This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Seeing https sites via transparent proxy

Hello, this idea just ocurred to me,

If i create a dnat rule that sends the https traffic to the proxy, it should be picked up by it and resolved the query, right??

regards

P.D: i think there is going to be an issue with the ssl certificates....

be back when I have tested the idea

This thread was automatically locked due to age.

Parents

0 William Warren over 19 years ago

no...https is not able to be proxied..google https proxy for more details.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 William Warren over 19 years ago

no...https is not able to be proxied..google https proxy for more details.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 RFCat_vk_01 over 19 years ago in reply to William Warren

If you want to use the proxy for https in v7.x you need to be in standard mode and enable the proxy function in your browser.

Ian M
Cancel
Vote Up 0 Vote Down

Cancel
0 NimmdirKeks over 19 years ago in reply to RFCat_vk_01

Transparent HTTPS proxies are "rather" expensive, there are only 2 or 3 on the market.
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 19 years ago in reply to NimmdirKeks

my advice? just open port 443 in your firewall rules and don't worry about trying to proxy https as doing so is a security risk.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel
0 WortmanB over 18 years ago in reply to William Warren

I've tried adding a packet filter rule for HTTPS from my internal network to the outside world. it worked once, for about an hour, but after a reboot of the Linux box running ASG, it hasn't worked since. I've tried watching various logs and live logs but haven't seen any indication of where things are going awry. Where should I be looking? No machine behind my ASG box can surf to HTTPS addresses, though HTTP and email work just fine.
Cancel
Vote Up 0 Vote Down

Cancel