[squid-users] cannot browse https sites

[Yogesh Patil]

Hi ankush,
               I tryied the iptables rule you given but still i am not able
to get the results.


On 2/1/08, ankush grover <ankushsquid at gmail.com> wrote:
>
> On Fri, Feb 1, 2008 at 12:02 AM, Yogesh Patil <yogesh at technotux.net>
> wrote:
> > hi,
> >     I am using SQUID 2.6.STABLE17 with CentOS 5, & BIND
> >  DNS SERVER configured on the same box, i have configured squid as
> >  transparent proxy with all default settings , and applied iptables
> >  rule by using the following
> >  command
> >
> >  iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT
> >  --to-port 3128
> >
> >     i am able to browse http websites, but when i try to open https
> >  sites, such as, gmail.com, hotmail.com etc.. i am not able to get any
> >  response from the proxy.
> >  i have also tryied with forwarding 443 (https) port to the 3128
> >  (squid) port but still no success.
> >
>
> Hi Yogesh,
>
> Try below iptables rules:
>
>
> iptables -A FORWARD -p tcp -m multiport -s $LAN_NETWORK --dport
> $YAHOO_CHAT,$YAHOO_WEB_CAM -j ACCEPT
>
> iptables  -A FORWARD -p tcp -m multiport -s $LAN_NETWORK --dport
> $HTTPS,$HTTP -j ACCEPT
>
> Ports for HTTPS="443",YAHOO_CHAT="5050",YAHOO_WEB_CAM="2047,2048,5100",
> where $LAN_NETWORK is your lan network for ex 192.168.1.0/24 .
>
> Regards
>
> Ankush
>



-- 
Regards,
Yogesh Patil
Technotux Solutions
33/114, Gandhi Nagar,
Jilha Peth, Jalgaon - 425001
Maharashtra, INDIA
Phone :- +91-257-2235596
Mobile:- +91-9890931432, 9422778329
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.fedoraproject.org/pipermail/india/attachments/20080201/4f6a25d7/attachment.html