Re: [squid-users] Implementing SslBump using Bump-Server-First in Transparent mode using squid-3.HEAD-20121231-r12554

I have the same configuration, except I use wccp/gre tunnel. Port 80
requests work but 443 don't. I am not sure if this is right, but even
though data was received on wccp, no data was transmitted back over
wccp. Is this expected behavior? If not, what do I do to make
response go over wccp?

my iptable config look like this

iptables -t nat -A PREROUTING -i wccp0 -p tcp --dport 80 -j DNAT --to
192.168.5.81:3228
iptables -t nat -A PREROUTING -i wccp0 -p tcp --dport 443 -j DNAT --to
192.168.5.81:3229

and squid.conf

wccp2_service dynamic 90
wccp2_service_info 90 protocol=tcp priority=240 ports=80,443

On Tue, Jan 1, 2013 at 2:08 AM, Amos Jeffries <squid3_at_treenet.co.nz> wrote:
> On 1/01/2013 7:19 p.m., Swapneel Patnekar wrote:
>>
>> Eliezer & Amos,
>>
>> Thank you for your input & assistance.
>>
>> The iptables rules are on the same machine in which I'm running squid.
>>
>> Amos, just for my understanding changing the below given directive
>> should do the trick ?
>>
>> ssl_bump client-first all
>>
>> to
>>
>> ssl_bump server-first all
>
>
> As far as I am aware at this stage yes.
>
> Amos
Received on Tue Jan 01 2013 - 22:41:35 MST