Hello! Probalkozom egy egyszeru https proxy-val, de az indulasakor mindig ezt az uzenetet kapom: # zorpctl start zorp_https Starting Zorp Firewall Suite: /usr/share/zorp/pylib/Zorp/Pssl.py:525: DeprecationWarning: the sets module is deprecated from sets import ImmutableSet zorp_https Mondjuk ettol meg elindul, es mukodik is, szoval pillanatnyilag nem okoz problemat ez a warning, de ki tudja, hogy mikor fog... Es nem is szep :) A konfig igy nez ki: from Zorp.Core import * from Zorp.Pssl import * from Zorp.Http import * InetZone("intranet", "192.168.2.0/24", inbound_services=[], outbound_services=["intra_https"]) InetZone("internet", "0.0.0.0/0", inbound_services=["intra_https"], outbound_services=[]) class IntraHttps(HttpProxy): def config(self): HttpProxy.config(self) self.ssl.client_cert = '/etc/ssl/certs/fw.akarmi.hu.crt' self.ssl.client_key = '/etc/ssl/private/fw.akarmi.hu.key.nopass' self.ssl.client_verify_type = SSL_VERIFY_NONE self.ssl.server_ca_directory = '/etc/zorp/ca.crt' self.ssl.server_crl_directory = '/etc/zorp/crls' self.ssl.server_ssl_method = PSSL_METHOD_SSLV3 self.ssl.server_disable_proto_sslv2 = TRUE self.ssl.server_ssl_cipher = SSL_CIPHERS_HIGH self.ssl.server_need_ssl = TRUE self.ssl.server_verify_type = SSL_VERIFY_REQUIRED_TRUSTED self.ssl.client_need_ssl = TRUE self.ssl.server_verify_depth = 3 def zorp_https() : Service("intra_https", IntraHttps, TransparentRouter()) Listener(SockAddrInet("192.168.2.254", 60443), "intra_https", transparent=TRUE) # zorpctl version Zorp 3.9.0 Revision: ssh+git://coroner@git.balabit//var/scm/git/zorp/zorp-core--mainline--4.0#master#fcb59dd06e0805ce995b8d94cc8c12096e385365 Compile-Date: Apr 13 2011 09:11:19 Config-Date: 2011/04/13 Trace: off Debug: off IPOptions: off IPFilter-Tproxy: off Netfilter-Tproxy: on Linux22-Tproxy: off libzorpll 3.9.0.1 Revision: Compile-Date: Apr 12 2011 14:36:53 Trace: off MemTrace: off Caps: on Debug: off StackDump: off -- Udvozlettel Zsiga