Re: [squid-users] Server-first SSL bump in Squid 3.5.x

2015-03-18 Thread Dan Charlesworth
Right, I see. So I’ve got a special ACL to always allow that Test URL for the sake of our certcheck … but it’s doing it by dstdomain. So if there are rules to say “always redirect to the certificate splash page if you can’t connect to the URL”, then it will never pass it because the initial CON

Re: [squid-users] Server-first SSL bump in Squid 3.5.x

2015-03-18 Thread Amos Jeffries
On 19/03/2015 6:36 p.m., Dan Charlesworth wrote: > Hey y’all > > Finally got 3.5.2 running. I was under the impression that using server-first > SSL bump would still be compatible, despite all the Peek & Splice changes, > but apparently not. Hopefully someone can explain what might be going wron

[squid-users] Server-first SSL bump in Squid 3.5.x

2015-03-18 Thread Dan Charlesworth
Hey y’all Finally got 3.5.2 running. I was under the impression that using server-first SSL bump would still be compatible, despite all the Peek & Splice changes, but apparently not. Hopefully someone can explain what might be going wrong here ... Using the same SSL Bump config that we used for

Re: [squid-users] i want to block images with size more than 40 KB

2015-03-18 Thread Amos Jeffries
On 19/03/2015 1:35 p.m., snakeeyes wrote: > Thank you so much Amos and leonardo > Can you provide me any sample config to start with ? > I feel it so difficult to me . > I had a look @ ""ACL elements"" section in thw wiki about matching size of > image but didn’t find clear thing. > So again I fe

Re: [squid-users] Squid 3.5.2 will only start if cache directory is empty

2015-03-18 Thread Amos Jeffries
On 19/03/2015 11:29 a.m., Stanford Prescott wrote: > I posted this message to the list a few days ago but haven't received any > responses yet. I am hoping someone might be able to provide some insight on > what is going on. > > I have been trying to get Squid 3.5.2 to work with the Smoothwall Exp

Re: [squid-users] Squid + AD + Kerb auth question

2015-03-18 Thread Markus Moeller
Hi Joao Then you hit http_access allow localnet and not http_access allow ad_auth Comment out the following line in squid.conf http_access allow localnet and try again. Markus From: Joao Paulo Monticelli Gaspar Sent: Wednesday, March 18, 2015 11:38 PM To: Markus Moeller Subject: Re: [

Re: [squid-users] Squid + AD + Kerb auth question

2015-03-18 Thread Markus Moeller
Hi, From which network do you surf ? From localnet ? Can you send sample log entries ? Markus From: Joao Paulo Monticelli Gaspar Sent: Wednesday, March 18, 2015 9:18 PM To: Markus Moeller Subject: Re: [squid-users] Squid + AD + Kerb auth question squid.conf visible_hostname proxy.joz

[squid-users] Squid 3.5.2 will only start if cache directory is empty

2015-03-18 Thread Stanford Prescott
I posted this message to the list a few days ago but haven't received any responses yet. I am hoping someone might be able to provide some insight on what is going on. I have been trying to get Squid 3.5.2 to work with the Smoothwall Express 3.1 Linux firewall distribution. Specifically, I have mo

Re: [squid-users] Squid + AD + Kerb auth question

2015-03-18 Thread Markus Moeller
How does the config file look like ? Markus "Joao Paulo Monticelli Gaspar" wrote in message news:CAFjXhx=idbdxeqxbzy56tr5m3fztasu2tqgwlclydi_s-s3...@mail.gmail.com... Hey people I have a doubt and couldn't find the answer anywhere yet, I'm using SQUID integrate to a W2K8 AD server with ker

Re: [squid-users] v3.5.x RPM for CentOS 6

2015-03-18 Thread Eliezer Croitoru
Hey Dan, I will put more efforts into it and will try to publish 3.4.12 and 3.5.2 for CentOS 6 this week. About the pinger issue, Indeed there is one.. the suid is not set inside the spec files and I will add it later while I am considering patching the squid.conf defaults from pinger on to

Re: [squid-users] v3.5.x RPM for CentOS 6

2015-03-18 Thread Eliezer Croitoru
Hey List, Sorry but it takes time(for me) to test squid 3.5. I have built a testing beta of 3.5 for CentOS 7 but yet to publish it officially. Since you have asked, then the main issue is that RH RPM auto building tools helps to find dependencies and there for most of the helpers need\requir

Re: [squid-users] Increase number of ext_ldap_group_acl processes

2015-03-18 Thread Rich549
Thanks! I've added the children-startup=15 to my config but it seems to be ignoring it. An excerpt of my config is: external_acl_type internet_domain_group children-startup=15 %LOGIN /usr/lib/squid3/ext_ldap_group_acl -R -P -b (this then goes on to provide details of AD structure etc). Have I mis

[squid-users] Squid + AD + Kerb auth question

2015-03-18 Thread Joao Paulo Monticelli Gaspar
Hey people I have a doubt and couldn't find the answer anywhere yet, I'm using SQUID integrate to a W2K8 AD server with kerb auth, and everything works fine, the main reason of chosing this setup is for the SingleSignOn capabilities of the configuration, but on my ACCESS.LOG I cant see the users t

Re: [squid-users] i want to block images with size more than 40 KB

2015-03-18 Thread snakeeyes
Thank you so much Amos and leonardo Can you provide me any sample config to start with ? I feel it so difficult to me . I had a look @ ""ACL elements"" section in thw wiki about matching size of image but didn’t find clear thing. So again I feel that I will create access list that match size > th

Re: [squid-users] Increase number of ext_ldap_group_acl processes

2015-03-18 Thread Amos Jeffries
On 19/03/2015 3:36 a.m., Rich549 wrote: > Just a quick question, if I want to increase the number of ext_ldap_group_acl > processes that start with Squid then what would I need to add into my > config? > > My reason for asking is because I keep seeing this in the cache.log: > > 2015/03/18 12:25:5

[squid-users] Increase number of ext_ldap_group_acl processes

2015-03-18 Thread Rich549
Just a quick question, if I want to increase the number of ext_ldap_group_acl processes that start with Squid then what would I need to add into my config? My reason for asking is because I keep seeing this in the cache.log: 2015/03/18 12:25:58| WARNING: external ACL 'internet_domain_group' queue

Re: [squid-users] i want to block images with size more than 40 KB

2015-03-18 Thread Leonardo Rodrigues
On 18/03/15 08:06, Amos Jeffries wrote: On 19/03/2015 5:57 a.m., snakeeyes wrote: I need help in blocking images that has size less than 40 KB Use the Squid provided access controls to manage access to things. You should know that you c

Re: [squid-users] squid SMP and SNMP

2015-03-18 Thread Amos Jeffries
On 19/03/2015 2:50 a.m., Eugene M. Zheganin wrote: > Hi. > > On 18.03.2015 16:04, Amos Jeffries wrote: >> >> SNMP is on the list of SMP-aware features. >> >> The worker receiving the SNMP request will contact other workers to >> fetch the data for producing the SNMP response. This may take some ti

Re: [squid-users] squid SMP and SNMP

2015-03-18 Thread Eugene M. Zheganin
Hi. On 18.03.2015 16:04, Amos Jeffries wrote: > > SNMP is on the list of SMP-aware features. > > The worker receiving the SNMP request will contact other workers to > fetch the data for producing the SNMP response. This may take some time. > Yeah, but it seems like it doesn't happen. Plus, I'm get

Re: [squid-users] (about external_acl_type problem ) two people can't login and access internet together

2015-03-18 Thread johnzeng
Hello Amos: Thanks again , and i tested for the part and sloved the problem just now . Have a good day with you . Best Regards ___ squid-users mailing list squid-users@lists.squid-cache.

Re: [squid-users] v3.5.x RPM for CentOS 6

2015-03-18 Thread Amos Jeffries
On 18/03/2015 7:03 p.m., Dan Charlesworth wrote: > Hi Donny > > I gathered that much. I guess what I specifically am asking for is: > > - Which CentOS 6 package includes the missing perl modules? perl ? The helpers that require it are scripts, not compiled binaries. So they should run with any

Re: [squid-users] i want to block images with size more than 40 KB

2015-03-18 Thread Amos Jeffries
On 19/03/2015 5:57 a.m., snakeeyes wrote: > Hi Guys > > I need help in blocking images that has size less than 40 KB > > Any guidance or help will be appreciated > > Use the Squid provided access controls to manage access to things. Amos __

Re: [squid-users] squid SMP and SNMP

2015-03-18 Thread Amos Jeffries
On 18/03/2015 9:50 p.m., Eugene M. Zheganin wrote: > Hi. > > I'm gathering statistics from squid using SNMP. When I use single > process everything is fine, but when it comes to multiple workers - SNMP > doesn't work - I got timeout when trying to read data with snmpwalk. > > I'm using the follow

Re: [squid-users] (about external_acl_type problem ) two people can't login and access internet together

2015-03-18 Thread Amos Jeffries
On 18/03/2015 10:04 p.m., johnzeng wrote: > > Hello All > > > if possible ,please give me some advisement , thanks > > > > Whether ttl=50 (value) is too low , Maybe i will update ttl value to > ttl=3600 cache=1048576 . Whatever. You know better than anyone else about that decision

[squid-users] (about external_acl_type problem ) two people can't login and access internet together

2015-03-18 Thread johnzeng
Hello All if possible ,please give me some advisement , thanks Whether ttl=50 (value) is too low , Maybe i will update ttl value to ttl=3600 cache=1048576 . i have a question still , Whether cached results for external_acl is reponse from helper program ? for example : if FORMAT

Re: [squid-users] Random SSL bump DB corruption

2015-03-18 Thread Yuri Voinov
As I can research, this problem produces one of Apple service under HTTPS. When client query something like iTunes, squid gets strange certificate which is corrupts DB. I found no solution at this time. Just stop squid and cleanup SSL db. WBR, Yuri 18.03.15 11:21, Dan Charlesworth пишет: B

[squid-users] squid SMP and SNMP

2015-03-18 Thread Eugene M. Zheganin
Hi. I'm gathering statistics from squid using SNMP. When I use single process everything is fine, but when it comes to multiple workers - SNMP doesn't work - I got timeout when trying to read data with snmpwalk. I'm using the following tweak: snmp_port 340${process_number} both workers bind on

[squid-users] i want to block images with size more than 40 KB

2015-03-18 Thread snakeeyes
Hi Guys I need help in blocking images that has size less than 40 KB Any guidance or help will be appreciated regards ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users