[squid-users] derive HTTP/HTTPS upload traffic to a secondary interface.

2015-02-05 Thread Josep Borrell
Hi, I have a squid box with two interfaces. One ADSL 20/1Mb and one SHDSL 4/4Mb. It is a school and they are working with Google Apps for Education. They do a lot of uploading and when using the ADSL, it collapses promptly. Is possible to derive only HTTP/HTTPS upload traffic to the SHDSL and cont

Re: [squid-users] Squid Source Code: What files/functions receive/send packets from/to hardware

2015-02-05 Thread Priya Agarwal
Hi, I needed some direction again. I also need to know where in the source code does squid open the network interface before it reads/writes from it. Thanks. Regards On Tue, Jan 6, 2015 at 11:37 AM, Priya Agarwal wrote: > Thanks a lot. :) > I'll sign up for squid-dev mailing list and do any fur

Re: [squid-users] help with regard to http/https filtering

2015-02-05 Thread Pavel Kazlenka
Hi Rajkumar, You probably need something like acl NoUpload method POST acl NoUpload method UPLOAD ssl_bump deny NoUpload Best wishes, Pavel On 02/06/2015 05:20 AM, Rajkumar Prasad wrote: Hi Pavel, Thanks for your help. I did this additional configs and now http http filterings working

[squid-users] SSL-bump certificate issues (mostly on Chrome, when accessing Google websites)

2015-02-05 Thread Luis Miguel Silva
Dear all, I recently compiled squid-3.4.9 with ssl-bump support and, although it is working for the most part, I'm having some issues accessing some websites. The behavior is REALLY weird so I'm going to try and describe it the best I can: - If i access https://www.google.com/ in Chrome, I could

Re: [squid-users] help with regard to http/https filtering

2015-02-05 Thread Rajkumar Prasad
Hi Pavel, Thanks for your help. I did this additional configs and now http http filterings working well for HTTPS enabled sites as well. I have another requirement wherin i need to filter http POST methods, which i am able to do for http sites. Is there a way we can achieve the same for https

[squid-users] login expired

2015-02-05 Thread Ignazio Raia
This post has NOT been accepted by the mailing list yet. Hello everyone, I installed a Squid proxy server and it works perfectly. I have two questions to ask about the authentication process. 1) I configured the basic_db_auth, but the browser keeps asking login and password even though it is r

Re: [squid-users] Custom requirement from Squid proxy logs

2015-02-05 Thread leo
Actually, I have multiple websites and some using Google Analytics and some uses Adobe. That is why I concentrated on SquidProxy as it logs corresponding entries for all types of analytics. Just to make a analytics independent, can we have any sort of solution.. Thanks for the advise, Leo Fe

Re: [squid-users] Custom requirement from Squid proxy logs

2015-02-05 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hm. AFAIK, Google Analythics has web-site monitoring capability for webmasters. In doubt about username logging capabilities (I've used it years ago). 06.02.2015 2:59, l...@technomicssolutions.com пишет: > Thank you Yuri. > > Can you suggest any

Re: [squid-users] Custom requirement from Squid proxy logs

2015-02-05 Thread leo
Thank you Yuri. Can you suggest any of the web application framework or method to get this done.. Can I do the same with web application if I don't have access to the website hosted server. In between, I found the following from squid config file. ===  Defined keywo

Re: [squid-users] Custom requirement from Squid proxy logs

2015-02-05 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I think, you can't. The single alternative I see - using Web-application capabilities. 06.02.2015 2:01, l...@technomicssolutions.com пишет: > Hi all, > > I am having a custom requirement. I am monitoring my websites Google Analytics from proxy log

[squid-users] Custom requirement from Squid proxy logs

2015-02-05 Thread leo
Hi all, I am having a custom requirement. I am monitoring my websites Google Analytics from proxy logs. My website users will be given with my Squid login details and once they login and visit my website, I can get sample logs like this from squid log. === 142316590

Re: [squid-users] Problems with squid 3.5.1

2015-02-05 Thread Stefano Ansaloni
@FrebB: I really don't know what identification helper is (I'm not a squid guru, please explain or drop a link). I'm on firefox 31.4.0esr (slackware linux 13.1). @Eliezer: As FredB said, the issue comes up randomly for both http and https sites (fun fact: if I try to reload a couple of times the

Re: [squid-users] Hypothetically comparing SATA\SAS to NAS\SAN for squid.

2015-02-05 Thread Eliezer Croitoru
Hey Omid, Before buying any NAS or SAN solution you will need to take in account couple things. Squid has an in memory objects index which requires ram and reduces the amount of in memory objects you can store. You will need to first verify that your current machine memory usage can allow you

Re: [squid-users] Problems with squid 3.5.1

2015-02-05 Thread FredB
Stefano, are using identification helper ? And which version of browser ? Regards, Fred http://numsys.eu http://e2guardian.org ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Blocking hotshield vpn

2015-02-05 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Try it. Tell us when success. 05.02.2015 20:17, Daniel Greenwald пишет: > Yuri- Why can't he just block the dstdomain? > > --- > Daniel I Greenwald > > > > On Thu, Feb 5, 2015 at 7:32 AM, Yuri Voinov mailto:yvoi...@gmail.com>> wrote: > > > N

Re: [squid-users] Blocking hotshield vpn

2015-02-05 Thread Daniel Greenwald
Yuri- Why can't he just block the dstdomain? --- Daniel I Greenwald On Thu, Feb 5, 2015 at 7:32 AM, Yuri Voinov wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > No way. > > Only before Squid - using Cisco or something like. > > Either Cisco acl's, or NBAR protocol discov

[squid-users] benefits of using ext_kerberos_ldap_group_acl instead of ext_ldap_group_acl

2015-02-05 Thread Simon Staeheli
"Amos Jeffries" wrote in message news:54BE3B5C.8040800 at treenet.co.nz... -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 20/01/2015 11:31 p.m., Simon Stäheli wrote: Are there any other benefits in using ext_kerberos_ldap_group_acl instead of ext_ldap_group_acl except the "Netbios name to

Re: [squid-users] Blocking hotshield vpn

2015-02-05 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 No way. Only before Squid - using Cisco or something like. Either Cisco acl's, or NBAR protocol discovery. 05.02.2015 17:46, Job пишет: > Hot Shield VPN -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEcBAEBAgAGBQJU02LhAAoJENNXIZxhPexGKAsH/RF

[squid-users] Blocking hotshield vpn

2015-02-05 Thread Job
Hello, is there a way to block Hot Shield VPN with Squid, maybe in conjunction with something else? I made some tries but is seems very difficult to block with Squid+Iptables. Thank you, best best regards! Francesco ___ squid-users mailing list squid-u

Re: [squid-users] Problems with squid 3.5.1

2015-02-05 Thread FredB
> Is it happening on all websites? or a specific one? > > I am using 3.4.11 for most of my daily uses now. > In order to reproduce it I will need the OS and version, and if I > assume > it is a self compiled so the "squid -v" details. > > Eliezer > Hi, I'm just testing and writing some codes