Revolutionize Network Management with Squid Client_dst_passthru

... client_dst_passthru 2556# With NAT or TPROXY intercepted traffic ... client-to-squid and server-to-squid SSL hello messages. 2800# XXX ... ... SQUID Web Proxy Cache http://www.squid-cache.org ... client_dst_passthru && checklist->request && (checklist->request->flags.intercepted || checklist ... This option (on by default) prevents alternative DNS entries being located to send intercepted traffic DIRECT to an origin server. The clients original ... This overrides 'client_dst_passthru off'. For now suspicious intercepted CONNECT requests are always responded to with an HTTP 409 (Conflict) error page. ... squid/squid.pem always_direct allow all ssl_bump server-first all sslproxy_cert_error allow all client_dst_passthru off tls_outgoing_options ... ... client_dst_passthru. +# +# * Intercepted requests which fail verification are sent +# to the client original destination instead of DIRECT ... ... squid.crt key=/etc/squid/ssl_certs/squid.key http_port 3129 tproxy http_port 3128 # TAG ... client_dst_passthru on cache_mem 1024 MB ... squid/ssldb -M 10MB acl step1 at_step SslBump1 ssl_bump peek step1 ssl_bump splice all host_verify_strict off client_dst_passthru on ... In addition we are using client_dst_passthru off. ... Cheers Amos. squid-users mailing list squid ... ... client_dst_passthru on === Configuration snippet for squid-4.13 with OpenSSL ... ___ squid-users mailing list [email protected] http ...