[squid-users] Put URLs and URL regex in one text file
robert k Wild
robertkwild at gmail.com
Fri May 20 10:21:51 UTC 2022
So for SSL inspection, for squid to look into the URl headers, what's the
better one
Server name or
DST domain
Thanks,
Rob
On Fri, 20 May 2022, 11:12 Matus UHLAR - fantomas, <uhlar at fantomas.sk>
wrote:
> On 19.05.22 19:29, robert k Wild wrote:
> >Think I found it but, what the difference between these two
> >
> >acl aclname ssl::server_name_regex [-i] \.foo\.com ...
>
> this one is taken from SNI option when squid looks at SSL handshake
> parameters.
>
> >acl aclname dstdom_regex [-n] [-i] \.foo\.com ...
>
> this one is the one provided in clients' request, where SSL requests
> usually
> look like:
>
> CONNECT www.google.com:443 HTTP/1.0
>
> --
> Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
> Warning: I wish NOT to receive e-mail advertising to this address.
> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
> Chernobyl was an Windows 95 beta test site.
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20220520/81a7d8c6/attachment.htm>
More information about the squid-users
mailing list