[squid-users] Web Whatsapp, Dropbox... problem

[Marcus Kool]

On 09/12/2016 12:15 PM, Chico Venancio wrote:
> I'd think a regex consumes a lot more resources than server name, but don't know if it is significant.
> Anyway, without more details we can't be sure the server name not matching is the problem.
>
> We need access logs and client(browser) details.
>
> By the way, acl excludeSSL ssl::server_name web.whatsapp.com <http://web.whatsapp.com>
> Would not work, whatsapp uses some subdomains that also should not be bumped.

squid.conf.documented seems to imply that you can add a dot to match the subdomains also, just like with dstdomain :
    acl excludeSSL ssl::server_name .web.whatsapp.com

Be careful with the regex, it matches also web.whatsapp.com-24.site: it needs a $

Marcus

> Chico Venancio
>
>
> Em 12/09/2016 11:42, "Yuri Voinov" <yvoinov at gmail.com <mailto:yvoinov at gmail.com>> escreveu:
>
>
>     -----BEGIN PGP SIGNED MESSAGE-----
>     Hash: SHA256
>
>     Because ssl :: server_name_regex works reliably. As shown by my personal
>     practice. But in general it is by op's choice.
>
>
>     12.09.2016 20:38, Marcus Kool пишет:
>     >
>     >
>     > On 09/12/2016 11:14 AM, Yuri Voinov wrote:
>     >>
>     >> -----BEGIN PGP SIGNED MESSAGE-----
>     >> Hash: SHA256
>     >>
>     >> Oooops,
>     >>
>     >> acl must be:
>     >>
>     >> acl excludeSSL ssl::server_name_regex web\.whatsapp\.com
>     >
>     > why a regex?
>     > why not the following ?
>     >    acl excludeSSL ssl::server_name web.whatsapp.com <http://web.whatsapp.com>
>     >
>     > Marcus
>     > _______________________________________________
>     > squid-users mailing list
>     > squid-users at lists.squid-cache.org <mailto:squid-users at lists.squid-cache.org>
>     > http://lists.squid-cache.org/listinfo/squid-users <http://lists.squid-cache.org/listinfo/squid-users>
>
>     -----BEGIN PGP SIGNATURE-----
>     Version: GnuPG v2
>
>     iQEcBAEBCAAGBQJX1r7jAAoJENNXIZxhPexGiDgH/18a12inWiaf8mRJtB/eGOhV
>     s1Qb+TMtWEQUUKJocxnSLKWTND6I+ZrVnDHGI2b64x0bZUOHYtH1dx0NgC0/xC8L
>     JppQbDHAQfQGjLuJFfu+VLzp5SNDGXYxZ/4aliiF8JMibtcOSt4viMbxN20ic5Bo
>     eAIuZiJXuVhmUhND9eSGUTyOdATgjCzBOZRwBBAWbi4/CfK7FML2kfzqZnbGsc8i
>     6qy01w0Hz06g2bY0Gz3qD/VtnYIjGACR+LZlugnpw1LXVpsQfW8D3m7l50zSBflM
>     Sp4Ku5BqjJ/pIXbODR4TZ70KdzqYUZ1V6u+LBukTvrjiLSoX2hnkYlhzviZGS0A=
>     =YrH2
>     -----END PGP SIGNATURE-----
>
>
>     _______________________________________________
>     squid-users mailing list
>     squid-users at lists.squid-cache.org <mailto:squid-users at lists.squid-cache.org>
>     http://lists.squid-cache.org/listinfo/squid-users <http://lists.squid-cache.org/listinfo/squid-users>
>
>
>
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>