squid

Enable squid proxy blocking https


I'm trying to block some sites like gmail and outlook from my squid proxy server. My squid.conf is:

acl blacklist dstdomain "/etc/squid/blacklist.acl"
http_access deny blacklist

And blacklist.acl is:

.atlassian.net
.accounts.google.com
.mail.google.com
.gmail.com
.gmail.google.com

This only seems to work for sites using http (ie. they successfully get blocked) https sites still are able to get through ?

I'm running squid 4.10 on Ubuntu-20.04

Does anyone know how to achieve this ?

Thanks in advance!


Solution

  • this is probably because you haven't enabled SSL bumping, i.e. your http_port directive is set to the default http_port 3128.

    I've written about both Squid's SSL setup and blocking websites