acl localnet src 10.49.1.0/24
acl CONNECT method CONNECT
dns_nameservers 8.8.8.8
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost manager
http_access deny manager
acl test dstdomain -i "/etc/squid/blocked_http.txt"
http_access deny localnet test
http_access allow localnet
http_access allow localhost
http_access deny all
http_port 10.49.1.254:3128 intercept options=NO_SSLv3:NO_SSLv2
http_port 10.49.1.254:3130 options=NO_SSLv3:NO_SSLv2
https_port 10.49.1.254:3129 intercept ssl-bump options=ALL:NO_SSLv3:NO_SSLv2 connection-auth=off cert=/etc/squid/squidCA.pem
always_direct allow all
sslproxy_cert_error allow all
sslproxy_flags DONT_VERIFY_PEER
acl blocked ssl::server_name "/etc/squid/blocked_https.txt"
acl step1 at_step SslBump1
ssl_bump peek step1
ssl_bump terminate blocked
ssl_bump splice all
sslcrtd_program /usr/lib/squid/ssl_crtd -s /var/lib/ssl_db -M 4MB
acl blocked ssl::server_name "/etc/squid/blocked_https.txt"
dpkg -l | grep dropbox
apt install --reinstall dropbox*