Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 564 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Seeing https sites via transparent proxy

Jalmillategui
Hello, this idea just ocurred to me,

If i create a dnat rule that sends the https traffic to the proxy, it should be picked up by it and resolved the query, right??

regards

P.D: i think there is going to be an issue with the ssl certificates....

be back when I have tested the idea


This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to RFCat_vk_01
    Transparent HTTPS proxies are "rather" expensive, there are only 2 or 3 on the market.
  • 0 in reply to NimmdirKeks
    my advice?  just open port 443 in your firewall rules and don't worry about trying to proxy https as doing so is a security risk.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0 in reply to William Warren
    I've tried adding a packet filter rule for HTTPS from my internal network to the outside world.  it worked once, for about an hour, but after a reboot of the Linux box running ASG, it hasn't worked since.  I've tried watching various logs and live logs but haven't seen any indication of where things are going awry.  Where should I be looking?  No machine behind my ASG box can surf to HTTPS addresses, though HTTP and email work just fine.