SquidGuard https bug?
-
Greetings.
I'm running 1.2.3 with squid+squidguard and I have setup some filtering so that people can't access social networks (blk_BL_socialnet ).
It has been working fine until last week I tried to access facebook through HTTPS (https://www.facebook.com).
Seems like using HTTPS bypasses my filters.
Can anyone confirm this issue?
Cheers -
You cannot transparently proxy HTTPS due to the way SSL works. You would essentially be doing a man-in-the-middle attack against the browser by trying to do that transparently. Some hacked-up methods can do it but it's both insecure and a bad idea in general.
Hardcoding user's proxy settings in their browser and blocking outbound 443 is the only way to ensure HTTPS goes through the proxy.
-
Darn…hope it would be easier.
Maintaining proxy settings through AD might be doable but would that work for ANY browser or only IE?
Thanks for the tip jimp ;)
Cheers -
I think that only works for AD, though you can setup WPAD and make people put their browsers on auto detect for proxy settings.
Or just tell them "If you want HTTPS, use the proxy, otherwise you're stuck with HTTP"
-
I think that only works for AD, though you can setup WPAD and make people put their browsers on auto detect for proxy settings.
Or just tell them "If you want HTTPS, use the proxy, otherwise you're stuck with HTTP"
I use WPAD & this is good way - i can redefine proxy settings once for all users.
