Transparent Squid-squidquard and https

apant

Hi!

I use transparent squid with squidguard and I wonder if there is a way to catch https requests also. For example I block the facebook.com domain but if users write https://www.facebook.com they pass the rule. Is there any way to block https too transparently?

Nachtfalke

It could not easy be done as I read in some other forum posts. You have to copy certificates on the squid and this breaks some RFCs.

Perhaps you should search the forum for better explaination in other threads or find a way to deploay the proxy server address to your clients browsers (GPO, WPAD)

AS

I cant even get transparent squid working with HTTP web traffic could you help?

Nachtfalke

post screenshots of your squid config, please.

AS

I have attached my squid configuration, but ignore the 'Wireless' interface as it does not work in my VM

proxy1.png_thumb

Nachtfalke

The configuration is ok.
So every traffic which passes LAN to somewhere else and using port 80 (http) is using the proxy.

You can verify this when you look ath the logs (access.log) in

/var/squid/log

Connect to the pfsense cosole and use:

tail -F /var/squd/log/access.log

and then browse a webpage like google.com. Then you will see that squid is working.

AS

Thanks for you help its working again now,

Is there anything I can help you with ?
AS.