Re: [squid-users] blockVirgin Works for CONNECT but Custom Response does not work

2014-10-09 Thread Jatin Bhasin
Hi Alex, I used the annotation mechanism as you had suggested. My squid configuration files looks as below: (For now I am using X-Virus-ID to see if the concept works for my case) adaptation_masterx_shared_names X-Virus-ID acl toBump note X-Virus-ID yes ssl_bump client-first toBump My eCap adap

Re: [squid-users] https issues for google

2014-10-09 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Glenn, I just had a brainstorm. Your version is 3.1 so you are probably suffering from http://bugs.squid-cache.org/show_bug.cgi?id=3371 This bug shows up particularly badly when SPDY, WebSockets or HTTP/2 is being attempted by the browser. If so you

Re: [squid-users] https issues for google

2014-10-09 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/10/2014 12:02 p.m., glenn.gro...@bradnams.com.au wrote: > I was able to capture the log at the time this happened to me, I > got the following in the access.log: > > 1412895309.389 84 10.10.10.69 TCP_MISS/200 0 CONNECT > www.youtube.com:443

Re: [squid-users] https issues for google

2014-10-09 Thread Visolve Squid
Hi, Check the below acl rule in your squid configuration file to Block the particular Domain URLs and also block keywords itself. # ACL block sites acl blocksites dstdomain .youtube.com # ACL block keywords acl blockkeywords url_regex -i .youtube.com #Deny access to block keywords ACL & b

Re: [squid-users] https issues for google

2014-10-09 Thread glenn.groves
I was able to capture the log at the time this happened to me, I got the following in the access.log: 1412895309.389 84 10.10.10.69 TCP_MISS/200 0 CONNECT www.youtube.com:443 DIRECT/74.125.237.160 - 1412895311.770 0 10.10.10.69 TCP_DENIED/407 3983 CONNECT www.youtube.com:443 - NONE/-

Re: [squid-users] I need a help with user permissions credentials

2014-10-09 Thread Juan Manuel Perrote
El 09/10/2014 10:55, Amos Jeffries escribió: There is no TTL configured for external_acl_type helper. Meaning Squid uses the default TTL and groups are only checked every 1hr. If I set ttl on external_acl_type like this : external_acl_type ldap_group ttl=60 %LOGIN /usr/lib/squid3/squid_ldap

Re: [squid-users] I need a help with user permissions credentials

2014-10-09 Thread Juan Manuel Perrote
El 09/10/2014 10:55, Amos Jeffries escribió: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/10/2014 2:28 a.m., Juan Manuel Perrote wrote: I have a Squid Cache: Version 3.1.19, on Ubuntu 12.04.2 LTS. We use external authentification on ldap repository on a remote machine #

Re: [squid-users] I need a help with user permissions credentials

2014-10-09 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/10/2014 2:28 a.m., Juan Manuel Perrote wrote: > > I have a Squid Cache: Version 3.1.19, on Ubuntu 12.04.2 LTS. > > We use external authentification on ldap repository on a remote > machine > > ##

[squid-users] I need a help with user permissions credentials

2014-10-09 Thread Juan Manuel Perrote
I have a Squid Cache: Version 3.1.19, on Ubuntu 12.04.2 LTS. We use external authentification on ldap repository on a remote machine ### # #REGLA VALIDACION LDAP #*

Re: [squid-users] leaking memory In Squid 3.4.6

2014-10-09 Thread Steve Hill
On 08.10.14 15:05, Amos Jeffries wrote: New patch added to bug 4088. Please see if it resolves the external_acl_type leak. Despite the external ACL cache leak being plugged, I'm still getting a serious memory leak. This data was captured over night on a production server, graphing memory us

Re: [squid-users] squid 3.4. uses 100% cpu with ntlm_auth

2014-10-09 Thread Andreas . Reschke
Hello masterx81 ,thanks for this information. I've downgraded my 5 server form 3.4.8 to 3.3.13 . Everything works fine. The server have less than the half load as before, so I can shutdown one server. Perhaps I can reduce on more server. Mit freundlichen Grüßen / Kind regardsMr. Andreas Reschke

Re: [squid-users] problem with basic_ldap_auth

2014-10-09 Thread masterx81
hi! thanks for the answer! I've already added the -d option on all helpers, i get kerberos and ntlm tickets but never basic auth... Most of them came from the negotiate wrapper. I've noticed as you say that the realm part isn't displayed in the password prompt box, so the prompt doesn't came form t