Re: [ufdbGuard] ssl bump+peek+slice - https redirect issue

[Krishnadass K. <kri...@gm...>]

Hi Marcus,

I modified my typo mistake and when comment the option
"block-bumped-connect on" it does not
Block my https request of my ACL list. It just all with "BPASS". Here I
attached my squid configuration and log,
ufdbguardd configuration and log.

http://Mylocalhost.localdomain/ <http://mylocalhost.localdomain/> is my PC .
for http ACL list request redirection happening .
The main problem is https ACL list request redirection is not happening
,due to this my squid RAM memory usage is increasing without any boundaries.


On Sat, Oct 6, 2018 at 12:36 AM Marcus Kool <mar...@ur...>
wrote:

> X-Mail-List: ufdbGuard
> Hi,
>
> First you need to remove a typo and use "https://" instead of "htps://"
> for redirect-bumped-https.
>
> The option "block-bumped-connect on" is rarely needed.
> Are you using it in an attempt to make it work ?
> I suggest to comment it out and try again.
>
> What are the ssl_bump config lines in squid.conf ?
>
> A redirection URL is sent back to Squid which sends it back to the browser
> and should be a URL that is valid for the browser.
> A redirection URL with "http://Mylocalhost.localdomain/..." tells the
> browser to try to redirect to a site on the PC where the browser is
> (assuming Mylocalhost.localdomain is 127.0.0.1 or ::1).   Is
> that your intention?
>
> Marcus
>
>
>
> On 05/10/18 08:38, Krishnadass Kalidoss wrote:
> > X-Mail-List: ufdbGuard
> >
> >
> >
> > Hi,
> > Here I have attached my ufdbguard log output. I am runing squid with
> ufdbguard in freebsd system. when https site is blocked does not redirect .
> > give me any suggestion.
> >
> > Thanks
> >
> >
> >
> >
> > _______________________________________________
> > ufdbGuard-support mailing list
> > ufd...@li...
> > https://lists.sourceforge.net/lists/listinfo/ufdbguard-support
> >
>
>
> _______________________________________________
> ufdbGuard-support mailing list
> ufd...@li...
> https://lists.sourceforge.net/lists/listinfo/ufdbguard-support
>


-- 
Regards,

Krishnadass.K,