Em 16/10/2018 02:46, Timur Lagutenko escreveu:
Hello friends,
recently I've updated my freebsd gateway.
from 11.1 to 11.2.
also I've updated squid form 3.5 to 4.1
i have no transparency, no ssl-bump/splice etc..
simple installation.
browser is configured to use proxy.
squid configuration is default.
everything works fine except youtube.com <http://youtube.com/>
Browser freezes on "trying to set secure connection", and after gives
time-out error.
i've also tied to downgrade squid back to 3,5
no success.
nothing strange in logs
1539668124.660 30055 192.168.0.104 TCP_TUNNEL/200 39 CONNECT
www.youtube.com:443 <http://www.youtube.com:443/> -
HIER_DIRECT/74.125.232.167 <http://74.125.232.167/> -
dns is the same as for a client as for a squid.
other sites works fine.
if i give direct access (without squid - direct NAT) - youtube is working.
any ideas?
Hello Timur.
Are you certain it isn't a firewall/routing/port issue?
My guess is that the clients are being directed to an incorrect
destination (or being dropped) specially because the time-out error.
I don't think Squid would consider YouTube different than any other
website if you didn't told it to do so. Maybe there's a leftover rule
somewhere in your firewall? Remember that it should contain INPUT and
OUTPUT rules for Squid rather than FORWARD.
Good luck.
_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users
