Port forwarding in privoxy

[axy_david]

So all I want is to forward the https traffic to http, is this possible?

[SeijiSensei]

No. HTTPS traffic requires a specific handshake between the client and server, and all the packets are encrypted.

Having read your earlier posting, I'll just mention that there are efforts to enable Squid to handle SSL traffic, but they require you to generate a certificate for the proxy server and install it on all the client workstations. You can use iptables to block or permit connections to remote HTTPS sites by IP address.

[axy_david]

can't I just deny all HTTPS acces? Tried with iptables, didn't work

[bodhi.zazen]

can't I just deny all HTTPS acces? Tried with iptables, didn't work

iptables will block all https traffic. What rule did you use ?

sudo iptables -A OUTPUT -p tcp --dport https -j DROP

[emiller12345]

.

[axy_david]

iptables will block all https traffic. What rule did you use ?

sudo iptables -A OUTPUT -p tcp --dport https -j DROP

Tried your suggestion, nothing... it doesn't work.

[axy_david]

No. HTTPS traffic requires a specific handshake between the client and server, and all the packets are encrypted.

Having read your earlier posting, I'll just mention that there are efforts to enable Squid to handle SSL traffic, but they require you to generate a certificate for the proxy server and install it on all the client workstations. You can use iptables to block or permit connections to remote HTTPS sites by IP address.

it seems that I am unnable to block https traffic using iptables, however I can open specific ports
Can I block https communication with squid, since I don't really understand squid.

[raja.genupula]

I am not sure but you can block the URL with some matching words . this URL can help you.

http://sarg.sourceforge.net/sxcontrol.php

[bodhi.zazen]

Tried your suggestion, nothing... it doesn't work.

If it is not working you need to post all your rules. With iptables, the order of the rules is important.

[axy_david]

I am not sure but you can block the URL with some matching words . this URL can help you.

http://sarg.sourceforge.net/sxcontrol.php

I just realised Im not using squid