mrmarkuz
September 6, 2018, 11:28am
21
Please also share the output of config show squid and config show squidguard.
Some config files are templated so you shouldn’t edit them directly because your changes will be overwritten. Please use custom templates instead.
Some recommendations from the docs :
When Samba Active Directory is installed, or the server is joined to a remote Active Directory, Windows machines can use integrated authentication with Kerberos. All Windows clients must access the proxy server using the FQDN.
All LAN clients must use the server itself as DNS, either directly or as a forwarder.
1 Like
m.traeumner
September 6, 2018, 11:42am
22
I don’t find the https configuration at your conf file.
acl https_proto proto https
always_direct allow https_proto
ssl_bump none localhost
sslproxy_options NO_SSLv2,NO_SSLv3,No_Compression
sslproxy_cipher ALL:!SSLv2:!ADH:!DSS:!MD5:!EXP:!DES:!PSK:!SRP:!RC4:!IDEA:!SEED:$
# TLS/SSL bumping definitions
acl tls_s1_connect at_step SslBump1
acl tls_s2_client_hello at_step SslBump2
acl tls_s3_server_hello at_step SslBump3
# TLS/SSL bumping steps
ssl_bump peek tls_s1_connect all
ssl_bump splice all
# peek at TLS/SSL connect data
# splice: no active bumpingHave you set the following:
1 Like
