Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Random short periods of offline in https outlook.office.com

    Scheduled Pinned Locked Moved Cache/Proxy
    1 Posts 1 Posters 272 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • SipriusPTS
      SipriusPT
      last edited by

      Hello everyone,

      I have a squid 0.4.45_3 + squidproxy 1.16.18_13 setup and running for a single interface, running as a Transparent Proxy with ACL (being all access blocked by default) and no cache.

      And from times to times, I have machines, doing it randomly, giving ERR_SSL_PROTOCOL_ERROR and ERR_FAILED in browsers. I've already installed the proxy cert CA, but still I am seeing those ERR_SSL_PROTOCOL_ERROR.

      I've also installed the SSL CA cert in every machine behind this proxy, in Trusted Root CA.

      In squid for SSL filtering, it says that for Splice All, doesnt need to be intalled the CA certificate in below clients, who is the same interface setup for proxy. But in CA option, for SSL interception enabled, it needs a certificated there, and there is a warning, that the CA cert must be installed in each computer to avoid SSL errors. I really dont know how it must be ...

      Here are the options that I have right know:

      481a08bb-cdf7-4811-9349-b04a6514ee48-image.png
      b3353ff3-89f5-41bd-8bbd-12f3f04dce08-image.png
      db36557c-f913-4560-9fe2-33cedabc91e3-image.png
      27098f40-a47b-4c93-a1bf-46c26e85c788-image.png

      This ACL that I have is applied to this group of computers:

      acc8c648-4b3e-4e02-8ed8-76eb54b64b40-image.png
      9b0eb4d1-e7a9-4278-8688-4059d2709d55-image.png

      Firewall rules applied to thos machines behind proxy:

      2b3c7cdd-9a59-4b67-8b31-6426550c6d88-image.png

      Sometimes by just refreshing outlook.office.com, in one machine behind the proxy, seems to solve those errors in others. I've tried with and without cache, and in edge and chrome browsers, but doesnt seem to be a browsers issue.

      I really dont know what to do anymore.

      Anyone here knows or have ever encountered an issue like this?

      Thanks in advance!

      1xSG-4860-1U
      1xSG-3100
      2xpfSense Virtual Machines

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.