Hi, transparent proxies work by redirecting traffic designated to the WWW on port 80 to the internal proxy port (e.g. 3128). The standard products don't implement redirection of port 443/https as it would break access to normal HTTPS sites. Nevertheless, it is possible to "proxy" SSL traffic but only if you use your own certificates and then narrow the re-direction to only those servers you have a certificate installed in Squid. That is how SSL accelerators, SSL proxy/reverse-proxy appliances work. Remember, Squid is primarily a web cache, not really meant for blocking URLs. You could also block "facebook.com" via your internal DNS server, pointing to 127.0.0.1 etc. Cheers, Rocco
On 13/07/2011 3:54 PM, Baluku Godfrey wrote: > Hello, > > I've been runing squid as a tranperent proxy on Ubuntu 11.04. I've > realised lately that it can not block https requests. For example, it > blocks http://www.facebook.com but to does not block > https://facebook.com. I perfectly know that configuring SQUID to > transparently intercept SSL (HTTPS) connections is not possible(some > websites say so), but is there a way of successfully going around this? > > I want some sites to be accesed at specific time. > > Thanks. > -- > "Quam minimum quam diutissime". > Godfrey Baluku > *IT Tech* > Bwindi Community Hospital > www.bwindihospital.com <http://www.bwindihospital.com> > KypeID: bmgodie > > > > > > _______________________________________________ > The Uganda Linux User Group: http://linux.or.ug > > Send messages to this mailing list by addressing e-mails to: [email protected] > Mailing list archives: http://www.mail-archive.com/[email protected]/ > Mailing list settings: http://kym.net/mailman/listinfo/lug > To unsubscribe: http://kym.net/mailman/options/lug > > The Uganda LUG mailing list is generously hosted by INFOCOM: > http://www.infocom.co.ug/ > > The above comments and data are owned by whoever posted them (including > attachments if any). The mailing list host is not responsible for them in any > way.
_______________________________________________ The Uganda Linux User Group: http://linux.or.ug Send messages to this mailing list by addressing e-mails to: [email protected] Mailing list archives: http://www.mail-archive.com/[email protected]/ Mailing list settings: http://kym.net/mailman/listinfo/lug To unsubscribe: http://kym.net/mailman/options/lug The Uganda LUG mailing list is generously hosted by INFOCOM: http://www.infocom.co.ug/ The above comments and data are owned by whoever posted them (including attachments if any). The mailing list host is not responsible for them in any way.
