Not able to open any site of google after enabling SSL in squid
-
Hi,
I am using version pfsense 2.4.4 and I have one problem after enabling SSL in squid I am not able to browse any site of google getting error can't establish connection to the server,
Can anyone let me know the solution for same.
-
disabling ssl or configuring it correctly ...
there are a bunch of howtos floating around on this forum on how todo break ssl security & break your users' privacy, like the one below
https://forum.netgate.com/topic/100342/guide-to-filtering-web-content-http-and-https-with-pfsense-2-3
-
@heper I have done all this things, my problem is only google sites are not working other sites are working fine, I have getting error can't establish connection to server.
Can you please help me in this.
-
@shrinivasg said in Not able to open any site of google after enabling SSL in squid:
@heper I have done all this things, my problem is only google sites are not working other sites are working fine, I have getting error can't establish connection to server.
May be.
But 'we' didn't.
As you can see in the thread, started by @aGeekhere, google.com is a special case.
And worse : google can change their IP's, when ever they feel up to it.https://forum.netgate.com/topic/100342/guide-to-filtering-web-content-http-and-https-with-pfsense-2-3 even talks about some source code changes. This was valid back then. Maybe not needed anymore, maybe it still is.
Squid and squidguard are not packages that can "be installed, activated and done". You have to have a global vision of what happens all the time, detect all the exception, handle them all. And when you're done, something will stop working tomorrow. The Internet is not some static thing, it huge and in constant evolution.
If you want to control all in- and out going traffic you have to earn that right. This technic has been made rather difficult, and we all know why.Sorry, there is no "click there and all will be fine" solution.
Maybe, if you post detailed information - something that merits a reply, @aGeekhere will help you.
-
@gertjan I know all Google doesn't keep Ip same for all the time, what more information do I need to provide please let me know so that I can provide.
Is anybody using squid and squidGuard with enabling SSL, please let me know what you followed, so that I can also use the same setting, if nobody is using squid / SquidGuard then what is use of making PFSENSE with squid and SquidGuard with SSL option.
-
Hi Please help me I am stuck on this issue.
-
@shrinivasg said in Not able to open any site of google after enabling SSL in squid:
squid and squidGuard
Can't help you any further, I'm not using squid neither squidGuard (and my local laws forbid any MITM technics).
I advise you to checkout the support forum for both squid and squidGuard : your question is known over there.Also : https://forum.netgate.com/topic/138752/when-squid-4-2
-
@gertjan Thanks Gertjan,
Can anyone else help me Please.
-
Check this :
What ? Google doesn't accept MITM anymore ?
