Koozali.org: home of the SME Server

Problem accessing SSL websites with Squid transparent & DansGuardian

Offline rmosanu

  • 3
  • +0/-0
Hello!

Since yesterday when I updated Squid package and now I cannot access anymore any https:// site

Can anyone help me?

Offline Stefano

  • *
  • 10,894
  • +3/-0
Re: Problem accessing SSL websites with Squid transparent & DansGuardian
« Reply #1 on: June 02, 2009, 12:31:59 PM »
you should start helping us checking the logs for errors. ;-)

Stefano

Offline rmosanu

  • 3
  • +0/-0
Re: Problem accessing SSL websites with Squid transparent & DansGuardian
« Reply #2 on: June 02, 2009, 12:53:26 PM »
I changed back default settings:

config setprop squid TransparentPort 3128
config setprop squid Transparent yes
config delprop dansguardian portblocking
signal-event post-upgrade; signal-event reboot

And now I can access HTTPS sites but I lost DansGuardian filtering.

In what I was able to see iptables -nl there was a REJECT policy on port 443 whilst in squid.conf there was no reference to SSL (acl SSL method CONNECT).

I will post logs after office hours to be able to recreate the events - now I'm risking to block the entire activity depending on secure internet traffic.

Offline Stefano

  • *
  • 10,894
  • +3/-0
Re: Problem accessing SSL websites with Squid transparent & DansGuardian
« Reply #3 on: June 02, 2009, 04:41:48 PM »
hi..

read here

HTH
ciao
Stefano

Offline rmosanu

  • 3
  • +0/-0
Re: Problem accessing SSL websites with Squid transparent & DansGuardian
« Reply #4 on: June 02, 2009, 04:46:58 PM »
Sorry Stefano,
The link provided just drops me into the Forum index.
Can you, please, repost-it?

Regards,
Radu

Offline Stefano

  • *
  • 10,894
  • +3/-0
Re: Problem accessing SSL websites with Squid transparent & DansGuardian
« Reply #5 on: June 02, 2009, 07:04:55 PM »
Sorry Stefano,
The link provided just drops me into the Forum index.
Can you, please, repost-it?

Regards,
Radu

doh, I can open it...

anyway, read the topic "smeserver-dansguardian 2.9-6 update breaks SSL/https"

ciao
Stefano

Offline Stefano

  • *
  • 10,894
  • +3/-0
Re: Problem accessing SSL websites with Squid transparent & DansGuardian
« Reply #6 on: June 02, 2009, 07:06:25 PM »
Sorry Stefano,
The link provided just drops me into the Forum index.
Can you, please, repost-it?

Regards,
Radu

doh, I can open it...

anyway, read the topic "smeserver-dansguardian 2.9-6 update breaks SSL/https"

ciao
Stefano