[squid-users] filtering HTTPS sites with transparent child Squid

FredB fredbmail at free.fr
Fri Dec 1 09:32:28 UTC 2017


> > 
> > I’ve set up a Squid as a transparent child-proxy. Every request is
> > redirected to another Squid with the content filtering add-on
> > e2guardian. I encounter the problem that the transparent child
> > Squid
> > only forwards IP-Addresses to the e2guardian when HTTPS is used and
> > so
> > e2guardian cant filter anything because it can only filter by URL.
> > 
> 


In your case enable SSLMITM in e2guardian


> A good demonstration of why calling a URL-rewrite helper a "content
> filter" is completely wrong.


Actually E2guardian is also a proxy, proxy chaining mode   


> 
> Real content filters receive the actual content and can filter it.
> ICAP
> and eCAP exist for that and get passed the decrypted HTTPS messages
> (if
> any).
> 

Next version, soon, very soon :)

Fred


More information about the squid-users mailing list