[squid-users] Re: SSL site filterting

From: Adam Aube <aaube01@dont-contact.us>
Date: Wed, 23 Jun 2004 14:37:13 -0400

Michael Gale wrote:

> I wish to only allow our internal network specific SSL sites (443). In the
> squid.conf file I am allowing the CONNECT proto for only port 443, now to
> allow access to a specific site only. I would have to use
> dstdom_regex or dstdomain right ?? Because the url is not yet known ...

You would have to use dst, dstdomain, or dstdom_regex. The URL-based acls
will be useless, because Squid cannot see the entire URL for SSL
connections - all Squid sees is the destination hostname/IP and the port.

Adam
Received on Wed Jun 23 2004 - 12:40:06 MDT

This archive was generated by hypermail pre-2.1.9 : Thu Jul 01 2004 - 12:00:03 MDT