[squid-users] Web Whatsapp, Dropbox... problem

[erdosain9]

Hi.
If i put 

acl step1 at_step SslBump1 
acl excludeSSL ssl::server_name_regex web/.whatsapp/.com 

ssl_bump peek step1 
ssl_bump splice excludeSSL 
ssl_bump bump all 

I dont get nothing about web.whatsapp.com in access.log

But if i change config to

ssl_bump stare all
ssl_bump bump all

I get this Access.log.


1473879403.629   1030 192.168.1.172 TAG_NONE/200 0 CONNECT
web.whatsapp.com:443 - HIER_DIRECT/31.13.85.51 -
1473879403.878    164 192.168.1.172 TAG_NONE/200 0 CONNECT
fonts.gstatic.com:443 - HIER_DIRECT/64.233.186.94 -
1473879403.950    295 192.168.1.172 TCP_MISS/404 525 GET
https://web.whatsapp.com/404.appcache - HIER_DIRECT/31.13.85.51 text/html
1473879404.110     58 192.168.1.172 TCP_MISS/200 647 GET
https://www.google.com/searchdomaincheck? - HIER_DIRECT/172.217.28.228
text/plain
1473879405.340    423 192.168.1.172 TCP_MISS/304 592 GET
https://web.whatsapp.com/serviceworker.js - HIER_DIRECT/31.13.85.51
application/javascript
1473879407.051    184 192.168.1.172 TCP_MISS/503 427 HEAD http://tsxvhgadd/
- HIER_NONE/- text/html
1473879407.111    243 192.168.1.172 TCP_MISS/503 427 HEAD
http://twngvdpnqgywgf/ - HIER_NONE/- text/html
1473879407.113    245 192.168.1.172 TCP_MISS/503 427 HEAD
http://jvmxcnnzacik/ - HIER_NONE/- text/html
1473879409.275    188 192.168.1.172 TAG_NONE/200 0 CONNECT
ssl.gstatic.com:443 - HIER_DIRECT/64.233.190.120 -
1473879409.335     19 192.168.1.172 TCP_HIT/200 70267 GET
https://ssl.gstatic.com/safebrowsing/csd/client_model_v5_variation_0.pb -
HIER_NONE/- application/octet-stream
1473879409.355      4 192.168.1.172 TCP_HIT/200 70267 GET
https://ssl.gstatic.com/safebrowsing/csd/client_model_v5_ext_variation_0.pb
- HIER_NONE/- application/octet-stream
1473879409.568    481 192.168.1.172 TAG_NONE/200 0 CONNECT
ssl.gstatic.com:443 - HIER_DIRECT/64.233.190.120 -
1473879409.977    305 192.168.1.172 TCP_MISS/200 584 GET
https://web.whatsapp.com/status.json - HIER_DIRECT/31.13.85.51 text/json
1473879411.771     85 192.168.1.172 TCP_MISS/200 1807 GET
https://www.google.com.ar/_/chrome/newtab-serviceworker.js -
HIER_DIRECT/172.217.28.35 text/javascript
1473879414.612    321 192.168.1.172 TCP_MISS/200 584 GET
https://web.whatsapp.com/status.json - HIER_DIRECT/31.13.85.51 text/json
1473879428.127    301 192.168.1.172 TCP_MISS/200 584 GET
https://web.whatsapp.com/status.json - HIER_DIRECT/31.13.85.51 text/json
1473879446.136    333 192.168.1.172 TCP_MISS/200 584 GET
https://web.whatsapp.com/status.json - HIER_DIRECT/31.13.85.51 text/json



Thanks!



--
View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Web-Whatsapp-Dropbox-problem-tp4679299p4679512.html
Sent from the Squid - Users mailing list archive at Nabble.com.