Re: [squid-users] HTTPS CONNECT issue

From: Robert Collins <robert.collins@dont-contact.us>
Date: Thu, 10 Jan 2002 00:06:20 +1100

----- Original Message -----
From: "Joe Cooper" <joe@swelltech.com>

> Francis Turner wrote:
>
> > Probably a dumb newbie question... although I did search the
archives
> > and stumbled on this thread :
> > http://www.squid-cache.org/mail-archive/squid-users/200110/0178.html
> >
> > I'm trying to see if squid will transparently redirect HTTPS
CONNECTS
> > that it receives to a second (checkpoint) proxy/firewall. I think
the
> > answer is no it just does the CONNECT direct to the internet server
and
> > there is no way to change it.
> >
> > Just to be clear the network looks like this
> > user - squid - chkpoint FW/proxy - Internet
> >
> > using the cache_peer parent option and the transparent proxy
enabling
> > options HTTP is successfully retrieved through the FW and cached.
What I
> > would like to do is received my users https://securehost requests
and
> > direct them to the checkpoint FW. But from observation what happens
is
> > that squid tries to setup the direct conect to the secure server
> > instead, which doesn't work as the FW drops the traffic.

See the Squid FAQ, look for "I'm behind a firewall". (hint: never_direct
is your friend.

Rob
Received on Wed Jan 09 2002 - 06:06:22 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:05:42 MST