transparent browsing https

Ammad · 09-25-2009, 01:44 AM

Hi,

i am using squid transparent browsing. its working fine for 80. but when i try to enable transparent browsing for HTTPS, users are facing problems to access https web sites.

using following rules

Code:

/sbin/iptables -t nat -A PREROUTING  -p tcp --dport 443 -j REDIRECT --to-port 8080
/sbin/iptables -t nat -A PREROUTING  -p tcp --dport 443 -j DNAT --to 192.168.12.3:8080

GlennsPref · 09-25-2009, 03:03 AM

The lines I have for the FW are different, also squid contains these lines to allow access.

squid...

Code:

acl SSL_ports port 443 563
acl Safe_ports port 443 563     # https, snews

iptables script...

Code:

..........snip....
# EGRESS (upstream)
#	
	# SSH
	$IPTABLES -t mangle -A POSTROUTING -p tcp --dport 22 -j MARK --set-mark 10
    
	# Web, SSL
	$IPTABLES -t mangle -A POSTROUTING -p tcp --dport 80 -j MARK --set-mark 20
	$IPTABLES -t mangle -A POSTROUTING -p tcp --dport 443 -j MARK --set-mark 20
..........snip....

I also have the https use the same proxy in the "WebBrowser settings".

Hope this helps, Regards Glenn

Ammad · 09-25-2009, 04:49 AM

using browser setting allows me for HTTPS websites. but i dont want to do these settigs for individual system.

GlennsPref · 09-25-2009, 05:59 PM

Hi, Here is a page that I have found useful in setting up my fw gateway.

I hope it helps you....
http://www.linuxhomenetworking.com/w...ess_with_Squid

Regards Glenn