[squid-users] Authenication denies access to ports

2015-02-23 Thread zanettiza
Hi Everyone,I've searched and search but have not found an answer to my question.I'm running CentOS 7 and Squid 3.3.4. When I insert "http_access allow Safe_ports" AFTER "http_access allow authenticated_users" I have no access to ports listed under my Safe_ports ACL, however when I put it before th

Re: [squid-users] assertion failed: client_side.cc:1515: "connIsUsable(http->getConn())

2015-02-23 Thread dan
This is kind of off-topic but on one of our deployments this crash is now consistently deadlocking squid whenever it occurs rather than just ending the process. Meaning that is can’t be restarted by any means except kill -9, which obviously a huge disruption to hundreds of clients and incredibly

Re: [squid-users] assertion failed: client_side.h:364: "sslServerBump == srvBump"

2015-02-23 Thread Private Sender
Thanks for the help! In file client_side.h: inline void setServerBump(Ssl::ServerBump *srvBump) { if (!sslServerBump) sslServerBump = srvBump; else assert(sslServerBump == srvBump); } Changed to: inline void setServerBump(Ssl::ServerBump *srvB

Re: [squid-users] again i lost my cache with upgrading for 3.5.2

2015-02-23 Thread Eliezer Croitoru
On 24/02/2015 02:16, HackXBack wrote: i did that with version 3.5.1 now wen upgrade again for 3.5.2 my cache damaged again !! i just want to know how this version is stable !! its full of bugs !! Hey HackXBack, Some would imagine that squid is perfect and if you will look at the Bugzilla you

Re: [squid-users] Need tips in order to force youtube in HTTP only

2015-02-23 Thread Eliezer Croitoru
On 24/02/2015 00:53, HackXBack wrote: there is a way without using ssl_bump without forwarding https but this will work with browsers and not with youtube mobile app. its in header replace Hey HackXBack, I am not to familiar with all of the mobile apps but if the client needs filtering he nee

[squid-users] again i lost my cache with upgrading for 3.5.2

2015-02-23 Thread HackXBack
i did that with version 3.5.1 now wen upgrade again for 3.5.2 my cache damaged again !! i just want to know how this version is stable !! its full of bugs !! cache.log = 2015/02/23 19:20:51 kid1| Could not parse headers from on disk object 2015/02/23 19:20:51 kid1| BUG 3279: HTTP reply without Da

Re: [squid-users] Need tips in order to force youtube in HTTP only

2015-02-23 Thread HackXBack
there is a way without using ssl_bump without forwarding https but this will work with browsers and not with youtube mobile app. its in header replace -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Need-tips-in-order-to-force-youtube-in-HTTP-only-tp4670014p4

[squid-users] request_body_max_size on transparent proxy

2015-02-23 Thread Mike Mitchell
I'm trying to POST large files (>1MB) through a squid 3.5.2 proxy set up to intercept connections. The client is including an 'Expect: 100-continue' header, and sends all headers in a single network packet. POSTs of content smaller than 1MB go through, but larger POSTs do not. The client's TCP

[squid-users] Building 3.5.1 without libcom_err?

2015-02-23 Thread Mike Mitchell
Is there a way to build 3.5.1 without libcom_err? On my old Redhat system (2.6.18-128.1.1.el5) I get compilation failures unless I remove all references to libcom_err. Here's a snippet from the config log: configure:24277: checking for krb5.h configure:24277: result: yes configure:24277: checkin

[squid-users] tlsv1 alert errors

2015-02-23 Thread Alan Palmer
So I got squid to intercept http and https traffic, but I get the following error on any https access 2015/02/23 12:50:15 kid1| clientNegotiateSSL: Error negotiating SSL connection o n FD 28: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca (1/0 ) This of course leads to al

Re: [squid-users] ACL Check for Established Connections

2015-02-23 Thread Eliezer Croitoru
Hey Deniz, Squid is an HTTP proxy and is built upon the idea of a "request" and a "response". Currently squid code allows and do couple things as the request starts. The only option I can think of that can "do" what you need is ICAP or ECAP which can inspect the traffic on the fly when it flow

[squid-users] ACL Check for Established Connections

2015-02-23 Thread Deniz Eren
Hi, I have an authentication system that authenticates a connection after 10-20 packet flows and I want to integrate this authentication system with squid using external_acl functionality. However when I inspected squid, I realized that it asks external_acl tool only when connection is being estab