Re: [squid-users] SSL sites bypass authentication

On 20.03.2012 07:31, Vishal Agarwal wrote:
> Hi Amos,
>
> You are right.
>
> Will this work with transferring all the traffic to http port from iptables ?
>
> Iptables -t nat -A PREROUTING -s 192.168.1.0/24 -p tcp --dport 80 -j REDIRECT --to-destination serverip:3128
>
> And further checking the traffic in squid
>
> Acl safe_ports port 443 # Secure port
> http_access allow safe_ports
>
>
>
> Thanks/regards,
> Vishal Agarwal
>
Hi,

This will not help. This traffic is not going to the server where squid
is installed at all. It goes trough the client computers default gateway
as if there is no proxy configured on the browser while in fact there is.

Milen
Received on Tue Mar 20 2012 - 14:19:43 MDT