Proxy + novo skype. Alguém tá tendo problemas?

Question

[QUOTE=jqueiroz, post: 7728221, member: 4978]Veja se tem op&ccedil;&atilde;o pra registrar o tr&aacute;fego bloqueado em log.
Depois, tente o acesso, e v&aacute; ao log de tr&aacute;fego. Se aparecer alguma coisa l&aacute; como bloqueada, vinda da esta&ccedil;&atilde;o de teste, &eacute; s&oacute; desbloquear.[/QUOTE]

Vou fazer o teste e posto o resultado.

Nesse caso vc diz no pfsense, correto? n&atilde;o no squid

Answer

Sim, no pfsense. O squid s&oacute; lida com trafego HTTP e HTTPS, estamos lidando com um aplicativo que pode estar gerando outros tipos de tr&aacute;fego, at&eacute; mesmo streams UDP e/ou multicast.

Answer

No pfsense s&oacute; encontrei a op&ccedil;&atilde;o Packet capture, inseri o ip da maquina que estou usando para teste e mandei capturar, no resultado n&atilde;o fala nada de bloqueio.

15:58:24.430502 ARP, Request who-has 192.168.0.4 (00:18:8b:e3:48:5a) tell 192.168.0.204, length 46
15:58:24.430512 ARP, Reply 192.168.0.4 is-at 00:18:8b:e3:48:5a, length 28
15:58:24.731653 IP 192.168.0.204.58192 > 131.253.61.66.443: tcp 0
15:58:24.857023 IP 131.253.61.66.443 > 192.168.0.204.58192: tcp 0
15:58:24.859065 IP 192.168.0.204.58192 > 131.253.61.66.443: tcp 0
15:58:24.859690 IP 192.168.0.204.58192 > 131.253.61.66.443: tcp 181
15:58:24.985277 IP 131.253.61.66.443 > 192.168.0.204.58192: tcp 0
15:58:24.989535 IP 131.253.61.66.443 > 192.168.0.204.58192: tcp 1440
15:58:24.989767 IP 131.253.61.66.443 > 192.168.0.204.58192: tcp 1440
15:58:24.989890 IP 131.253.61.66.443 > 192.168.0.204.58192: tcp 1440
15:58:24.990001 IP 131.253.61.66.443 > 192.168.0.204.58192: tcp 1284
15:58:24.990333 IP 192.168.0.204.58192 > 131.253.61.66.443: tcp 0
15:58:24.990957 IP 192.168.0.204.58192 > 131.253.61.66.443: tcp 0
15:58:25.125605 IP 192.168.0.204.58192 > 131.253.61.66.443: tcp 250
15:58:25.259396 IP 131.253.61.66.443 > 192.168.0.204.58192: tcp 107
15:58:25.261283 IP 192.168.0.204.58192 > 131.253.61.66.443: tcp 0
15:58:25.273547 IP 192.168.0.204.58192 > 131.253.61.66.443: tcp 709
15:58:25.401526 IP 131.253.61.66.443 > 192.168.0.204.58192: tcp 1440
15:58:25.401562 IP 131.253.61.66.443 > 192.168.0.204.58192: tcp 453
15:58:25.402386 IP 192.168.0.204.58192 > 131.253.61.66.443: tcp 0
15:58:25.403636 IP 192.168.0.204.58192 > 131.253.61.66.443: tcp 0
15:58:25.404573 IP 192.168.0.204.58193 > 131.253.61.66.443: tcp 0
15:58:25.529323 IP 131.253.61.66.443 > 192.168.0.204.58192: tcp 0
15:58:25.530058 IP 131.253.61.66.443 > 192.168.0.204.58193: tcp 0
15:58:25.530538 IP 192.168.0.204.58193 > 131.253.61.66.443: tcp 0
15:58:25.531009 IP 192.168.0.204.58193 > 131.253.61.66.443: tcp 213
15:58:25.660428 IP 131.253.61.66.443 > 192.168.0.204.58193: tcp 1440
15:58:25.660547 IP 131.253.61.66.443 > 192.168.0.204.58193: tcp 1440
15:58:25.660669 IP 131.253.61.66.443 > 192.168.0.204.58193: tcp 1440
15:58:25.661071 IP 131.253.61.66.443 > 192.168.0.204.58193: tcp 1284
15:58:25.663743 IP 192.168.0.204.58193 > 131.253.61.66.443: tcp 0
15:58:25.776560 IP 192.168.0.204.58193 > 131.253.61.66.443: tcp 250
15:58:25.910195 IP 131.253.61.66.443 > 192.168.0.204.58193: tcp 107
15:58:25.912861 IP 192.168.0.204.58193 > 131.253.61.66.443: tcp 0
15:58:25.919881 IP 192.168.0.204.58193 > 131.253.61.66.443: tcp 629
15:58:26.046835 IP 131.253.61.66.443 > 192.168.0.204.58193: tcp 485
15:58:26.047476 IP 192.168.0.204.58193 > 131.253.61.66.443: tcp 0
15:58:26.047631 IP 192.168.0.204.58193 > 131.253.61.66.443: tcp 0
15:58:26.065647 IP 192.168.0.204.58194 > 131.253.61.66.443: tcp 0
15:58:26.172993 IP 131.253.61.66.443 > 192.168.0.204.58193: tcp 0
15:58:26.191312 IP 131.253.61.66.443 > 192.168.0.204.58194: tcp 0
15:58:26.192885 IP 192.168.0.204.58194 > 131.253.61.66.443: tcp 0
15:58:26.193354 IP 192.168.0.204.58194 > 131.253.61.66.443: tcp 213
15:58:26.319119 IP 131.253.61.66.443 > 192.168.0.204.58194: tcp 0
15:58:26.322802 IP 131.253.61.66.443 > 192.168.0.204.58194: tcp 1440
15:58:26.323052 IP 131.253.61.66.443 > 192.168.0.204.58194: tcp 1440
15:58:26.323292 IP 131.253.61.66.443 > 192.168.0.204.58194: tcp 1440
15:58:26.323401 IP 131.253.61.66.443 > 192.168.0.204.58194: tcp 1284
15:58:26.323540 IP 192.168.0.204.58194 > 131.253.61.66.443: tcp 0
15:58:26.324166 IP 192.168.0.204.58194 > 131.253.61.66.443: tcp 0
15:58:26.437626 IP 192.168.0.204.58194 > 131.253.61.66.443: tcp 250
15:58:26.573167 IP 131.253.61.66.443 > 192.168.0.204.58194: tcp 107
15:58:26.575208 IP 192.168.0.204.58194 > 131.253.61.66.443: tcp 0
15:58:26.582074 IP 192.168.0.204.58194 > 131.253.61.66.443: tcp 1093
15:58:26.720689 IP 192.168.0.204.58195 > 40.117.145.132.443: tcp 0
15:58:26.727190 IP 131.253.61.66.443 > 192.168.0.204.58194: tcp 1440
15:58:26.727310 IP 131.253.61.66.443 > 192.168.0.204.58194: tcp 1440
15:58:26.727431 IP 131.253.61.66.443 > 192.168.0.204.58194: tcp 1440
15:58:26.727553 IP 131.253.61.66.443 > 192.168.0.204.58194: tcp 1440
15:58:26.727675 IP 131.253.61.66.443 > 192.168.0.204.58194: tcp 1440
15:58:26.727851 IP 192.168.0.204.58194 > 131.253.61.66.443: tcp 0
15:58:26.727967 IP 131.253.61.66.443 > 192.168.0.204.58194: tcp 917
15:58:26.728142 IP 192.168.0.204.58194 > 131.253.61.66.443: tcp 0
15:58:26.728150 IP 192.168.0.204.58194 > 131.253.61.66.443: tcp 0
15:58:26.728297 IP 192.168.0.204.58194 > 131.253.61.66.443: tcp 0
15:58:26.728454 IP 192.168.0.204.58194 > 131.253.61.66.443: tcp 0
15:58:26.737221 IP 192.168.0.204.58194 > 131.253.61.66.443: tcp 0
15:58:26.846560 IP 40.117.145.132.443 > 192.168.0.204.58195: tcp 0
15:58:26.847352 IP 192.168.0.204.58195 > 40.117.145.132.443: tcp 0
15:58:26.862781 IP 131.253.61.66.443 > 192.168.0.204.58194: tcp 0
15:58:26.888951 IP 192.168.0.204.58195 > 40.117.145.132.443: tcp 229
15:58:27.016800 IP 40.117.145.132.443 > 192.168.0.204.58195: tcp 1452
15:58:27.016921 IP 40.117.145.132.443 > 192.168.0.204.58195: tcp 1452
15:58:27.017044 IP 40.117.145.132.443 > 192.168.0.204.58195: tcp 1452
15:58:27.017125 IP 40.117.145.132.443 > 192.168.0.204.58195: tcp 994
15:58:27.018391 IP 192.168.0.204.58195 > 40.117.145.132.443: tcp 0
15:58:27.067401 IP 192.168.0.204.58195 > 40.117.145.132.443: tcp 214
15:58:27.194917 IP 40.117.145.132.443 > 192.168.0.204.58195: tcp 107
15:58:27.195398 IP 192.168.0.204.58195 > 40.117.145.132.443: tcp 0
15:58:27.224462 IP 192.168.0.204.58195 > 40.117.145.132.443: tcp 581
15:58:27.257345 IP 192.168.0.204.58195 > 40.117.145.132.443: tcp 917
15:58:27.354429 IP 40.117.145.132.443 > 192.168.0.204.58195: tcp 101
15:58:27.355378 IP 192.168.0.204.58195 > 40.117.145.132.443: tcp 0
15:58:27.383703 IP 40.117.145.132.443 > 192.168.0.204.58195: tcp 357
15:58:27.384497 IP 192.168.0.204.58195 > 40.117.145.132.443: tcp 0
15:58:27.487164 IP 192.168.0.204.58195 > 40.117.145.132.443: tcp 581
15:58:27.487320 IP 192.168.0.204.58195 > 40.117.145.132.443: tcp 789
15:58:27.612923 IP 40.117.145.132.443 > 192.168.0.204.58195: tcp 0
15:58:27.623208 IP 40.117.145.132.443 > 192.168.0.204.58195: tcp 357
15:58:27.623690 IP 192.168.0.204.58195 > 40.117.145.132.443: tcp 0
15:58:31.362951 IP 192.168.0.204.58196 > 131.253.61.66.443: tcp 0
15:58:31.488139 IP 131.253.61.66.443 > 192.168.0.204.58196: tcp 0
15:58:31.488619 IP 192.168.0.204.58196 > 131.253.61.66.443: tcp 0
15:58:31.489088 IP 192.168.0.204.58196 > 131.253.61.66.443: tcp 213
15:58:31.614668 IP 131.253.61.66.443 > 192.168.0.204.58196: tcp 0
15:58:31.617363 IP 131.253.61.66.443 > 192.168.0.204.58196: tcp 1440
15:58:31.617597 IP 131.253.61.66.443 > 192.168.0.204.58196: tcp 1440
15:58:31.617718 IP 131.253.61.66.443 > 192.168.0.204.58196: tcp 1440
15:58:31.617848 IP 131.253.61.66.443 > 192.168.0.204.58196: tcp 1284
15:58:31.618181 IP 192.168.0.204.58196 > 131.253.61.66.443: tcp 0

Answer

Aparentemente &eacute; tudo HTTPS.
Fa&ccedil;a o seguinte, mude pra usar o proxy, e repita a captura. Veja se ainda h&aacute; essa atividade HTTPS pra 131.253.61.66.

Answer

Por proxy teve uns bloqueios por nome, vou liberar pra ver.

tail -f /var/log/squid/access.log | grep 192.168.0.204
1490124132.237  0 192.168.0.204 TCP_DENIED/407 2283 CONNECT www.gstatic.com:443 - NONE/- text/html
1490124135.237  0 192.168.0.204 TCP_DENIED/407 2283 CONNECT www.gstatic.com:443 - NONE/- text/html
1490124165.180  780 192.168.0.204 TCP_MISS/200 7604 CONNECT login.live.com:443 - DIRECT/131.253.61.68 -
1490124165.777  590 192.168.0.204 TCP_MISS/200 6196 CONNECT login.live.com:443 - DIRECT/131.253.61.98 -
1490124166.400  614 192.168.0.204 TCP_MISS/200 13844 CONNECT login.live.com:443 - DIRECT/131.253.61.100 -
1490124172.209  897 192.168.0.204 TCP_MISS/200 8868 CONNECT login.live.com:443 - DIRECT/131.253.61.64 -
1490124172.850  621 192.168.0.204 TCP_MISS/200 6036 CONNECT login.live.com:443 - DIRECT/131.253.61.66 -
1490124173.925  642 192.168.0.204 TCP_MISS/200 7364 CONNECT login.live.com:443 - DIRECT/131.253.61.68 -
1490124174.596  661 192.168.0.204 TCP_MISS/200 7364 CONNECT login.live.com:443 - DIRECT/131.253.61.98 -
1490124176.068  333 192.168.0.204 TCP_MISS/302 736 GET http://ui.skype.com/ui/0/7.22.0.108./pt-BR/upgrade - DIRECT/157.56.109.8 text/html
1490124176.400  324 192.168.0.204 TCP_MISS/302 605 GET http://get.skype.com/go/getskype-upgrade-new? - DIRECT/13.90.95.57 text/html
1490124176.634  0 192.168.0.204 TCP_DENIED/407 2245 CONNECT rps.trafficmanager.net:443 - NONE/- text/html
1490124177.845  995 192.168.0.204 TCP_MISS/200 7220 CONNECT login.live.com:443 - DIRECT/131.253.61.100 -
1490124179.904  279 192.168.0.204 TCP_MISS/200 471 GET http://ui.skype.com/ui/0/7.22.0.108./pt-BR/getlatestversion? - DIRECT/157.56.109.8 text/plain
1490124179.914  24363 192.168.0.204 TCP_MISS/200 5209 CONNECT login.skype.com:443 - DIRECT/91.190.219.145 -
1490124179.914  12987 192.168.0.204 TCP_MISS/200 6528 CONNECT mobile.pipe.aria.microsoft.com:443 - DIRECT/40.117.145.132 -
1490124179.914  5375 192.168.0.204 TCP_MISS/200 4157 CONNECT apps.skype.com:443 - DIRECT/23.4.242.245 -
1490124179.915  4725 192.168.0.204 TCP_MISS/200 6171 CONNECT mobile.pipe.aria.microsoft.com:443 - DIRECT/40.117.145.132 -
1490124180.402  1081 192.168.0.204 TCP_MISS/200 7540 CONNECT login.live.com:443 - DIRECT/131.253.61.64 -
1490124183.931  0 192.168.0.204 TCP_DENIED/407 2278 CONNECT m.hotmail.com:443 - NONE/- text/html
1490124183.935  4382 192.168.0.204 TCP_MISS/200 80281 CONNECT static-asm.secure.skypeassets.com:443 - DIRECT/192.16.48.200 -
1490124183.936  4337 192.168.0.204 TCP_MISS/200 23116 CONNECT dev.microsofttranslator.com:443 - DIRECT/131.253.14.213 -
1490124187.330  1 192.168.0.204 TCP_DENIED/407 2310 CONNECT pixel.advertising.com:443 - NONE/- text/html
1490124187.331  6286 192.168.0.204 TCP_MISS/200 11364 CONNECT api.skype.com:443 - DIRECT/91.190.219.146 -
1490124187.331  5735 192.168.0.204 TCP_MISS/200 1144 CONNECT apps.skype.com:443 - DIRECT/23.4.242.245 -
1490124187.332  490 192.168.0.204 TCP_MISS/200 7397 CONNECT dps.bing.com:443 - DIRECT/204.79.197.200 -
1490124187.332  487 192.168.0.204 TCP_MISS/200 7397 CONNECT dps.bing.com:443 - DIRECT/204.79.197.200 -
1490124187.332  2884 192.168.0.204 TCP_MISS/200 462 CONNECT apps.skype.com:443 - DIRECT/23.4.242.245 -
1490124187.358  1 192.168.0.204 TCP_DENIED/407 2278 CONNECT at.atwola.com:443 - NONE/- text/html
1490124189.525  0 192.168.0.204 TCP_DENIED/407 2326 CONNECT ads.scorecardresearch.com:443 - NONE/- text/html
1490124189.526  2197 192.168.0.204 TCP_MISS/200 4323 CONNECT g.bing.com:443 - DIRECT/65.52.108.27 -
1490124189.527  2731 192.168.0.204 TCP_MISS/200 5538 CONNECT c1.skype.com:443 - DIRECT/131.253.14.192 -
1490124189.527  1991 192.168.0.204 TCP_MISS/200 5830 CONNECT pipe.skype.com:443 - DIRECT/40.117.145.132 -
1490124189.667  0 192.168.0.204 TCP_DENIED/407 2316 CONNECT pixel.advertising.com:443 - NONE/- text/html
1490124192.074  15674 192.168.0.204 TCP_MISS/200 57547862 GET http://download.skype.com/4d6c7906b603453587052f13855e49ef/SkypeSetupFull.exe - DIRECT/23.4.242.245 application/x-msdownload
1490124196.141  8503 192.168.0.204 TCP_MISS/200 5698 CONNECT c.bing.com:443 - DIRECT/65.52.108.11 -
1490124196.142  6987 192.168.0.204 TCP_MISS/200 5814 CONNECT pipe.skype.com:443 - DIRECT/40.117.145.132 -
1490124196.142  4518 192.168.0.204 TCP_MISS/200 5830 CONNECT pipe.skype.com:443 - DIRECT/40.117.145.132 -
1490124196.142  1254 192.168.0.204 TCP_MISS/200 5435 CONNECT ads.scorecardresearch.com:443 marcos DIRECT/23.7.120.231 -
1490124196.142  3805 192.168.0.204 TCP_MISS/200 5814 CONNECT pipe.skype.com:443 - DIRECT/40.117.145.132 -
1490124198.829  3906 192.168.0.204 TCP_MISS/200 3257 CONNECT m.hotmail.com:443 marcos DIRECT/65.54.225.168 -
1490124198.830  3983 192.168.0.204 TCP_MISS/200 3138 CONNECT pixel.advertising.com:443 marcos DIRECT/207.200.74.133 -
1490124201.452  225 192.168.0.204 TCP_MISS/200 2912 GET http://trc.taboola.com/msn-skype-brazil/trc/3/json? - DIRECT/23.38.156.155 application/javascript
1490124201.453  3306 192.168.0.204 TCP_MISS/200 4323 CONNECT g.bing.com:443 - DIRECT/65.52.108.27 -
1490124201.453  6578 192.168.0.204 TCP_MISS/200 7919 CONNECT at.atwola.com:443 marcos DIRECT/152.163.56.3 -
1490124201.453  2956 192.168.0.204 TCP_MISS/200 4648 CONNECT g.bing.com:443 - DIRECT/65.52.108.27 -
1490124201.453  6551 192.168.0.204 TCP_MISS/200 3623 CONNECT pixel.advertising.com:443 marcos DIRECT/207.200.74.133 -
1490124201.453  2409 192.168.0.204 TCP_MISS/200 10009 CONNECT m.adnxs.com:443 marcos DIRECT/68.67.180.143 -
1490124201.454  1505 192.168.0.204 TCP_MISS/200 5677 CONNECT secure-nym.adnxs.com:443 marcos DIRECT/68.67.178.246 -
1490124203.720  3062 192.168.0.204 TCP_MISS/200 590 CONNECT ads.scorecardresearch.com:443 marcos DIRECT/23.7.120.231 -
1490124203.725  216 192.168.0.204 TCP_MISS/200 7873 GET http://images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_95%2Cw_180%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboolasyndication.com/libtrc/static/thumbnails/ac172ceaecc4675fe56e76d221d64c38.jpg marcos DIRECT/23.4.245.94 image/jpeg
1490124203.980  243 192.168.0.204 TCP_MISS/204 639 POST http://trc.taboola.com/msn-skype-brazil/log/3/available - DIRECT/23.38.156.155 image/gif
1490124204.619  157 192.168.0.204 TCP_MISS/204 2263 POST http://trc.taboola.com/msn-skype-brazil/log/3/visible - DIRECT/23.38.156.155 image/gif
1490124204.626  4060 192.168.0.204 TCP_MISS/200 5081 CONNECT pixelus.alephd.com:443 marcos DIRECT/207.244.67.199 -
1490124213.873  10640 192.168.0.204 TCP_MISS/200 5762 CONNECT secure-nym.adnxs.com:443 marcos DIRECT/68.67.178.170 -
1490124214.945  10660 192.168.0.204 TCP_MISS/200 5650 CONNECT secure-nym.adnxs.com:443 marcos DIRECT/68.67.180.12 -
1490124215.987  10667 192.168.0.204 TCP_MISS/200 5650 CONNECT secure-nym.adnxs.com:443 marcos DIRECT/68.67.178.110 -
1490124228.107  27304 192.168.0.204 TCP_MISS/200 5814 CONNECT pipe.skype.com:443 - DIRECT/40.117.145.132 -
1490124228.746  637 192.168.0.204 TCP_MISS/200 7380 CONNECT login.live.com:443 - DIRECT/131.253.61.66 -
1490124229.959  278 192.168.0.204 TCP_MISS/302 736 GET http://ui.skype.com/ui/0/7.22.0.108./pt-BR/upgrade - DIRECT/157.56.109.8 text/html
1490124229.961  14012 192.168.0.204 TCP_MISS/200 16462 CONNECT api.skype.com:443 - DIRECT/91.190.219.146 -
1490124229.962  2190 192.168.0.204 TCP_MISS/200 5814 CONNECT mobile.pipe.aria.microsoft.com:443 - DIRECT/40.117.145.132 -
1490124229.962  50350 192.168.0.204 TCP_MISS/200 3449 CONNECT skype-m.hotmail.com:443 - DIRECT/134.170.0.199 -
1490124230.093  131 192.168.0.204 TCP_MISS/302 605 GET http://get.skype.com/go/getskype-upgrade-new? - DIRECT/13.90.95.57 text/html
1490124233.140  1480 192.168.0.204 TCP_MISS/200 5767 CONNECT registrar-rr.prod.registrar.skype.com:443 - DIRECT/104.47.151.128 -
1490124233.469  3374 192.168.0.204 TCP_MISS/200 171073 GET http://download.skype.com/4d6c7906b603453587052f13855e49ef/SkypeSetupFull.exe - DIRECT/23.4.242.245 application/x-msdownload
1490124234.169  6459 192.168.0.204 TCP_MISS/200 5814 CONNECT mobile.pipe.aria.microsoft.com:443 - DIRECT/40.117.145.132 -
1490124234.169  6314 192.168.0.204 TCP_MISS/200 5814 CONNECT mobile.pipe.aria.microsoft.com:443 - DIRECT/40.117.145.132 -
1490124234.169  2689 192.168.0.204 TCP_MISS/200 5565 CONNECT secure-nym.adnxs.com:443 marcos DIRECT/68.67.180.45 -
1490124234.169  3386 192.168.0.204 TCP_MISS/200 6199 CONNECT etag-rr.prod.registrar.skype.com:443 - DIRECT/40.122.44.96 -
1490124234.169  3360 192.168.0.204 TCP_MISS/200 6224 CONNECT api.cc.skype.com:443 - DIRECT/40.79.74.185 -
1490124234.170  6071 192.168.0.204 TCP_MISS/200 6528 CONNECT mobile.pipe.aria.microsoft.com:443 - DIRECT/40.117.145.132 -
1490124245.025  10786 192.168.0.204 TCP_MISS/200 6110 CONNECT m.adnxs.com:443 marcos DIRECT/204.13.192.177 -
1490124249.679  16523 192.168.0.204 TCP_MISS/200 1721 CONNECT at.atwola.com:443 marcos DIRECT/152.163.56.3 -

Ferramentas

Mover Tópico