{"global":{"CACert":"\/etc\/sslproxy\/ca.crt","CAKey":"\/etc\/sslproxy\/ca.key","ConnectLog":"\/var\/log\/sslproxy\/connect.log"},"proxy_specs":[{"filter_rules":[],"pass_sites":[],"Proto":"https","Addr":"0.0.0.0","Port":"8444","VerifyPeer":"no","NatEngine":"tproxy","Divert":"no","PiiMask":"yes","PiiMaskKrRrn":"yes","PiiMaskKrPhone":"yes","PiiMaskEmail":"yes","PiiMaskCard16":"yes","PiiMaskPassport":"yes","PiiMaskAccount":"yes","PiiMaskBizReg":"yes","PiiMaskMobile":"yes","PiiMaskHealth":"yes","ContentLogDir":"\/var\/log\/sslproxy\/content","ContentScanCmd":"\/etc\/sslproxy\/scripts\/dlp_scan.sh $1","ContentBlockPageReq":"\/etc\/sslproxy\/scripts\/block_upload.html","ContentBlockPageResp":"\/etc\/sslproxy\/scripts\/block_download.html","ContentScanTimeout":"30","RemoveHTTPAcceptEncoding":"yes"},{"filter_rules":[],"pass_sites":[],"Proto":"http","Addr":"0.0.0.0","Port":"8088","NatEngine":"tproxy","Divert":"no","PiiMask":"yes","PiiMaskKrRrn":"yes","PiiMaskKrPhone":"yes","PiiMaskEmail":"yes","PiiMaskCard16":"yes","PiiMaskPassport":"yes","PiiMaskAccount":"yes","PiiMaskBizReg":"yes","PiiMaskMobile":"yes","PiiMaskHealth":"yes","ContentLogDir":"\/var\/log\/sslproxy\/content","ContentScanCmd":"\/etc\/sslproxy\/scripts\/dlp_scan.sh $1","ContentBlockPageReq":"\/etc\/sslproxy\/scripts\/block_upload.html","ContentBlockPageResp":"\/etc\/sslproxy\/scripts\/block_download.html","ContentScanTimeout":"30","RemoveHTTPAcceptEncoding":"yes"}],"filter_rules":[{"Action":"Match","Log":"connect"}],"conf_file":"\/etc\/sslproxy\/sslproxy.conf","file_readable":true,"raw":"\nCACert \/etc\/sslproxy\/ca.crt\nCAKey  \/etc\/sslproxy\/ca.key\n\nConnectLog \/var\/log\/sslproxy\/connect.log\n\n# 모든 연결에 connect 로그 활성화\nFilterRule {\n    Action Match\n    Log connect\n}\n\n# TPROXY는 0.0.0.0 바인딩 필요 (원본 dst IP 보존이 목적이므로)\nProxySpec {\n    Proto  https\n    Addr   0.0.0.0\n    Port   8444\n    VerifyPeer no          # ← 추가: 서버 인증서 검증 비활성화\n    NatEngine tproxy\n    Divert no\n\n    # IPS 인라인 검사 구역 (Linux + libnet 빌드 시 활성화)\n    #InspectIfaceOut iz_out   # C→S 인젝션\n    #InspectIfaceIn  iz_in    # S→C 인젝션\n    #InspectTimeout  5\n\n    # PII 마스킹 활성화 — 이 줄이 없으면 마스킹하지 않음\n    # PiiMask yes 만 지정하면 모든 패턴(9종) 적용\n    PiiMask yes\n\n    # 패턴별 개별 활성화\/비활성화 (선택사항)\n    # PiiMask yes 이후에 지정; 생략 시 해당 패턴은 활성 상태 유지\n    PiiMaskKrRrn    yes   # 주민등록번호\n    PiiMaskKrPhone  yes   # 전화번호 (유선 + 이동통신)\n    PiiMaskEmail    yes   # 이메일\n    PiiMaskCard16   yes   # 신용카드번호\n    PiiMaskPassport yes   # 여권번호\n    PiiMaskAccount  yes   # 계좌번호\n    PiiMaskBizReg   yes   # 사업자등록번호\n    PiiMaskMobile   yes   # 핸드폰 (010 전용)\n    PiiMaskHealth   yes   # 건강보험번호\n\n    ContentLogDir     \/var\/log\/sslproxy\/content\n    ContentScanCmd    \/etc\/sslproxy\/scripts\/dlp_scan.sh $1\n    ContentBlockPageReq    \/etc\/sslproxy\/scripts\/block_upload.html\n    ContentBlockPageResp   \/etc\/sslproxy\/scripts\/block_download.html\n    ContentScanTimeout 30\n\n    RemoveHTTPAcceptEncoding yes\n\n}\n\nProxySpec {\n    Proto  http\n    Addr   0.0.0.0\n    Port   8088\n    NatEngine tproxy\n    Divert no\n\n    # IPS 인라인 검사 구역 (Linux + libnet 빌드 시 활성화)\n    #InspectIfaceOut iz_out   # C→S 인젝션\n    #InspectIfaceIn  iz_in    # S→C 인젝션\n    #InspectTimeout  5\t\n\n    # PII 마스킹 활성화 — 이 줄이 없으면 마스킹하지 않음\n    # PiiMask yes 만 지정하면 모든 패턴(9종) 적용\n    PiiMask yes\n\n    # 패턴별 개별 활성화\/비활성화 (선택사항)\n    # PiiMask yes 이후에 지정; 생략 시 해당 패턴은 활성 상태 유지\n    PiiMaskKrRrn    yes   # 주민등록번호\n    PiiMaskKrPhone  yes   # 전화번호 (유선 + 이동통신)\n    PiiMaskEmail    yes   # 이메일\n    PiiMaskCard16   yes   # 신용카드번호\n    PiiMaskPassport yes   # 여권번호\n    PiiMaskAccount  yes   # 계좌번호\n    PiiMaskBizReg   yes   # 사업자등록번호\n    PiiMaskMobile   yes   # 핸드폰 (010 전용)\n    PiiMaskHealth   yes   # 건강보험번호\n\n    ContentLogDir     \/var\/log\/sslproxy\/content\n    ContentScanCmd    \/etc\/sslproxy\/scripts\/dlp_scan.sh $1\n    ContentBlockPageReq    \/etc\/sslproxy\/scripts\/block_upload.html\n    ContentBlockPageResp   \/etc\/sslproxy\/scripts\/block_download.html\n    ContentScanTimeout 30\n\n    RemoveHTTPAcceptEncoding yes\n\n}\n"}