Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

From: Alex Crow <alex_at_nanogherkin.com>
Date: Sat, 11 Aug 2012 12:54:24 +0100

On 11/08/12 08:20, J Webster wrote:
> Is there a way to push all openvpn connections using http ports
> through a transparent squid and how?
> Also, can I log which openvpn certificate/client is accessing which
> pages in this way?
> I assume I would have to use an alternative port or use firewall rules
> to only allow squid connections from the network 10.8.x.x
Squid is an HTTP proxy, so no.

You can't really proxy OpenVPN as it's end-to-end encrypted with SSL. If
you issued the certs from your CA it might be possible to MITM it but
that may be illegal in many jurisdictions.

Alex
Received on Sat Aug 11 2012 - 11:54:28 MDT

This archive was generated by hypermail 2.2.0 : Sat Aug 11 2012 - 12:00:03 MDT