Re: [squid-users] Best malware/phishing/virus list ?

2015-05-07 Thread Amos Jeffries
On 8/05/2015 6:13 p.m., Olivier CALVANO wrote: > Are you sure ? ;) > > > malware/phishing/virus are sent by mail sur, but it's include a URL > and we want block on squid this type of URL > Yes. I'm sure. * Not letting the MTA get the spam in the first place improves filter performance immensel

Re: [squid-users] squid 3.5.4 dies

2015-05-07 Thread Amos Jeffries
On 8/05/2015 5:23 p.m., Dmitry Melekhov wrote: > Hello! > > Several days ago I updated my self-compiled squid 3.4 to 3.5.4, > server is ubuntu 12.04 x86-64. > All I see in logs is > 2015/05/08 09:13:47 kid1| local=192.168.42.130:32785 > remote=74.125.205.132:443 FD 808 flags=1: read/write failure:

Re: [squid-users] Different replacement policy for different filenames

2015-05-07 Thread Amos Jeffries
On 8/05/2015 1:54 a.m., Veiko Kukk wrote: > > On 07/05/15 15:16, Amos Jeffries wrote: >> On 7/05/2015 11:16 p.m., Veiko Kukk wrote: >>> Is it possible to sort into cache_dir's based on filename (some regex >>> will do)? The result I'm trying to achieve is that certain files which >>> names are kno

[squid-users] squid 3.5.4 dies

2015-05-07 Thread Dmitry Melekhov
Hello! Several days ago I updated my self-compiled squid 3.4 to 3.5.4, server is ubuntu 12.04 x86-64. All I see in logs is 2015/05/08 09:13:47 kid1| local=192.168.42.130:32785 remote=74.125.205.132:443 FD 808 flags=1: read/write failure: (32) Broken pipe 2015/05/08 09:14:55 kid1| Set Current D

Re: [squid-users] Youtube redirection loop?

2015-05-07 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Feature with acl will be useful. Not only YT uses this redirection scheme. 08.05.15 3:25, HackXBack пишет: > you are right, but this patch still work with me. > i dont know if we can find better solution for this like you said by acl > > > > -- >

Re: [squid-users] Youtube redirection loop?

2015-05-07 Thread HackXBack
you are right, but this patch still work with me. i dont know if we can find better solution for this like you said by acl -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Youtube-redirection-loop-tp4671084p4671179.html Sent from the Squid - Users mailing list

Re: [squid-users] Youtube redirection loop?

2015-05-07 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I think, this loop is changed in YT during last year. HTML5 was winished since 2015. YT URL scheme was chagnged this year. So, text/html is not valid for prevention looping. I see text/plain redirector in YT exchange. 08.05.15 2:59, HackXBack пиш

Re: [squid-users] Youtube redirection loop?

2015-05-07 Thread HackXBack
for me this patch work, but did you find this simple solution ? btw this loop is not new i use this patch more than 1 year -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Youtube-redirection-loop-tp4671084p4671177.html Sent from the Squid - Users mailing lis

Re: [squid-users] Best solution for content filtering using squid?

2015-05-07 Thread Rafael Akchurin
Hello Bob, If you do not mind taking a look at third party web filtering products integrating with Squid using for example ICAP them I would humbly recommend taking a look at qlproxy (quintolabs.com). It is a commercial product though not sure if this fits your expectations. Best regards, Raf

Re: [squid-users] Best solution for content filtering using squid?

2015-05-07 Thread Marcus Kool
On 05/07/2015 04:49 PM, Bob Cochran wrote: On 05/07/2015 02:57 PM, Marcus Kool wrote: did you look at ufdbGuard? Thank you. I did look at it briefly and moved on when I saw that a paid license was required if a commercial product made use of it. Perhaps I'm wrong about this? I would lik

Re: [squid-users] Best solution for content filtering using squid?

2015-05-07 Thread Bob Cochran
On 05/07/2015 02:57 PM, Marcus Kool wrote: did you look at ufdbGuard? Thank you. I did look at it briefly and moved on when I saw that a paid license was required if a commercial product made use of it. Perhaps I'm wrong about this? We're looking for something that can be extended beyond w

Re: [squid-users] Best solution for content filtering using squid?

2015-05-07 Thread Marcus Kool
Hi, What is it that makes you want to go to a better solution ? did you look at ufdbGuard? Marcus PS: Beware! I am biased since I wrote ufdbGuard. On 05/07/2015 03:52 PM, Bob Cochran wrote: Hi, What is the best solution with squid for content filtering using lists of domains that should b

Re: [squid-users] Best solution for content filtering using squid?

2015-05-07 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 ufdbguard 08.05.15 0:52, Bob Cochran пишет: > Hi, > > What is the best solution with squid for content filtering using lists of domains that should be blocked? > > We have been using squidGuard, and it works. However, we would like to know if the

[squid-users] Best solution for content filtering using squid?

2015-05-07 Thread Bob Cochran
Hi, What is the best solution with squid for content filtering using lists of domains that should be blocked? We have been using squidGuard, and it works. However, we would like to know if there is a better solution out there. We also tried using squid as the content filter (acl ban lists)

Re: [squid-users] squid 3.5.3 can't get peek and splice to not bump certain sites

2015-05-07 Thread Stanford Prescott
I've tried using the new server_name acl you provided an example of and Jason's suggestions for getting the external acl and bumphelper script working but It only results in everything still being bumped. The website I'm trying to use as a test for non-bumping, wellsfargo.com, still gets bumped alo

Re: [squid-users] Youtube redirection loop?

2015-05-07 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 For 3.4.x series need patch. Correct patch. This copy-n-pasted is broken. Also, you have forgotten one thing: YT redirector has text/plain mime type, not text/html. Just trace your YT session and check every exchange between client and server. In

Re: [squid-users] Different replacement policy for different filenames

2015-05-07 Thread Veiko Kukk
On 07/05/15 15:16, Amos Jeffries wrote: On 7/05/2015 11:16 p.m., Veiko Kukk wrote: Is it possible to sort into cache_dir's based on filename (some regex will do)? The result I'm trying to achieve is that certain files which names are known, but size varies (and overlaps with other files) are re

Re: [squid-users] Client IP spoofing via squid proxy

2015-05-07 Thread Amos Jeffries
On 7/05/2015 6:09 p.m., Ambadas Hibare wrote: > HI, > > Client IP: 172.16.5.110 > Client Mac: 00:23:7D:E8:AC:C4 > > Squid Box: > > eth0 IP: 172.16.5.102 > eth0 Mac: 18:A9:05:3C:12:E4 > > eth1 IP: 10.0.0.102 > eth1 Mac: 18:A9:05:3C:12:E6 > >> "Your "ip route" rules use eth1, but your rp_filter

Re: [squid-users] Different replacement policy for different filenames

2015-05-07 Thread Amos Jeffries
On 7/05/2015 11:16 p.m., Veiko Kukk wrote: > Hi > > I'd like to apply different replacement policy for different filenames. > I have searched through the documentation and found that replacement > policy can be defined only per cache_dir[s] and squid can sort into > different cache_dir's based on

[squid-users] Different replacement policy for different filenames

2015-05-07 Thread Veiko Kukk
Hi I'd like to apply different replacement policy for different filenames. I have searched through the documentation and found that replacement policy can be defined only per cache_dir[s] and squid can sort into different cache_dir's based on file size, but not based on file name. Maybe I hav