Re: [squid-users] hotmail yahoo transparent proxy

Actually SSL cannot be proxied, only tunneled.

There is no point in transparently redirecting SSL to Squid, and
Squid won't understand the encrypted data it suddenly is receiving.

Recommendation: Use masquerading for SSL.

Regards
Henrik Nordström

On Thursday 21 February 2002 20:15, Mohsin Khan wrote:
> a-o-a
> thats is ssl proxying ...and i do not think squid
> suuport https.......well you have to study more about
> this simple masqurading or port redirecting wont work
>
> --- "Kancha ." <kancha2np@yahoo.com> wrote:
> > I've already done and it is not working that's why i
> > put this problem in the list. Using ipchains i've
> > redirected 443 port to 3128 and I've a masquraded
> > networkk
> >
> > +-----+
> >
> > public| lnx |192.168.1.0/24
> > ------| box |----------
> > ip +-----+
> >
> >
> > lnx box runs squid and masqurades.
> >
> > --- Joe Cooper <joe@swelltech.com> wrote:
> > > Nope. Squid can't transparently proxy secure
> > > connections.
> > >
> > > IP masquerading, or simple forwarding (if clients
> > > have routable IPs) is
> > > what is needed.
> > >
> > > Ionel GARDAIS wrote:
> > > > yahoo mail logging send a request to a secure
> > >
> > > server.
> > >
> > > > you must "ipchains" port 443 (i think it's this
> > >
> > > one)
> > >
> > > > to port 3128 in order to proxy these requests
> >
> > too.
> >
> > > > hope this help,
> > > > c u,
> > > > ioio
> > >
> > > --
> > > Joe Cooper <joe@swelltech.com>
> > > http://www.swelltech.com
> > > Web Caching Appliances and Support
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Send FREE Valentine eCards with Yahoo! Greetings!
> > http://greetings.yahoo.com
>
> =====
> Regards,
> Mohsin Khan
>
> >>>Happy is the who can smile<<<
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Sports - Coverage of the 2002 Olympic Games
> http://sports.yahoo.com

-- 
MARA Systems AB, Giving you basic free Squid support
Customized solutions, packaged solutions and priority support
available on request