[squid-users] Re: Same port for http and https ??

From: Karandeep Malik <karandeepmalik_at_gmail.com>
Date: Fri, 18 Jul 2008 15:33:07 +0530

On Fri, Jul 18, 2008 at 3:30 PM, Karandeep Malik
<karandeepmalik_at_gmail.com> wrote:
> Hi All,
>
> I am using a standard proxy configuration. Can I use same port for
> https and https ?
>
> When I do use the forward proxy mode i.e. tunneling of client requests
> to server, I see wireshark actually capturing plain http packets from
> my proxy server to the main server instead of SSL/TLS packets.
>
> This is my configuration:-
>
> http_port 8080
>
> # TAG: cache_peer_domain
> #Default:
> # none
>
> mime_table c:/squid/etc/mime.conf
>
> auth_param ntlm program C:/squid/libexec/mswin_ntlm_auth.exe -A Administrators
> auth_param ntlm children 5
> auth_param ntlm keep_alive on
>
> #Recommended minimum configuration:
> acl aclname proto HTTP
> acl auth proxy_auth REQUIRED
> acl all src 0.0.0.0/0.0.0.0
> acl manager proto cache_object
> acl localweb src 146.122.190.185
> acl localhost src 127.0.0.1/255.255.255.255
> acl to_localhost dst 127.0.0.0/8
> acl destall dst 0.0.0.0/0.0.0.0
> acl sangram src 146.122.190.116
> acl SSL_ports port 443
> acl Safe_ports port 80 # http
> acl Safe_ports port 21 # ftp
> acl Safe_ports port 443 # https
> acl Safe_ports port 70 # gopher
> acl Safe_ports port 210 # wais
> acl Safe_ports port 1025-65535 # unregistered ports
> acl Safe_ports port 280 # http-mgmt
> acl Safe_ports port 488 # gss-http
> acl Safe_ports port 591 # filemaker
> acl Safe_ports port 777 # multiling http
> acl CONNECT method CONNECT
>
> http_access allow localweb auth
> http_access allow localhost auth
> http_access allow sangram auth
> http_access allow destall auth
> http_access allow manager localhost auth
> http_access deny manager
> http_access deny !Safe_ports
> http_access allow CONNECT
> http_access deny CONNECT !SSL_ports
> http_access deny all
>
> # TAG: tcp_outgoing_address
> ##Default:
> # none
>
> httpd_accel_no_pmtu_disc off
>
>
>
> # TAG: always_direct
> # none
>
> # TAG: never_direct
> ##Default:
> # none
>
> # Leave coredumps in the first cache dir
> coredump_dir c:/squid/var/cache
>
> And all other default options.
>
>
> Am I missing sonmething ???
>
> Reagrds,
> Karandeep Malik
>

My squid server is 2.6 stable 10.
Thanks
Received on Fri Jul 18 2008 - 10:03:11 MDT

This archive was generated by hypermail 2.2.0 : Fri Jul 18 2008 - 12:00:04 MDT