Re: [squid-users] Squid Source Code: What files/functions receive/send packets from/to hardware

2015-02-06 Thread Priya Agarwal
Actually I am unable to mail to squid-dev. Thus asking here. How/where does squid open the network interface and starts listening on them. Regards On Fri, Feb 6, 2015 at 12:57 PM, Priya Agarwal wrote: > Hi, > I needed some direction again. I also need to know where in the source > code does squi

Re: [squid-users] login expired

2015-02-06 Thread Ignazio Raia
Good morning Amos, here is my squid.conf, basic_db_auth script and the shell test. thanks a lot for your interesting and help. TEST MADE FROM VIA ssh CONNECTION TO MY LAMP & SQUID SERVER (ssh ignazio@192.168.2.1) $ sudo /usr/lib/squid3/basic_db_auth --user root --password rootpasswd --md5 --cond

Re: [squid-users] Blocking Chrome and QUIC

2015-02-06 Thread Luis Miguel Silva
Antony, *Comments inline!* Thanks, Luis On Fri, Feb 6, 2015 at 3:58 PM, Antony Stone < antony.st...@squid.open.source.it> wrote: > On Friday 06 February 2015 at 22:54:54 (EU time), Luis Miguel Silva wrote: > > > As I started playing around with transparent ssl proxying, I learned that > > Chrom

Re: [squid-users] The SSL certificate database is corrupted. Please rebuild

2015-02-06 Thread Ortega Gustavo Martin
Any comments? Thanks -Mensaje original- De: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] En nombre de Ortega Gustavo Martin Enviado el: miércoles, 04 de febrero de 2015 03:05 p.m. Para: squid-users@lists.squid-cache.org Asunto: [squid-users] The SSL certificate database

Re: [squid-users] Blocking Chrome and QUIC

2015-02-06 Thread Antony Stone
On Friday 06 February 2015 at 22:54:54 (EU time), Luis Miguel Silva wrote: > As I started playing around with transparent ssl proxying, I learned that > Chrome uses an alternate communication (UDP based) protocol called QUIC. I'd never heard of QUIC, and http://en.wikipedia.org/wiki/QUIC doesn't

[squid-users] Blocking Chrome and QUIC

2015-02-06 Thread Luis Miguel Silva
Dear all, This isn't entirely a squid question but more like a "transparent proxying" question (which I'm hoping you guys will be able to help me with)... As I started playing around with transparent ssl proxying, I learned that Chrome uses an alternate communication (UDP based) protocol called Q

Re: [squid-users] Correct order of acl rules?

2015-02-06 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 https://regex101.com/ is great resource.. Hm? 07.02.2015 2:06, Walter H. пишет: > On 06.02.2015 20:38, Amos Jeffries wrote: >> On 7/02/2015 8:27 a.m., Amos Jeffries wrote: >>> On 7/02/2015 8:19 a.m., Walter H. wrote: the file blockurls-re

Re: [squid-users] Correct order of acl rules?

2015-02-06 Thread Walter H.
On 06.02.2015 20:38, Amos Jeffries wrote: On 7/02/2015 8:27 a.m., Amos Jeffries wrote: On 7/02/2015 8:19 a.m., Walter H. wrote: the file blockurls-regex-acl.squid contains e.g. ^http:\/\/s[0-9]\.domain\.tld\/ the file allowurls-regex-acl.squid contains e.g. ^http:\/\/s[1-2]+\.domain\.tld\/[a-z

Re: [squid-users] Correct order of acl rules?

2015-02-06 Thread Amos Jeffries
On 7/02/2015 8:27 a.m., Amos Jeffries wrote: > On 7/02/2015 8:19 a.m., Walter H. wrote: >> the file blockurls-regex-acl.squid >> contains e.g. >> ^http:\/\/s[0-9]\.domain\.tld\/ >> >> the file allowurls-regex-acl.squid >> contains e.g. >> ^http:\/\/s[1-2]+\.domain\.tld\/[a-z0-9\_\-\.]+\.gif >> >> t

Re: [squid-users] Correct order of acl rules?

2015-02-06 Thread Amos Jeffries
On 7/02/2015 8:19 a.m., Walter H. wrote: > the file blockurls-regex-acl.squid > contains e.g. > ^http:\/\/s[0-9]\.domain\.tld\/ > > the file allowurls-regex-acl.squid > contains e.g. > ^http:\/\/s[1-2]+\.domain\.tld\/[a-z0-9\_\-\.]+\.gif > > the purpose should be, that only gif images of root dir

[squid-users] Correct order of acl rules?

2015-02-06 Thread Walter H.
Hello, my squid.conf contains the following lines - in this order ... acl allow_urlpaths urlpath_regex -i "/etc/squid/allowurlpaths-regex-acl.squid" acl block_urlpaths urlpath_regex -i "/etc/squid/blockurlpaths-regex-acl.squid" acl allow_urls url_regex -i "/etc/squid/allowurls-regex-acl.squid

Re: [squid-users] Tunnelled devices losing access to squid

2015-02-06 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I have one ;) http://i.imgur.com/VaPu6pq.png 06.02.2015 21:15, Amos Jeffries пишет: > On 7/02/2015 3:37 a.m., Raymond Norton wrote: >> I have the following scenario: >> >> >> >> We have a number of Verizon Aps configured to run associated devices

Re: [squid-users] Tunnelled devices losing access to squid

2015-02-06 Thread Amos Jeffries
On 7/02/2015 3:37 a.m., Raymond Norton wrote: > I have the following scenario: > > > > We have a number of Verizon Aps configured to run associated devices > through a GRE > tunnel between Verizon and our network, using a 10.99.0.0/16 subnet which > is NATed to a public address. Policy based ro

[squid-users] Tunnelled devices losing access to squid

2015-02-06 Thread Raymond Norton
I have the following scenario: We have a number of Verizon Aps configured to run associated devices through a GRE tunnel between Verizon and our network, using a 10.99.0.0/16 subnet which is NATed to a public address. Policy based routing sends all port 80 and 443 traffic originating from 10.

Re: [squid-users] Problems with squid 3.5.1

2015-02-06 Thread Stefano Ansaloni
Tested with icap disabled: the issue still there. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Problems with squid 3.5.1

2015-02-06 Thread FredB
> I'm using icap (for clamav). > Please, can you make a try without ? Regards, Fred http://numsys.eu http://e2guardian.org ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Problems with squid 3.5.1

2015-02-06 Thread Stefano Ansaloni
I'm not using authentication (the proxy doesn't require any login/password). I'm using icap (for clamav). ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Custom requirement from Squid proxy logs

2015-02-06 Thread Amos Jeffries
On 6/02/2015 10:23 a.m., l...@technomicssolutions.com wrote: > Actually, I have multiple websites and some using Google Analytics and some > uses Adobe. That is why I concentrated on SquidProxy as it logs corresponding > entries for all types of analytics. Just to make a analytics independent, ca

Re: [squid-users] SSL-bump certificate issues (mostly on Chrome, when accessing Google websites)

2015-02-06 Thread Amos Jeffries
On 6/02/2015 9:32 p.m., Amos Jeffries wrote: > On 6/02/2015 6:10 p.m., Luis Miguel Silva wrote: >> Dear all, >> >> I recently compiled squid-3.4.9 with ssl-bump support and, although it is >> working for the most part, I'm having some issues accessing some websites. >> >> The behavior is REALLY wei

Re: [squid-users] derive HTTP/HTTPS upload traffic to a secondary interface.

2015-02-06 Thread Amos Jeffries
On 6/02/2015 8:59 p.m., Josep Borrell wrote: > Hi, > > I have a squid box with two interfaces. One ADSL 20/1Mb and one SHDSL 4/4Mb. > It is a school and they are working with Google Apps for Education. > They do a lot of uploading and when using the ADSL, it collapses promptly. > Is possible to de

Re: [squid-users] Problems with squid 3.5.1

2015-02-06 Thread FredB
I forgot, are you using ICAP protocol (AV) Regards, Fred http://numsys.eu http://e2guardian.org ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] login expired

2015-02-06 Thread FredB
> 2) Due to the above problem I configured an access control via > htpasswd > using basic_ncsa_auth. > In this case, after the required credentials and the correct > insertion squid > gives me access to the internet. > Now the question is: can I have the credentials expire after a > certain time?

Re: [squid-users] login expired

2015-02-06 Thread Amos Jeffries
On 6/02/2015 11:43 a.m., Ignazio Raia wrote: > This post has NOT been accepted by the mailing list yet. > > Hello everyone, > I installed a Squid proxy server and it works perfectly. > I have two questions to ask about the authentication process. > 1) I configured the basic_db_auth, but the br

Re: [squid-users] Problems with squid 3.5.1

2015-02-06 Thread FredB
> > > @FrebB: > I really don't know what identification helper is (I'm not a squid > guru, please explain or drop a link). > I'm on firefox 31.4.0esr (slackware linux 13.1). > I mean Authentication from Squid, a pop-up with account (login and password) > @Eliezer: > As FredB said, the issue

Re: [squid-users] SSL-bump certificate issues (mostly on Chrome, when accessing Google websites)

2015-02-06 Thread Amos Jeffries
On 6/02/2015 6:10 p.m., Luis Miguel Silva wrote: > Dear all, > > I recently compiled squid-3.4.9 with ssl-bump support and, although it is > working for the most part, I'm having some issues accessing some websites. > > The behavior is REALLY weird so I'm going to try and describe it the best I >

Re: [squid-users] R: Blocking hotshield vpn

2015-02-06 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm not using linux. :) Layer 7 filtering requires application-level proxy or DPI. We talking about filtering, isn't it? On Cisco this task requires a bit investigation (sniffing and tcpiputils.com) and simple add some ACL's: ip access-list extend

[squid-users] R: Blocking hotshield vpn

2015-02-06 Thread Job
Hello Yuri! >>Only before Squid - using Cisco or something like. >>Either Cisco acl's, or NBAR protocol discovery. is there a way to implement a sort of layer 7 for hotshield vpn (or ultrasurf) working on Linux? Thank you again! Francesco ___ squid-us

Re: [squid-users] SSL-bump certificate issues (mostly on Chrome, when accessing Google websites)

2015-02-06 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 First. Where is you cache can found openssl public CA certs? To validate connection from cache to server Squid must see root authority CA's. I.e (from my configuration. Note: all google services bumped and works perfectly): https_port 3129 intercep