Re: [squid-users] Allowing skype through on an ssl bumped proxy

if it's linux machine try to use firewall rules to block all traffic
with TCP-RESET except dst port 80 and 443.

This will close some of the things for you.
but 3.head 1408 it's kind of old.
you can try the latest 3.3.0.1 beta which have pretty good chance of to
solve it by the new features.

Regards,
Eliezer

On 11/27/2012 3:19 PM, Sean Boran wrote:
> Typically one wishes to block Skype, but I'd like to enable it :-)
>
> Looking at the access.log, the following domains were excluded from ssl bump:
> .skype.com
> .skypeassets.com
> skype.tt.omtrdc.net
>
> But skype still tried for ages to login and never succeeds.
> In skype, despite have configure a proxy, it still tries to do lots of
> direct connections too.
> I did find a skype admin guide, but nothing useful on how to debug
> that opaque tool's traffic..
> https://support.skype.com/resources/sites/SKYPE/content/live/DOCUMENTS/0/DO5/en_US/skype-it-administrators-guide.pdf
>
> Running 3.HEAD-20120814-r12282.
>
> Any tips?
>
> Sean
>

-- 
Eliezer Croitoru
https://www1.ngtech.co.il
sip:ngtech_at_sip2sip.info
IT consulting for Nonprofit organizations
eliezer <at> ngtech.co.il