[squid-users] true sizeof squid cache

2014-11-05 Thread Riccardo Castellani
I'm installing new machine as Squid server and I need to understand what criteria to estimate the 'cache size', I'm not speaking about extra space for swap/temporary files or fragmentation but I'm saying about the cache of size that is 3rd cache_dir argument. Server will receive requests from ab

Re: [squid-users] could sslbump handle client certs better?

2014-11-05 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 6/11/2014 11:35 a.m., Jason Haar wrote: > I haven't tested this so I may be embarrassing myself, but I doubt > client certs and sslbump play nicely together as the end-server > would never see any possible client cert interaction SSL-bump in which

Re: [squid-users] Behind enemy lines (squid behind proxy)

2014-11-05 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 6/11/2014 2:33 p.m., doc.holli...@usa.com wrote: > I've searched through the internets and tried various things... to > no avail. Hopefully someone here can point me in the right > direction. I am sitting behind a proxy, which accepts http/https. >

[squid-users] Behind enemy lines (squid behind proxy)

2014-11-05 Thread doc . holliday
[plain text version; sorry for the inconvenience] I've searched through the internets and tried various things... to no avail. Hopefully someone here can point me in the right direction.   I am sitting behind a proxy, which accepts http/https. Everything else is blocked. If I instruct my browser

[squid-users] Behind enemy lines (squid behind proxy)

2014-11-05 Thread doc . holliday
I've searched through the internets and tried various things... to no avail. Hopefully someone here can point me in the right direction.   I am sitting behind a proxy, which accepts http/https. Everything else is blocked. If I instruct my browser to use this proxy, everything works dandy. Both h

Re: [squid-users] assertion failed: client_side.cc:1515: "connIsUsable(http->getConn())

2014-11-05 Thread Dan Charlesworth
Terribly sorry, but I only attached half the traceback before. I've attached two *full* tracebacks this time; one from today and one from yesterday. This is from a forward proxy at a school, where this crash happens exactly once per day between 9:00 and 9:30. On 5 November 2014 11:42, wrote:

[squid-users] could sslbump handle client certs better?

2014-11-05 Thread Jason Haar
I haven't tested this so I may be embarrassing myself, but I doubt client certs and sslbump play nicely together as the end-server would never see any possible client cert interaction I was wondering how quickly the need of a client cert is announced? Could/does squid notice the server requirement

Re: [squid-users] Correctly implementing peak-splice

2014-11-05 Thread James Lay
On Wed, 2014-11-05 at 12:24 +0200, Christos Tsantilas wrote: > On 11/04/2014 02:26 PM, James Lay wrote: > > > > Thanks a bunch Christos, > > > > That list of IP's is things like apple.com, textnow.me, and windows > > updates...IP's that simply don't bump well. My setup is a linux box > > that's a

Re: [squid-users] TCP_DENIED/403

2014-11-05 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 5/11/2014 10:39 p.m., navari.lore...@gmail.com wrote: > Good day today. I' m configuring a Squid Web Proxy Cache and I > apply the deny policy to some sites l this is the problem: > > when people accesses sites with GET they have the right html er

Re: [squid-users] Correctly implementing peak-splice

2014-11-05 Thread Christos Tsantilas
On 11/04/2014 02:26 PM, James Lay wrote: Thanks a bunch Christos, That list of IP's is things like apple.com, textnow.me, and windows updates...IP's that simply don't bump well. My setup is a linux box that's a router...one NIC internal IP, the other external IP. Via iptables redirect, I'm tr

Re: [squid-users] TCP_DENIED/403

2014-11-05 Thread Eliezer Croitoru
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 The project 100% needs a wiki article with the relevant information about the issue.(the page is wonderful!!!) I can write the page but it will take time to finish. - - Adding into the todo list. I am unsure but almost sure a bugzilla report about it

Re: [squid-users] TCP_DENIED/403

2014-11-05 Thread navari.lore...@gmail.com
thank for replay SO = CentOS 7 squid-3.4.6-1.el7.centos.x86_64 = [root@lv-034-005 squid]# cat squid.conf # # Recommended minimum configuration: # #Default: debug_options ALL,1 #more: debug_options ALL,1 33,2 28,9 debug_options ALL,1 28,3

[squid-users] Fwd: Re: TCP_DENIED/403

2014-11-05 Thread Lorenzo
thank for replay SO = CentOS 7 squid-3.4.6-1.el7.centos.x86_64 = [root@lv-034-005 squid]# cat squid.conf # # Recommended minimum configuration: # #Default: debug_options ALL,1 #more: debug_options ALL,1 33,2 28,9 debug_options ALL,1 2

Re: [squid-users] TCP_DENIED/403

2014-11-05 Thread navari.lore...@gmail.com
thank now i read Il 05/11/2014 10:53, Rafael Akchurin [via Squid Web Proxy Cache] ha scritto: > Hello Navari, > > Just my two cents - > http://docs.diladele.com/faq/squid.html#why-i-see-cannot-connect-to-site-using-https-browser-message-instead-of-usual-site-is-blocked > > Raf > > -Original

Re: [squid-users] Squid 3.5.0.2 beta is available

2014-11-05 Thread Odhiambo Washington
Hi Eliezer, That link should be fine, although my system is actually PC-BSD. The version is the same though an old version. My exact version is: ftp://ftp.pcbsd.org/pub/archived/9.1-RELEASE/amd64/PCBSD9.1-RELEASE-p19-09-07-2013-x64-DVD.iso On 5 November 2014 12:15, Eliezer Croitoru wrote: > ---

Re: [squid-users] TCP_DENIED/403

2014-11-05 Thread Rafael Akchurin
Hello Navari, Just my two cents - http://docs.diladele.com/faq/squid.html#why-i-see-cannot-connect-to-site-using-https-browser-message-instead-of-usual-site-is-blocked Raf -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of navari.lore..

Re: [squid-users] TCP_DENIED/403

2014-11-05 Thread Antony Stone
On Wednesday 05 November 2014 at 10:39:19 (EU time), navari.lore...@gmail.com wrote: > I'm configuring a Squid Web Proxy Cache and I apply the deny policy to some > sites. This is the problem: > > when people access sites with GET they have the right html error page > ERR_ACCES_DENIED > (LOG =

[squid-users] TCP_DENIED/403

2014-11-05 Thread navari.lore...@gmail.com
Good day today. I' m configuring a Squid Web Proxy Cache and I apply the deny policy to some sites l this is the problem: when people accesses sites with GET they have the right html error page ERR_ACCES_DENIED (LOG = TCP_DENIED/403 4069 GET http://www.sex.com/ - HIER_NONE/- text/html) when p

Re: [squid-users] Squid 3.5.0.2 beta is available

2014-11-05 Thread Eliezer Croitoru
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hey Odhiambo, I will try to build it on freebsd and see what happens to get the bigger picture. Will this: http://ftp.freebsd.org/%2Fpub/FreeBSD/releases/ISO-IMAGES/9.1/FreeBSD-9.1-RELEASE-amd64-dvd1.iso be the link for the relevant release? Elieze

Re: [squid-users] Squid 3.5.0.2 beta is available

2014-11-05 Thread Odhiambo Washington
On 5 November 2014 10:44, Eliezer Croitoru wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Hey Odhiambo, > > The cut might be pretty important. > For example I would like to get the full build environmental variables > etc. > If you can please provide all the relevant details about t

Re: [squid-users] Squid 3.5.0.2 beta is available

2014-11-05 Thread Eliezer Croitoru
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/04/2014 06:45 AM, Amos Jeffries wrote: > The Squid Software Foundation is very pleased to announce the > availability of the Squid-3.5.0.2 beta release! Later next week a new build node will be available for CentOS 6.5 RPMs. Sorry for the delay

Re: [squid-users] Squid 3.5.0.2 beta is available

2014-11-05 Thread Odhiambo Washington
On 4 November 2014 23:10, Henrik Nordstrom wrote: > tis 2014-11-04 klockan 23:05 +0300 skrev Odhiambo Washington: > > > > > `/usr/home/wash/Tools/Squid/3.5/squid-3.5.0.2/src' gmake[3]: > > *** No > > > rule to make target `/usp/include/c++/4.2/vector', needed by > >