Dansguardian Squid and HTTPS

viper3two · 04-06-2010, 11:37 AM

Hi
Thanks to folks on this board, I have set up a transparent proxy server with 2 nics. It is just a passthrough box istening for port 80 requests. I have Ubuntu 9.10 and Dansguardian, Squid and Webmin interface. It works great so far with no issues.
One big big thing that I ran into though, is https sites. I know that https is port 443, http is 80. Is there a way that I can block https sites also using Dansguardian and Squid?

Thanks for the help

hi2arun · 04-06-2010, 01:14 PM

Well, I dunno much about Dansguardian. To block HTTPS, isn't it straight forward to add an ACL to drop all TCP DST port 443?

If you are redirecting all ports to Squid or if Squid is configured as proxy in users' machines, then disable CONNECT to port 443 in Squid configuration. This should do.

Squid conf to stop HTTPS:

Quote:

acl SSL_ports port 443
acl CONNECT method CONNECT
http_access deny CONNECT SSL_ports

viper3two · 04-06-2010, 01:49 PM

The way I have it set up is in bridged mode, passthrough box, one nic in, one nic out, then that out nic goes to the router.

So if I add that to squid to STOP https, would it not stop all https requests, or would it direct to squid?

I am trying to find a way that I could just add....for instance....https://us.etrade.com or something to the dansguardian list to block it.

I assume that since squid-dans is listening to port 80 only, it is not seeing that port 443 request.

Is there a way to have squid-dans check https requests?

Thanks