Re: [squid-users] http_access deny for dstdomain acl not denying access to url.. what am I doing wrong?

2014-10-14 Thread Walter H.
On 15.10.2014 08:13, Amos Jeffries wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 And the key difference in these configs is not the ACL contents, but the ordering in which they are matched. Mirzas' config starts by telling Squid everything on the LAN/localnet is allowed. Ok, fine, Squid

Re: [squid-users] http_access deny for dstdomain acl not denying access to url.. what am I doing wrong?

2014-10-14 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 And the key difference in these configs is not the ACL contents, but the ordering in which they are matched. Mirzas' config starts by telling Squid everything on the LAN/localnet is allowed. Ok, fine, Squid will do that. Walters' config will tell Sq

Re: [squid-users] http_access deny for dstdomain acl not denying access to url.. what am I doing wrong?

2014-10-14 Thread Walter H.
acl allow_urls url_regex -i "/etc/squid/allowurls-regex-acl.squid" (a) acl block_urls url_regex -i "/etc/squid/blockurls-regex-acl.squid" (b) acl allow_urlpaths urlpath_regex -i "/etc/squid/allowurlpaths-regex-acl.squid" (c) acl block_urlpaths urlpath_regex -i "/etc/squid/blockurlpaths-regex-acl

Re: [squid-users] http_access deny for dstdomain acl not denying access to url.. what am I doing wrong?

2014-10-14 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Mirza, take a read through these FAQ http://wiki.squid-cache.org/SquidFaq/OrderIsImportant PS. all your posts seem to be getting badly mangled by wrapping isues. Can you please check your mailer is sending plain text, in UTF-8 or ASCII and applyi

[squid-users] http_access deny for dstdomain acl not denying access to url.. what am I doing wrong?

2014-10-14 Thread Mirza Dedic
Trying to understand what I am doing wrong with my ACLs (yes I've read the ACL guide on squid site.. but still confused).. My client is 172.16.10.101, trying to block access to facebook (and other dstdomain file lists), but it is not working from the client I can still access fb. Is this because

Re: [squid-users] basic_ldap_auth and 389 Directory Server configuration help

2014-10-14 Thread matt de pass
Hi Amos,Thanks for the suggestions. The erroneous whitespace was as result of my mail formatting and is not a part of the actual command and I neglected to mention that adding the -d results in the exact same thing happening. I have consulted the manpage and still cannot see where I'm going wrong.

Re: [squid-users] Best way to deny access to URLs in Squid 3.3.x?

2014-10-14 Thread Mike
On 10/14/2014 12:37 PM, Mirza Dedic wrote: Just curious, what are some of you doing in your Squid environment as far as URL filtering goes? It seems there are a few options out there.. squidguard... dansguardian.. plain block lists. What is the best practice to implement some sort of block lis

Re: [squid-users] basic_ldap_auth and 389 Directory Server configuration help

2014-10-14 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Please add -d to your parameters. That will output debug info into cache.log for the lookups that may help you narrow down the problem. For the record the helper manual is here: http://www.squid-cache.org/Versions/v3/3.4/manuals/basic_ldap_auth.html

Re: [squid-users] Best way to deny access to URLs in Squid 3.3.x?

2014-10-14 Thread Marcus Kool
With every set of requirements, there is an other "best way". To selectively block websites and also block SSH tunnels, VPNs, proxies and remote software (some of which are detected on the fly) you can also use ufdbGuard. Your mileage varies with which URL database you use. Marcus On 10/14/2

Re: [squid-users] cache-control

2014-10-14 Thread Thiago Farina
On Tue, Oct 14, 2014 at 3:34 PM, Amos Jeffries wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 15/10/2014 7:14 a.m., Thiago Farina wrote: >> Hi squiders, >> >> We want to move the following Go code into squid, as we already >> have squid in front of our Go server. >> >> The code is

Re: [squid-users] some question about compiling squid with Cygwin

2014-10-14 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 15/10/2014 5:01 a.m., Mirza Dedic wrote: > You should be able to grab SQUID 3.3.3 from Cygwin and compile it > there without issues. When working within cygwin get the "cygport" > program as there is a specific squid.cygport install file that > extr

Re: [squid-users] cache-control

2014-10-14 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 15/10/2014 7:14 a.m., Thiago Farina wrote: > Hi squiders, > > We want to move the following Go code into squid, as we already > have squid in front of our Go server. > > The code is: > > func makeResourceHandler() func(http.ResponseWriter, *http.

[squid-users] cache-control

2014-10-14 Thread Thiago Farina
Hi squiders, We want to move the following Go code into squid, as we already have squid in front of our Go server. The code is: func makeResourceHandler() func(http.ResponseWriter, *http.Request) { fileServer := http.FileServer(http.Dir("./")) return func(w http.ResponseWriter, r *http.Reque

Re: [squid-users] Best way to deny access to URLs in Squid 3.3.x?

2014-10-14 Thread Rafael Akchurin
Hello Mirza, I would humbly propose taking a look at any of the ICAP servers listed on http://www.squid-cache.org/Misc/icap.html. BTW we are now preparing a native Windows ICAP build of qlproxy and would be glad if you could take a look. Best regards, Raf From: Mirza Dedic mailto:mirza.de...@o

[squid-users] Best way to deny access to URLs in Squid 3.3.x?

2014-10-14 Thread Mirza Dedic
Just curious, what are some of you doing in your Squid environment as far as URL filtering goes? It seems there are a few options out there.. squidguard... dansguardian.. plain block lists. What is the best practice to implement some sort of block list into squid? I've found urlblacklist.com tha

[squid-users] basic_ldap_auth and 389 Directory Server configuration help

2014-10-14 Thread Matt de Pass
Greetings, I've been trying to configure LDAP authentication to our proxy (CentOS 6.5) but have been unable to establish a connection with basic_ldap_auth. Following various online guides, I've configured Squid with the following options and it appears to be working as expected, with the except

Re: [squid-users] Squid not accounting server response

2014-10-14 Thread Satish Thareja
Amos, The last client write and server read both happen at timestamp of 2014/10/08 21:58:17. But client writes take place multiple time after the last server read has been done, until the client range has been fulfilled. Thanks, Satish On Tue, Oct 14, 2014 at 8:46 PM, Satish Thareja wrote: > Hi

Re: [squid-users] some question about compiling squid with Cygwin

2014-10-14 Thread Mirza Dedic
You should be able to grab SQUID 3.3.3 from Cygwin and compile it there without issues. When working within cygwin get the "cygport" program as there is a specific squid.cygport install file that extracts the squid source, applies cygwin specific patches and compiles it for you. If you are runni

Re: [squid-users] Squid not accounting server response

2014-10-14 Thread Satish Thareja
Hi Amos, Transfer encoding is being used in the HTTp transaction. The client range request and the content length were known form the headers. Store log also confirms the content-length to be the same. Out of 103262382 bytes sent from the server, the header size is 462 bytes, remaining is the obj

Re: [squid-users] Squid not accounting server response

2014-10-14 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 15/10/2014 1:16 a.m., Satish Thareja wrote: > Hi Amos, > > The client is being served the content as per the range in the > request headers. The object is cacheable and there are no other > caches involved. > > The client requested range : 36798-1

Re: [squid-users] Squid not accounting server response

2014-10-14 Thread Satish Thareja
Hi Amos, The client is being served the content as per the range in the request headers. The object is cacheable and there are no other caches involved. The client requested range : 36798-103216128 (incorrect value in the last email) Object length : 103701442 Squid seen bytes(from server): 103262

Re: [squid-users] Squid not accounting server response

2014-10-14 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 15/10/2014 12:20 a.m., Satish Thareja wrote: > Hi, > > I trying to get a video cached wherein the client sends a range > request for the video object(Range: bytes=36798-103701442) which > gets converted to request without range(range_offset_limit

[squid-users] Squid not accounting server response

2014-10-14 Thread Satish Thareja
Hi, I trying to get a video cached wherein the client sends a range request for the video object(Range: bytes=36798-103701442) which gets converted to request without range(range_offset_limit set to 10MB). What I see, is after squid serves the client request and gets about 103262382 bytes of data

Re: [squid-users] Problems with filtering when using chrome

2014-10-14 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 14/10/2014 10:26 p.m., Robert Hundley wrote: > Hi, I'm trying to use squid to do some basic filtering. I have > added an ACL to filtering based on regular expressions, and added > in a few strings I'd like not to load. These work correctly on IE > a

Re: [squid-users] Squid, Kerberos and FireFox (Was: Re: leaking memory in squid 3.4.8 and 3.4.7.)

2014-10-14 Thread Markus Moeller
Hi Victor, That just means that the server requires more information from the client. This could happen if mutual authentication is required or the dataset is too large and had to be split. If you run it in squid the client would send new data until the server says the exchange is complete (

[squid-users] Problems with filtering when using chrome

2014-10-14 Thread Robert Hundley
Hi, I'm trying to use squid to do some basic filtering. I have added an ACL to filtering based on regular expressions, and added in a few strings I'd like not to load. These work correctly on IE and firefox, but in chrome the page loads. It correctly records TCP_DENIED/403 3674 CONNECT www.dropbo

Re: [squid-users] some question about compiling squid with Cygwin

2014-10-14 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 14/10/2014 7:17 p.m., lionx...@gmail.com wrote: > Hello, everybody! > > Recently i need run squid 3.x(x >= 1) on windows, and i found > related wiki from this url: > > http://wiki.squid-cache.org/KnowledgeBase/Windows > > From this i know there a