >>>
>       http://lists.squid-cache.org/listinfo/squid-users
> 
>       >
> 
>       >>
> 
>       >> <0x613DEC46.asc>
> 
>       >> _______________________________________________
> 
>       >> squid-users mailing list
> 
>       >> squid-users at lists.squid-cache.org
> 
>       >> http://lists.squid-cache.org/listinfo/squid-users
> 
> -----BEGIN PGP SIGNATURE----- 
> Version: GnuPG v2 
>  
> iQEcBAEBCAAGBQJW11GEAAoJENNXIZxhPexGsMIIAIJemE2gpPVJCo8Licrt6Hs6 
> vIxFb8KHUkq+sXRlRtJbqjwmHPU8m59wcHsVnsJfBFpDdOkd5sMDiBKs9xeTDKAQ 
> dFgtVW9LORvrienTKca3IhRoBlka/BdePA4vF00OosaGw47fQ20KjmjgPmgRihEs 
> I5RI1qxnB8RAmmQjMcS+vS6qtXYUkNBJlH6e6vDiuI2FlPDzuLWcGXD78PLJceGd 
> wWgIVWtQv6zjsBe4eMQzWC61xQ1ms+1ISTaihlyyBIztq1hIFtrOaoghXCJ1Ue6r 
> pdp+nqIuXbvbgC15fYC1gGJjaznenpPrJJ9gMszAKRuL9gfNGMHjCPZCbv4U/NE= 
> =TXwl 
> -----END PGP SIGNATURE----- 
> 
> <0x613DEC46.asc>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160302/e587853e/attachment.html>