Hi there!
First, thanks for the good job!
We use OPNsense 23.7.8_1-amd64 with all updates. After the last updates with new version of squid web proxy, we encountered some problems with downloading of updates from WithSecure update server.
In the proxy access log we have:
2023-11-19T13:39:24.774 0 192.168.x.y NONE_NONE/400 21912 GET http://guts2.sp.f-secure.com/f/91a4ddafb6cf5cc4ce052e6e3b55281559ac9af378b5618bfb4702828c8620ad_archive - HIER_NONE/- text/html
and so on.
None of computer in our local LAN can get updates from WithSecure update server. To get it, we switched off web proxy, then this go as usual, all computers got updates for their WithSecure Antyvirus.
So there is problem with this Squid version or with mechanism of withsecure updater ?
And the second question: Is there any mechanism in web proxy to exclude some IP addressed to being cached? I was looking for, but found none. if is, then we can try to exclude IP adresses of withsecure update servers (to mitigate this issue).
[UPDATE]: When webproxy is on, above file i can download with firefox, Edge, so it works, but not with WithSecure EPP updater.
Do not proxy antivirus updates. Problem solved.
Thanks, I would never have thought of that.