Koozali.org: home of the SME Server

Obsolete Releases => SME 7.x Contribs => Topic started by: rmosanu on June 02, 2009, 10:09:35 AM

Title: Problem accessing SSL websites with Squid transparent & DansGuardian
Post by: rmosanu on June 02, 2009, 10:09:35 AM

Hello!

Since yesterday when I updated Squid package and now I cannot access anymore any https:// site

Can anyone help me?

Title: Re: Problem accessing SSL websites with Squid transparent & DansGuardian
Post by: Stefano on June 02, 2009, 12:31:59 PM

you should start helping us checking the logs for errors. ;-)

Stefano

Title: Re: Problem accessing SSL websites with Squid transparent & DansGuardian
Post by: rmosanu on June 02, 2009, 12:53:26 PM

I changed back default settings:

config setprop squid TransparentPort 3128
config setprop squid Transparent yes
config delprop dansguardian portblocking
signal-event post-upgrade; signal-event reboot

And now I can access HTTPS sites but I lost DansGuardian filtering.

In what I was able to see iptables -nl there was a REJECT policy on port 443 whilst in squid.conf there was no reference to SSL (acl SSL method CONNECT).

I will post logs after office hours to be able to recreate the events - now I'm risking to block the entire activity depending on secure internet traffic.

Title: Re: Problem accessing SSL websites with Squid transparent & DansGuardian
Post by: Stefano on June 02, 2009, 04:41:48 PM

hi..

read here (http://forums.contribs.org/index.php/topic,44106.0.html)

HTH
ciao
Stefano

Title: Re: Problem accessing SSL websites with Squid transparent & DansGuardian
Post by: rmosanu on June 02, 2009, 04:46:58 PM

Sorry Stefano,
The link provided just drops me into the Forum index.
Can you, please, repost-it?

Regards,
Radu

Title: Re: Problem accessing SSL websites with Squid transparent & DansGuardian
Post by: Stefano on June 02, 2009, 07:04:55 PM

Quote from: rmosanu on June 02, 2009, 04:46:58 PM

Sorry Stefano,
The link provided just drops me into the Forum index.
Can you, please, repost-it?

Regards,
Radu

doh, I can open it...

anyway, read the topic "smeserver-dansguardian 2.9-6 update breaks SSL/https"

ciao
Stefano

Title: Re: Problem accessing SSL websites with Squid transparent & DansGuardian
Post by: Stefano on June 02, 2009, 07:06:25 PM

Quote from: rmosanu on June 02, 2009, 04:46:58 PM

Sorry Stefano,
The link provided just drops me into the Forum index.
Can you, please, repost-it?

Regards,
Radu

doh, I can open it...

anyway, read the topic "smeserver-dansguardian 2.9-6 update breaks SSL/https"

ciao
Stefano