Re: [squid-users] squid rotating between many ips

2014-12-16 Thread Brett Lymn
On Wed, Dec 17, 2014 at 03:32:57AM +1300, Amos Jeffries wrote: > > Yes, by combining these: > http://wiki.squid-cache.org/ConfigExamples/Strange/RotatingIPs > http://wiki.squid-cache.org/Features/AclRandom > > ... but what are you trying to do it for? > Probably so he can enjoy the pain of dea

Re: [squid-users] citrix receiver not authenticating with squid

2014-12-16 Thread Brendan Kearney
On Tue, 2014-12-16 at 19:40 +0100, Natxo Asenjo wrote: > hi, > > we have 2 centos 6 hosts providing a load-balanced squid service > (behind keepalived and haproxy; haproxy sends requests to both squids) > and authenticating users against an Active Directory environment. This > is working really ni

[squid-users] citrix receiver not authenticating with squid

2014-12-16 Thread Natxo Asenjo
hi, we have 2 centos 6 hosts providing a load-balanced squid service (behind keepalived and haproxy; haproxy sends requests to both squids) and authenticating users against an Active Directory environment. This is working really nice. Our users log in their desktops and using the negotiate authen

[squid-users] Strange entries in access.log

2014-12-16 Thread Dr. Lars Hanke
Hi, in my access.log I find entries like: 1418752070.702 0 172.16.1.66 NONE/400 3636 %C0%0E%C0%0F%C0%07%C0%09%C0 - NONE/- text/html 1418752082.987 0 172.16.1.66 NONE/400 3636 %C0%0E%C0%0F%C0%07%C0%09%C0 - NONE/- text/html 1418752083.490 0 172.16.1.66 NONE/400 3636 %C0%0E%C0%0F%

Re: [squid-users] Problem with digest authentification and credential backend

2014-12-16 Thread FredB
> Should be called auth/digest/Config.cc now. Contents should not be > much different, just the filename. > > Amos Hello, Thnaks Amos, Ok, so I will provide a patch in bug report this week Fred ___ squid-users mailing list squid-users@lists.squid-

Re: [squid-users] squid rotating between many ips

2014-12-16 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/12/2014 1:03 p.m., Ahmed Allzaeem wrote: > Hello Guys , im gonna configure squid with many ips with many > outside outgoing addresses. > > > > But my goal this time is . > > I need rotating ips. > > > > As an example , I connect to ip:port

Re: [squid-users] Problem with digest authentification and credential backend

2014-12-16 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/12/2014 3:03 a.m., FredB wrote: > >>> Ok, thanks, >>> >>> Tested with both nonce_count and nonce_max_duration, no >>> problem. Do you known if it works with squid 3.5 ? >>> >>> >> >> No sorry I don't know, but if the patch can be applied I g

Re: [squid-users] squid rotating between many ips

2014-12-16 Thread Eliezer Croitoru
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/17/2014 02:03 AM, Ahmed Allzaeem wrote: > Hello Guys , im gonna configure squid with many ips with many > outside outgoing addresses. > > > > But my goal this time is . > > I need rotating ips. > > > > As an example , I connect to ip:port

Re: [squid-users] Splicing a connection if server cert cannot be verified

2014-12-16 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 16/12/2014 10:20 a.m., Soren Madsen (DREIJER) wrote: > Thanks for the quick reply, Amos. > >> Offering SSLv3 from a server is suicide these days. Those sites >> should be on the fast decline, or at very least shunned like >> plague victims. Lookup

[squid-users] squid rotating between many ips

2014-12-16 Thread Ahmed Allzaeem
Hello Guys , im gonna configure squid with many ips with many outside outgoing addresses. But my goal this time is . I need rotating ips. As an example , I connect to ip:port , and then I need my ips be rotated between many outgoing ips How can squid help me with that ? ___

Re: [squid-users] Problem with digest authentification and credential backend

2014-12-16 Thread FredB
> > Ok, thanks, > > > > Tested with both nonce_count and nonce_max_duration, no problem. Do > > you known if it works with squid 3.5 ? > > > > > > No sorry I don't know, but if the patch can be applied I guess that > yes it can works. > Except if there are some changes in DIGEST between 3.4 an

Re: [squid-users] ICAP: how to get port of X-Client-IP

2014-12-16 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 16/12/2014 9:49 p.m., Alexander Bubnov wrote: > > Hello Amos! Glad to get your answer! > > > 1. I have tried to use %>p specifier for adaptation_meta directive. > But it seems does not work that way I used it. I specified it in > squid.conf: > >

Re: [squid-users] 'cache' config option and rewrite

2014-12-16 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 16/12/2014 11:01 p.m., James Harper wrote: > I have a rewrite rule so that any request for a list of apt > repositories (acl dstdomain) are rewritten to instead go to my > apt-cacher server, and then a "cache deny" rule to make sure squid > doesn't

[squid-users] 'cache' config option and rewrite

2014-12-16 Thread James Harper
I have a rewrite rule so that any request for a list of apt repositories (acl dstdomain) are rewritten to instead go to my apt-cacher server, and then a "cache deny" rule to make sure squid doesn't cache files from these repositories. This seemed to be working fine but my latest attempt at a deb

Re: [squid-users] ICAP: how to get port of X-Client-IP

2014-12-16 Thread Alexander Bubnov
Hello Amos! Glad to get your answer! 1. I have tried to use %>p specifier for adaptation_meta directive. But it seems does not work that way I used it. I specified it in squid.conf: adaptation_meta X-CLIENT-SRCPORT %>p I found that specifier ony in logformat. May be you mixed it up? 2. About