How to exclude WhatsApp and anydesk from HTTPS filtering in Raptor 2

Publicado por spectrum, Noviembre 06, 2018, 10:41:40 AM

Tema anterior - Siguiente tema

spectrum

Hi All,


I am very new in raptor 2. Recently i have enabled HTTPS caching in my entire network (wired and wireless on same subnet), I already installed raptor CA in all the connected device (pc / laptop / mobile / tab) which working fully ok in PC and laptop. Now i am having 3 issues 


1) WhatsApp stop working for sending and receiving media file (but messaging working fine)
2) Anydesk stop working can not connect anydesk network this type of error i get
3) even i have installed raptor CA in moibile phone like android and iphone device some of the mobile device youtube and facebook apps dose not works at all but most of the phone works without any issue. 


Can any one tell me what could be the reason? and how to resolve this issue. Many many thanks for your support. 


[Note: in below i gave my squid.conf and Mikrotik firewall mangle rule to identify the issue]




Squid.conf


# ================================================================================================ ====================
# Squid 3.x Conf #
# ================================================================================================ ====================
http_port 3128 intercept
http_port 3126
visible_hostname raptor.os
icp_port 0
# ------------------------------------------------- ---------------------
acl google url_regex -i (googlevideo \ .com | www \ .youtube \ .com)
acl mobile browser -i regexp (iPhone | iPad | Windows. * Phone | BlackBerry | PlayBook | Trident | IEMobile)
request_header_access User-Agent deny google! mobile
request_header_replace User-Agent Mozilla / 5.0 (compatible; Googlebot / 2.1; + http: //www.google.com/bot.html)
# ------------------------------------------------- ---------------------
#error_directory / usr / share / squid3 / errors / Spanish /
# ------------------------------------------------- ---------------------
acl blacklist url_regex -i "/etc/squid3/blacklist.lst"
# ------------------------------------------------- ---------------------
# DNS Server and Change Policy
# ------------------------------------------------- ---------------------
dns_nameservers 8.8.8.8 8.8.4.4
dns_retransmit_interval 5 seconds
dns_timeout 2 minutes
# ------------------------------------------------- ---------------------
acl built-in proto cache_object
 
acl localnet src 10.0.0.0/8 # RFC 1918 possible internal network
acl localnet src 172.16.0.0/12 # RFC 1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC 1918 possible internal network
acl localnet src fc00 :: / 7 # RFC 4193 local private network range
acl localnet src fe80 :: / 10 # RFC 4291 link-local (directly plugged) machines

acl CONNECT method CONNECT

acl Safe_ports port 80 # http
acl Safe_ports port 443 # https
acl SSL_ports port 443 # https

http_access deny blacklist
http_access allow localhost built-in
http_access deny built-in
http_access deny! Safe_ports
http_access deny CONNECT! SSL_ports
http_access allow localhost
http_access allow localnet
# ------------------------------------------------- ---------------------
coredump_dir / var / spool / squid3 
include / etc / raptor / peers
cache_mgr raptor.os
shutdown_lifetime 2 seconds
half_closed_clients off
server_persistent_connections off
client_persistent_connections off
quick_abort_min 0 KB
quick_abort_max 0 KB
quick_abort_pct 95
max_filedescriptors 819200
qos_flows local-hit = 0x48
# ------------------------------------------------- --------------------- 
#cache deny all
# ------------------------------------------------- ---------------------
acl sys_lst url_regex -i "/etc/raptor/sys.lst"
acl raptor_lst url_regex -i "/etc/raptor/raptor.lst"
acl wth_lst url_regex -i "/etc/raptor/whitelist.lst"
acl host_lst req_header Host -i "/etc/raptor/host.lst"
acl exts url_regex -i \. (cab | exe | msi | msu | zip | deb | rpm | bz | bz2 | gz | tgz | rar | bin | 7z | mp3 | mp4 | flv) $
acl head_html req_header Accept -i text / html. +
cache deny raptor_lst
cache_peer 10.30.0.2 parent 8080 0 proxy-only no-digest
dead_peer_timeout 2 seconds
cache_peer_access 10.30.0.2 allow host_lst
cache_peer_access 10.30.0.2 allow exts
cache_peer_access 10.30.0.2 deny head_html
cache_peer_access 10.30.0.2 deny wth_lst
cache_peer_access 10.30.0.2 allow raptor_lst
cache_peer_access 10.30.0.2 allow sys_lst
cache_peer_access 10.30.0.2 deny all 
cache deny all! google! str1

# ------------------------------------------------- ---------------------

venezu

Cita de: spectrum en Noviembre 06, 2018, 10:41:40 AM
Hi All,


I am very new in raptor 2. Recently i have enabled HTTPS caching in my entire network (wired and wireless on same subnet), I already installed raptor CA in all the connected device (pc / laptop / mobile / tab) which working fully ok in PC and laptop. Now i am having 3 issues


1) WhatsApp stop working for sending and receiving media file (but messaging working fine)
2) Anydesk stop working can not connect anydesk network this type of error i get
3) even i have installed raptor CA in moibile phone like android and iphone device some of the mobile device youtube and facebook apps dose not works at all but most of the phone works without any issue.


Can any one tell me what could be the reason? and how to resolve this issue. Many many thanks for your support.


[Note: in below i gave my squid.conf and Mikrotik firewall mangle rule to identify the issue]




Squid.conf


# ================================================================================================ ====================
# Squid 3.x Conf #
# ================================================================================================ ====================
http_port 3128 intercept
http_port 3126
visible_hostname raptor.os
icp_port 0
# ------------------------------------------------- ---------------------
acl google url_regex -i (googlevideo \ .com | www \ .youtube \ .com)
acl mobile browser -i regexp (iPhone | iPad | Windows. * Phone | BlackBerry | PlayBook | Trident | IEMobile)
request_header_access User-Agent deny google! mobile
request_header_replace User-Agent Mozilla / 5.0 (compatible; Googlebot / 2.1; + http: //www.google.com/bot.html)
# ------------------------------------------------- ---------------------
#error_directory / usr / share / squid3 / errors / Spanish /
# ------------------------------------------------- ---------------------
acl blacklist url_regex -i "/etc/squid3/blacklist.lst"
# ------------------------------------------------- ---------------------
# DNS Server and Change Policy
# ------------------------------------------------- ---------------------
dns_nameservers 8.8.8.8 8.8.4.4
dns_retransmit_interval 5 seconds
dns_timeout 2 minutes
# ------------------------------------------------- ---------------------
acl built-in proto cache_object

acl localnet src 10.0.0.0/8 # RFC 1918 possible internal network
acl localnet src 172.16.0.0/12 # RFC 1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC 1918 possible internal network
acl localnet src fc00 :: / 7 # RFC 4193 local private network range
acl localnet src fe80 :: / 10 # RFC 4291 link-local (directly plugged) machines

acl CONNECT method CONNECT

acl Safe_ports port 80 # http
acl Safe_ports port 443 # https
acl SSL_ports port 443 # https

http_access deny blacklist
http_access allow localhost built-in
http_access deny built-in
http_access deny! Safe_ports
http_access deny CONNECT! SSL_ports
http_access allow localhost
http_access allow localnet
# ------------------------------------------------- ---------------------
coredump_dir / var / spool / squid3
include / etc / raptor / peers
cache_mgr raptor.os
shutdown_lifetime 2 seconds
half_closed_clients off
server_persistent_connections off
client_persistent_connections off
quick_abort_min 0 KB
quick_abort_max 0 KB
quick_abort_pct 95
max_filedescriptors 819200
qos_flows local-hit = 0x48
# ------------------------------------------------- ---------------------
#cache deny all
# ------------------------------------------------- ---------------------
acl sys_lst url_regex -i "/etc/raptor/sys.lst"
acl raptor_lst url_regex -i "/etc/raptor/raptor.lst"
acl wth_lst url_regex -i "/etc/raptor/whitelist.lst"
acl host_lst req_header Host -i "/etc/raptor/host.lst"
acl exts url_regex -i \. (cab | exe | msi | msu | zip | deb | rpm | bz | bz2 | gz | tgz | rar | bin | 7z | mp3 | mp4 | flv) $
acl head_html req_header Accept -i text / html. +
cache deny raptor_lst
cache_peer 10.30.0.2 parent 8080 0 proxy-only no-digest
dead_peer_timeout 2 seconds
cache_peer_access 10.30.0.2 allow host_lst
cache_peer_access 10.30.0.2 allow exts
cache_peer_access 10.30.0.2 deny head_html
cache_peer_access 10.30.0.2 deny wth_lst
cache_peer_access 10.30.0.2 allow raptor_lst
cache_peer_access 10.30.0.2 allow sys_lst
cache_peer_access 10.30.0.2 deny all
cache deny all! google! str1

# ------------------------------------------------- ---------------------
http://www.alterserv.com/foros/index.php/topic,5.0.html

Matmbaman

Guaranteed to provide information to that already received clarification of the content correctly.

Wanayaki

We have looked at this information for a long time and are very happy to see this post.