LINUX.ORG.RU
решено Форум — Admin  

squid basic authorization не работает с http , с https работает

 , ,


0

1

Если заходить на любой http сайт он игнорирует авторизацию, если сайт с ssl запрашивает логин и пароль, нужно чтоб с http тоже была авторизация

squiv -v

Squid Cache: Version 3.5.12

Service Name: squid

Ubuntu linux

configure options: '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=${prefix}/include' '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info' '--sysconfdir=/etc' '--localstatedir=/var' '--libexecdir=${prefix}/lib/squid3' '--srcdir=.' '--disable-maintainer-mode' '--disable-dependency-tracking' '--disable-silent-rules' 'BUILDCXXFLAGS=-g -O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security -Wl,-Bsymbolic-functions -fPIE -pie -Wl,-z,relro -Wl,-z,now' '--datadir=/usr/share/squid' '--sysconfdir=/etc/squid' '--libexecdir=/usr/lib/squid' '--mandir=/usr/share/man' '--enable-inline' '--disable-arch-native' '--enable-async-io=8' '--enable-storeio=ufs,aufs,diskd,rock' '--enable-removal-policies=lru,heap' '--enable-delay-pools' '--enable-cache-digests' '--enable-icap-client' '--enable-follow-x-forwarded-for' '--enable-auth-basic=DB,fake,getpwnam,LDAP,NCSA,NIS,PAM,POP3,RADIUS,SASL,SMB' '--enable-auth-digest=file,LDAP' '--enable-auth-negotiate=kerberos,wrapper' '--enable-auth-ntlm=fake,smb_lm' '--enable-external-acl-helpers=file_userip,kerberos_ldap_group,LDAP_group,session,SQL_session,unix_group,wbinfo_group' '--enable-url-rewrite-helpers=fake' '--enable-eui' '--enable-esi' '--enable-icmp' '--enable-zph-qos' '--enable-ecap' '--disable-translation' '--with-swapdir=/var/spool/squid' '--with-logdir=/var/log/squid' '--with-pidfile=/var/run/squid.pid' '--with-filedescriptors=65536' '--with-large-files' '--with-default-user=proxy' '--enable-build-info=Ubuntu linux' '--enable-linux-netfilter' 'build_alias=x86_64-linux-gnu' 'CFLAGS=-g -O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security -Wall' 'LDFLAGS=-Wl,-Bsymbolic-functions -fPIE -pie -Wl,-z,relro -Wl,-z,now' 'CPPFLAGS=-Wdate-time -D_FORTIFY_SOURCE=2' 'CXXFLAGS=-g -O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security'

cat /etc/squid/squid.conf

auth_param basic program /usr/lib/squid/basic_ncsa_auth /etc/squid/internet_users
auth_param basic children 5
auth_param basic realm 'Insert data'
auth_param basic credentialsttl 2 hours
auth_param basic blankpassword off
acl SSL_ports port 443
acl Safe_ports port 80        
acl Safe_ports port 21        
acl Safe_ports port 443       
acl Safe_ports port 70        
acl Safe_ports port 210       
acl Safe_ports port 1025-65535
acl Safe_ports port 280       
acl Safe_ports port 488       
acl Safe_ports port 591       
acl Safe_ports port 777       
acl CONNECT method CONNECT
acl GET method GET
acl HEAD method HEAD
acl POST method POST
acl PUT method PUT
acl PURGE method PURGE
acl DELETE method DELETE
acl OPTIONS method OPTIONS
acl PATCH method PATCH
acl internet_users proxy_auth REQUIRED
http_access allow GET
http_access allow HEAD
http_access allow POST
http_access allow PUT
http_access allow PURGE
http_access allow DELETE
http_access allow OPTIONS
http_access allow PATCH
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow internet_users
http_access allow localhost manager
http_access deny manager
http_access deny all
access_log stdio:/var/log/squid/access.log squid
coredump_dir /var/spool/squid
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
refresh_pattern (Release|Packages(.gz)*)$      0       20%     2880
refresh_pattern .               0       20%     4320
via off
request_header_access Via deny all
forwarded_for delete

кусок лога 

1513264357.505      0 192.168.10.139 TCP_DENIED/407 4130 CONNECT tiles.services.mozilla.com:443 - HIER_NONE/- text/html
1513264357.926    363 192.168.10.139 TCP_MISS/200 12229 GET http://7d3.ru/ - HIER_DIRECT/81.177.141.112 text/html
1513264357.949      0 192.168.10.139 TCP_DENIED/407 4130 CONNECT tiles.services.mozilla.com:443 - HIER_NONE/- text/html
1513264357.961      0 192.168.10.139 TCP_DENIED/407 4130 CONNECT tiles.services.mozilla.com:443 - HIER_NONE/- text/html
1513264359.162     85 192.168.10.139 TCP_MISS/200 507 GET http://counter.yadro.ru/hit? - HIER_DIRECT/88.212.201.193 image/gif
1513264359.681     15 192.168.10.139 TCP_MISS/200 239 GET http://7d3.ru/favicon.ico - HIER_DIRECT/81.177.141.112 image/vnd.microsoft.icon
1513264361.784      0 192.168.10.139 TCP_DENIED/407 4154 CONNECT ff.kis.v2.scr.kaspersky-labs.com:443 - HIER_NONE/- text/html
1513264370.607      0 192.168.10.139 TCP_DENIED/407 4130 CONNECT tiles.services.mozilla.com:443 - HIER_NONE/- text/html
1513264370.770     78 192.168.10.139 TCP_MISS/301 816 GET http://coinnews.io/market/food-drink/kitchen-gadgets-review-raclette-cheese-set-classy-as-heck/ - HIER_DIRECT/54.36.26.180 text/html
1513264370.783      0 192.168.10.139 TCP_DENIED/407 4090 CONNECT bitnewstoday.com:443 - HIER_NONE/- text/html
1513264372.162      0 192.168.10.139 TCP_DENIED/407 4130 CONNECT tiles.services.mozilla.com:443 - HIER_NONE/- text/html
1513264372.168      0 192.168.10.139 TCP_DENIED/407 4130 CONNECT tiles.services.mozilla.com:443 - HIER_NONE/- text/html
1513264377.753     50 192.168.10.139 TCP_MISS/200 457 GET http://detectportal.firefox.com/success.txt - HIER_DIRECT/2.20.255.96 text/plain
1513264379.340      0 192.168.10.139 TCP_DENIED/407 4134 CONNECT safebrowsing.googleapis.com:443 - HIER_NONE/- text/html
1513264383.251      0 192.168.10.139 TCP_DENIED/407 4154 CONNECT ff.kis.v2.scr.kaspersky-labs.com:443 - HIER_NONE/- text/html
1513264415.409      0 192.168.10.139 TCP_DENIED/407 4154 CONNECT ff.kis.v2.scr.kaspersky-labs.com:443 - HIER_NONE/- text/html
1513264422.814    671 192.168.10.139 TCP_MISS/200 32554 GET http://www.aeropotok.site/ - HIER_DIRECT/89.111.178.90 text/html
1513264422.851     27 192.168.10.139 TCP_MISS/200 7258 GET http://www.aeropotok.site/css/jquery.bxslider.css - HIER_DIRECT/89.111.178.90 text/css
1513264422.928    102 192.168.10.139 TCP_MISS/200 8601 GET http://www.aeropotok.site/css/styles_1024.css? - HIER_DIRECT/89.111.178.90 text/css
1513264422.983     36 192.168.10.139 TCP_MISS/200 2747 GET http://www.aeropotok.site/js/zajax.js - HIER_DIRECT/89.111.178.90 application/javascript
1513264423.009    185 192.168.10.139 TCP_MISS/200 89938 GET http://www.aeropotok.site/css/style.css? - HIER_DIRECT/89.111.178.90 text/css
1513264423.011    186 192.168.10.139 TCP_MISS/200 28520 GET http://www.aeropotok.site/css/styles_320.css? - HIER_DIRECT/89.111.178.90 text/css
1513264423.024     28 192.168.10.139 TCP_MISS/200 1678 GET http://www.aeropotok.site/js/status_windows.js - HIER_DIRECT/89.111.178.90 application/javascript
1513264423.064     61 192.168.10.139 TCP_MISS/200 16141 GET http://www.aeropotok.site/js/json.js - HIER_DIRECT/89.111.178.90 application/javascript
1513264423.065     42 192.168.10.139 TCP_MISS/200 2082 GET http://www.aeropotok.site/js/menu.js - HIER_DIRECT/89.111.178.90 application/javascript
1513264423.071     66 192.168.10.139 TCP_MISS/200 4037 GET http://www.aeropotok.site/js/popup.js - HIER_DIRECT/89.111.178.90 application/javascript
1513264423.071     56 192.168.10.139 TCP_MISS/200 9497 GET http://www.aeropotok.site/js/msg.js - HIER_DIRECT/89.111.178.90 application/javascript
1513264423.076     68 192.168.10.139 TCP_MISS/200 3111 GET http://www.aeropotok.site/js/video_bg.js - HIER_DIRECT/89.111.178.90 application/javascript
1513264423.079     65 192.168.10.139 TCP_MISS/200 3505 GET http://www.aeropotok.site/js/jquery.cookie.js - HIER_DIRECT/89.111.178.90 application/javascript
1513264423.118    102 192.168.10.139 TCP_MISS/200 3689 GET http://www.aeropotok.site/img/logo.png - HIER_DIRECT/89.111.178.90 image/png
1513264423.123    106 192.168.10.139 TCP_MISS/200 975 GET http://www.aeropotok.site/js/captcha.js - HIER_DIRECT/89.111.178.90 application/javascript
1513264423.143    121 192.168.10.139 TCP_MISS/200 4529 GET http://www.aeropotok.site/js/zselect.js - HIER_DIRECT/89.111.178.90 application/javascript
1513264423.154    123 192.168.10.139 TCP_MISS/200 2031 GET http://www.aeropotok.site/js/special_offer.js - HIER_DIRECT/89.111.178.90 application/javascript
1513264423.162    137 192.168.10.139 TCP_MISS/200 4592 GET http://www.aeropotok.site/js/contacts.js - HIER_DIRECT/89.111.178.90 application/javascript
1513264423.166     76 192.168.10.139 TCP_MISS/200 2082 GET http://www.aeropotok.site/js/delivery.js - HIER_DIRECT/89.111.178.90 application/javascript
1513264423.177    153 192.168.10.139 TCP_MISS/200 2576 GET http://www.aeropotok.site/js/common.js - HIER_DIRECT/89.111.178.90 application/javascript
1513264423.178     85 192.168.10.139 TCP_MISS/200 4709 GET http://www.aeropotok.site/js/jquery.maskedinput.min.js - HIER_DIRECT/89.111.178.90 application/javascript
1513264423.182    155 192.168.10.139 TCP_MISS/200 1403 GET http://www.aeropotok.site/js/faq.js - HIER_DIRECT/89.111.178.90 application/javascript
1513264423.182     85 192.168.10.139 TCP_MISS/200 612 GET http://www.aeropotok.site/js/main2.js - HIER_DIRECT/89.111.178.90 application/javascript
1513264423.182     88 192.168.10.139 TCP_MISS/200 2882 GET http://www.aeropotok.site/js/main.js? - HIER_DIRECT/89.111.178.90 application/javascript
1513264423.189    139 192.168.10.139 TCP_MISS/200 6787 GET http://www.aeropotok.site/img/gift.png - HIER_DIRECT/89.111.178.90 image/png
1513264423.196    157 192.168.10.139 TCP_MISS/200 11526 GET http://www.aeropotok.site/img/bron.png - HIER_DIRECT/89.111.178.90 image/png
1513264423.225    197 192.168.10.139 TCP_MISS/200 33479 GET http://www.aeropotok.site/js/order_certificate.js - HIER_DIRECT/89.111.178.90 application/javascript
1513264423.226    190 192.168.10.139 TCP_MISS/200 29708 GET http://www.aeropotok.site/js/order_flight.js - HIER_DIRECT/89.111.178.90 application/javascript
1513264423.227     91 192.168.10.139 TCP_MISS/200 19715 GET http://www.aeropotok.site/js/jquery.bxslider.min.js - HIER_DIRECT/89.111.178.90 application/javascript
1513264423.308    299 192.168.10.139 TCP_MISS/200 136632 GET http://www.aeropotok.site/js/jquery-1.11.1.min.js - HIER_DIRECT/89.111.178.90 application/javascript
1513264423.333    316 192.168.10.139 TCP_MISS/200 297462 GET http://www.aeropotok.site/img/foto.jpg - HIER_DIRECT/89.111.178.90 image/jpeg
1513264423.369    296 192.168.10.139 TCP_MISS/200 305572 GET http://www.aeropotok.site/img/video.png - HIER_DIRECT/89.111.178.90 image/png
1513264423.370    307 192.168.10.139 TCP_MISS/200 268208 GET http://www.aeropotok.site/img/instr1.png - HIER_DIRECT/89.111.178.90 image/png
1513264423.373    351 192.168.10.139 TCP_MISS/200 392746 GET http://www.aeropotok.site/img/foto2.jpg - HIER_DIRECT/89.111.178.90 image/jpeg
1513264423.377      0 192.168.10.139 TCP_DENIED/407 4082 CONNECT www.google.com:443 - HIER_NONE/- text/html
1513264423.481    396 192.168.10.139 TCP_MISS/200 305691 GET http://www.aeropotok.site/img/gal.png - HIER_DIRECT/89.111.178.90 image/png
1513264423.806     17 192.168.10.139 TCP_MISS/200 1611 GET http://www.aeropotok.site/img/adres.png - HIER_DIRECT/89.111.178.90 image/png
1513264423.811     21 192.168.10.139 TCP_MISS/200 17455 GET http://www.aeropotok.site/img/rev1.png - HIER_DIRECT/89.111.178.90 image/png
1513264423.813     19 192.168.10.139 TCP_MISS/200 3820 GET http://www.aeropotok.site/img/ph.png - HIER_DIRECT/89.111.178.90 image/png
1513264423.813     22 192.168.10.139 TCP_MISS/200 9005 GET http://www.aeropotok.site/img/rev2.png - HIER_DIRECT/89.111.178.90 image/png
1513264423.816     27 192.168.10.139 TCP_MISS/200 3326 GET http://www.aeropotok.site/img/raspis.png - HIER_DIRECT/89.111.178.90 image/png
1513264423.820     18 192.168.10.139 TCP_MISS/200 4561 GET http://www.aeropotok.site/img/form__but.png - HIER_DIRECT/89.111.178.90 image/png
1513264423.823     30 192.168.10.139 TCP_MISS/200 3837 GET http://www.aeropotok.site/img/ad.png - HIER_DIRECT/89.111.178.90 image/png
1513264423.835     43 192.168.10.139 TCP_MISS/200 38422 GET http://www.aeropotok.site/img/bg2.jpg - HIER_DIRECT/89.111.178.90 image/jpeg
1513264423.835     21 192.168.10.139 TCP_MISS/200 2184 GET http://www.aeropotok.site/img/ch1.jpg - HIER_DIRECT/89.111.178.90 image/jpeg
1513264423.835     41 192.168.10.139 TCP_MISS/200 24200 GET http://www.aeropotok.site/img/soc_icons_320.png - HIER_DIRECT/89.111.178.90 image/png
1513264423.864     41 192.168.10.139 TCP_MISS/200 30608 GET http://www.aeropotok.site/fonts/roboto_light/roboto-light-webfont.woff2 - HIER_DIRECT/89.111.178.90 -
1513264423.867     80 192.168.10.139 TCP_MISS/200 1619 GET http://www.aeropotok.site/img/phone.png - HIER_DIRECT/89.111.178.90 image/png
1513264423.871     82 192.168.10.139 TCP_MISS/200 151001 GET http://www.aeropotok.site/img/bg.jpg - HIER_DIRECT/89.111.178.90 image/jpeg
1513264423.875     36 192.168.10.139 TCP_MISS/200 31232 GET http://www.aeropotok.site/fonts/roboto-medium/roboto-medium-webfont.woff2 - HIER_DIRECT/89.111.178.90 -
1513264423.880     54 192.168.10.139 TCP_MISS/200 30336 GET http://www.aeropotok.site/fonts/regular-bold/roboto-bold-webfont.woff2 - HIER_DIRECT/89.111.178.90 -
1513264423.890     52 192.168.10.139 TCP_MISS/200 30612 GET http://www.aeropotok.site/fonts/roboto-regular/roboto-regular-webfont.woff2 - HIER_DIRECT/89.111.178.90 -
1513264425.303     17 192.168.10.139 TCP_MISS/200 463 GET http://www.aeropotok.site/img/popup_bg.png - HIER_DIRECT/89.111.178.90 image/png
1513264425.409      0 192.168.10.139 TCP_DENIED/407 4074 CONNECT mc.yandex.ru:443 - HIER_NONE/- text/html
1513264425.410      0 192.168.10.139 TCP_DENIED/407 4122 CONNECT www.google-analytics.com:443 - HIER_NONE/- text/html
1513264425.423     79 192.168.10.139 TCP_MISS/302 280 GET http://bs.yandex.ru/informer/28076298/3_1_2053B9FF_003399FF_1_pageviews - HIER_DIRECT/77.88.21.90 -
1513264425.492     17 192.168.10.139 TCP_MISS/200 1788 GET http://www.aeropotok.site/img/pag1.png - HIER_DIRECT/89.111.178.90 image/png
1513264425.570     21 192.168.10.139 TCP_MISS/200 1778 GET http://www.aeropotok.site/img/pag2.png - HIER_DIRECT/89.111.178.90 image/png
1513264425.591      0 192.168.10.139 TCP_DENIED/407 4074 CONNECT mc.yandex.ru:443 - HIER_NONE/- text/html
1513264440.417     43 192.168.10.139 TCP_MISS/200 1305 GET http://www.aeropotok.site/favicon.ico - HIER_DIRECT/89.111.178.90 image/x-icon
1513264444.366     47 192.168.10.139 TCP_MISS/200 22889 GET http://www.aeropotok.site/zakaz - HIER_DIRECT/89.111.178.90 text/html
1513264444.504     18 192.168.10.139 TCP_MISS/200 2882 GET http://www.aeropotok.site/js/main.js - HIER_DIRECT/89.111.178.90 application/javascript
1513264444.811     18 192.168.10.139 TCP_MISS/200 473 GET http://www.aeropotok.site/img/menu/certificates.png - HIER_DIRECT/89.111.178.90 image/png
1513264444.846     49 192.168.10.139 TCP_MISS/200 482 GET http://www.aeropotok.site/img/certificates/full_size_items_bg.png - HIER_DIRECT/89.111.178.90 image/png
1513264444.867     51 192.168.10.139 TCP_MISS/200 38192 GET http://www.aeropotok.site/fonts/roboto_lighItalic/roboto-lightitalic-webfont.woff2 - HIER_DIRECT/89.111.178.90 -
1513264444.868     64 192.168.10.139 TCP_MISS/200 2065 GET http://www.aeropotok.site/img/certificates/delivery_icon.png - HIER_DIRECT/89.111.178.90 image/png
1513264444.870     65 192.168.10.139 TCP_MISS/200 1230 GET http://www.aeropotok.site/img/certificates/book_flight_icon.png - HIER_DIRECT/89.111.178.90 image/png
1513264444.882     86 192.168.10.139 TCP_MISS/200 868 GET http://www.aeropotok.site/img/certificates/full_size_items_tb.png - HIER_DIRECT/89.111.178.90 image/png
1513264444.941    141 192.168.10.139 TCP_MISS/200 282215 GET http://www.aeropotok.site/img/certificates/certificate_gift.jpg - HIER_DIRECT/89.111.178.90 image/jpeg
1513264444.950    149 192.168.10.139 TCP_MISS/200 320933 GET http://www.aeropotok.site/img/certificates/certificate_kids.jpg - HIER_DIRECT/89.111.178.90 image/jpeg
1513264445.143      0 192.168.10.139 TCP_DENIED/407 4074 CONNECT mc.yandex.ru:443 - HIER_NONE/- text/html
1513264445.143      0 192.168.10.139 TCP_DENIED/407 4122 CONNECT www.google-analytics.com:443 - HIER_NONE/- text/html
1513264445.194     50 192.168.10.139 TCP_MISS/302 280 GET http://bs.yandex.ru/informer/28076298/3_1_2053B9FF_003399FF_1_pageviews - HIER_DIRECT/77.88.21.90 -
1513264445.306      0 192.168.10.139 TCP_DENIED/407 4074 CONNECT mc.yandex.ru:443 - HIER_NONE/- text/html
1513264451.593     35 192.168.10.139 TCP_MISS/200 29782 GET http://www.aeropotok.site/prices - HIER_DIRECT/89.111.178.90 text/html
1513264451.960     13 192.168.10.139 TCP_MISS/200 495 GET http://www.aeropotok.site/img/menu/prices.png - HIER_DIRECT/89.111.178.90 image/png
1513264451.967     14 192.168.10.139 TCP_MISS/200 591 GET http://www.aeropotok.site/img/price/list_style_image.png - HIER_DIRECT/89.111.178.90 image/png
1513264452.362      0 192.168.10.139 TCP_DENIED/407 4074 CONNECT mc.yandex.ru:443 - HIER_NONE/- text/html
1513264452.362      0 192.168.10.139 TCP_DENIED/407 4122 CONNECT www.google-analytics.com:443 - HIER_NONE/- text/html
1513264452.392     29 192.168.10.139 TCP_MISS/302 280 GET http://bs.yandex.ru/informer/28076298/3_1_2053B9FF_003399FF_1_pageviews - HIER_DIRECT/77.88.21.90 -
1513264452.542      0 192.168.10.139 TCP_DENIED/407 4074 CONNECT mc.yandex.ru:443 - HIER_NONE/- text/html
1513264463.639      0 192.168.10.139 TCP_DENIED/407 4154 CONNECT ff.kis.v2.scr.kaspersky-labs.com:443 - HIER_NONE/- text/html
1513264469.067      0 192.168.10.139 TCP_DENIED/407 4094 CONNECT suggest.yandex.ru:443 - HIER_NONE/- text/html
1513264472.264      0 192.168.10.139 TCP_DENIED/407 4130 CONNECT tiles.services.mozilla.com:443 - HIER_NONE/- text/html
1513264473.223      0 192.168.10.139 TCP_DENIED/407 4062 CONNECT yandex.ru:443 - HIER_NONE/- text/html
1513264477.972     48 192.168.10.139 TCP_MISS/200 1855 POST http://yandex.ocsp-responder.com/ - HIER_DIRECT/5.45.205.231 application/ocsp-response
1513264478.722    149 192.168.10.139 TCP_TUNNEL/200 9545 CONNECT yastatic.net:443 user1 HIER_DIRECT/178.154.131.217 -
1513264478.779    207 192.168.10.139 TCP_TUNNEL/200 33497 CONNECT yastatic.net:443 user1 HIER_DIRECT/178.154.131.217 -
1513264478.954    381 192.168.10.139 TCP_TUNNEL/200 8373 CONNECT yastatic.net:443 user1 HIER_DIRECT/178.154.131.217 -
1513264479.062    188 192.168.10.139 TCP_TUNNEL/200 1434 CONNECT yastatic.net:443 user1 HIER_DIRECT/178.154.131.217 -
1513264479.079    184 192.168.10.139 TCP_TUNNEL/200 846 CONNECT yastatic.net:443 user1 HIER_DIRECT/178.154.131.217 -
1513264479.390    817 192.168.10.139 TCP_TUNNEL/200 163427 CONNECT yastatic.net:443 user1 HIER_DIRECT/178.154.131.217 -
1513264481.147     52 192.168.10.139 TCP_MISS/200 1855 POST http://yandex.ocsp-responder.com/ - HIER_DIRECT/5.45.205.231 application/ocsp-response
1513264481.296   2418 192.168.10.139 TCP_TUNNEL/200 12208 CONNECT yastatic.net:443 user1 HIER_DIRECT/178.154.131.217 -
1513264481.566     75 192.168.10.139 TCP_MISS/200 2222 POST http://ocsp2.globalsign.com/gsorganizationvalsha2g2 - HIER_DIRECT/104.31.74.124 application/ocsp-response
1513264481.653    347 192.168.10.139 TCP_TUNNEL/200 6605 CONNECT kiks.yandex.ru:443 user1 HIER_DIRECT/213.180.204.143 -
1513264494.070  15120 192.168.10.139 TCP_TUNNEL/200 47329 CONNECT yastatic.net:443 user1 HIER_DIRECT/178.154.131.217 -
1513264494.403  15461 192.168.10.139 TCP_TUNNEL/200 43401 CONNECT yastatic.net:443 user1 HIER_DIRECT/178.154.131.217 -
1513264494.405  15464 192.168.10.139 TCP_TUNNEL/200 46826 CONNECT yastatic.net:443 user1 HIER_DIRECT/178.154.131.217 -
1513264497.415  18551 192.168.10.139 TCP_TUNNEL/200 2197 CONNECT yastatic.net:443 user1 HIER_DIRECT/178.154.131.217 -
1513264528.059  46626 192.168.10.139 TCP_TUNNEL/200 3896 CONNECT www.tns-counter.ru:443 user1 HIER_DIRECT/194.226.130.227 -


Последнее исправление: sanekmihailow (всего исправлений: 1)
← Debian9+strongswan+xl2tpd - не подключается L2TP
CentOS 7 Errata →
Ответ на: комментарий от sanekmihailow

Чего ?! 

http_access allow GET
http_access allow HEAD
http_access allow POST
http_access allow PUT
http_access allow PURGE
http_access allow DELETE
http_access allow OPTIONS
http_access allow PATCH
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow internet_users
http_access allow localhost manager
http_access deny manager
http_access deny all
А какой «умный» человек догадался сначала разрешить все запросы любыми методами ?

Пароль оно у тебя спрашивает на https только потому, что метод нельзя определить для зашифрованного соединения без sslbump

vel ★★★★★
()
Ответ на: комментарий от vel

Спасибо, после поднятия 

http_access allow internet_users
выше методов все работает.

sanekmihailow
() автор топика
Вы не можете добавлять комментарии в эту тему. Тема перемещена в архив.
← Debian9+strongswan+xl2tpd - не подключается L2TP
Admin
CentOS 7 Errata →