Re: [squid-users] acl for ports 443

From: Mark Elsen <mark.elsen@dont-contact.us>
Date: Mon, 10 Apr 2006 19:20:15 +0200

> I run smartfilter plugin for squid. I define catagorys that I want blocked to
> the internet. I found that I am unable to block any website that has https://

 Do you really want to block secure websites ? (...)

> appended to the front end (443). As a result, a lot of the student body has
> figured out how to bypass the filter. (smart kids). My question is do I need
> these acl's? They are:
> acl SSL_ports port 443 563
> acl Safe_ports port 443 563 # https, snews
> Then I have:
> http_access deny !Safe_ports
> http_access deny CONNECT !SSL_ports
>
> Looks like this is a standard squid.conf file. I am thinking that as a result
> of the above acls websites with https:// dont go through my cache, therefore
>...

 On the contrary, the intend of the default settings is to allow secure sites
on the standard SSL port (only).

M.
Received on Mon Apr 10 2006 - 11:20:16 MDT

This archive was generated by hypermail pre-2.1.9 : Mon May 01 2006 - 12:00:02 MDT