what about peek & splice? no cert on client: Always enable manual proxy http_port 3128 Enable transparent proxy http_port 3129 transparent Enable SSL transparent proxy https_port 3130 intercept ssl-bump generate-host-certificates=off cert=/etc/pki/tls/cer...

Здравствуйте, как исключить сайты (например банки) из HTTPS/SSL фильтрации? Или другой выход? Многие сайты выдают "Этот сайт не может обеспечить безопасное соединение" Работает прозрачный Squid+SquidGuard. SSL/MITM Mode - Splice All PF 2.4.5

#2 In this free series where i show you how to ship all system logs (pfsense in this example) to rsyslog, graylog and end up with beautiful graphs in grafana.

In this video i show you how to install graylog on CentOS 7. Next we will ship logs graylog, index them and create graphs in grafana.

***Subscribe to get notified when i upload new videos.

Here are the commands that you can copy and paste while following along:

Install java
#yum install java-1.8.0-openjdk-headless

Install policycoreutils-python

Install MongoDB. Follow these instructions:
https://docs.mongodb.com/manual/tutorial/install-mongodb-on-red-hat/

Install MongoDB


vi /etc/yum.repos.d/mongodb-org-4.0.repo
[mongodb-org-4.0]
name=MongoDB Repository
baseurl=https://repo.mongodb.org/yum/redhat/7/mongodb-org/4.0/x86_64/
gpgcheck=1
enabled=1
gpgkey=https://www.mongodb.org/static/pgp/server-4.0.asc

yum install mongodb-org
systemctl start mongod
systemctl enable  mongod

Install Elasticsearch

cat _ /etc/yum.repos.d/elasticsearc-6.repo __ EOL
[elasticsearch…

We will parse the access log records generated by the PfSense’s squd plugin. We already have our graylog server running and we will start preparing the terrain to capture those logs records.

USE AT YOUR OWN RISK: The following procedures may be illegal in some countries. Follow all local laws and regulations for your area. I am not responsible for any issues or damage you may cause.

This is how I setup squid, ClamAV, and splicing for Windows Updates on pfSense. We setup SSL/MITM bumping and splicing for HTTPS traffic as well. You will need to install your certificate created in pfSense as a trusted root certification authority on all clients using the proxy and bumped connections.

Below are custom options and refresh patterns that I used:

# My custom options in the SSL/MITM text box:
# Windows Update domains that should be spliced, not bumped
acl splice_it ssl::server_name .microsoft.com
acl splice_it ssl::server_name .windowsupdate.com
acl splice_it ssl::server_name .akamaitechnologies.com
acl splice_it ssl::server_name .akadns.net
acl step1 at_step SslBump1
ssl_bump peek step1
ssl_bump splice splice_it
ssl_bump bump all

# My custom refresh_options on the Local Cache tab
refresh_pattern -i …