Re: [squid-users] How to cache Chrome Installer ?

2015-05-18 Thread Amos Jeffries
On 19/05/2015 8:58 a.m., Stakres wrote: > Hi All, > > Has someone of you already cached this object ? > *http://r8---sn-n4g-jqbe.gvt1.com/edgedl/chrome/win/776B03BEAFB2810D/42.0.2311.152_chrome_installer.exe* > I get a 15min cacheable 302 response from that. > I know this is a dynamic object p

[squid-users] Squid 3.5: internal-static icons on ftp:// requests

2015-05-18 Thread Andre Albsmeier
When browsing e.g. ftp://ftp.mozilla.org/pub/thunderbird/releases/31.5.0/win32/en-GB/ I miss the internally generated icons and receive an error message in the logs: 2015/05/17 20:03:44 kid1| internalStart: unknown request: GET /squid-internal-static/icons/silk/arrow_up.png HTTP/1.1 Host: ftp.mo

Re: [squid-users] Squid 3.3 to 3.5 url_rewrite_program changes

2015-05-18 Thread Amos Jeffries
On 19/05/2015 12:33 p.m., PSA wrote: > I tried to upgrade from squid 3.2.x to 3.5.x and found my url rewrite script > no longer works. > After trial and error, I found the latest version it works in is the latest > 3.3.x so I've upgraded to this for now. > > Here is my url_rewrite_program: htt

[squid-users] Squid 3.3 to 3.5 url_rewrite_program changes

2015-05-18 Thread PSA4444
I tried to upgrade from squid 3.2.x to 3.5.x and found my url rewrite script no longer works. After trial and error, I found the latest version it works in is the latest 3.3.x so I've upgraded to this for now. Here is my url_rewrite_program: http://pastebin.com/uaYUCkyY I haven't been able to fig

Re: [squid-users] How to cache Chrome Installer ?

2015-05-18 Thread Stakres
Hi Yuri, Do you get a TCP_HIT with your rules ? From my side, i get this: *X-Cache: MISS* from blablabla... Bye Fred -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/How-to-cache-Chrome-Installer-tp4671271p4671273.html Sent from the Squid - Users mailing lis

Re: [squid-users] How to cache Chrome Installer ?

2015-05-18 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 # Adobe/Java and other updates acl adobe_java_updates urlpath_regex "/usr/local/squid/etc/urlregex.updates" range_offset_limit none adobe_java_updates store_id_access allow adobe_java_updates store_id_program /usr/local/squid/libexec/storeid_file

[squid-users] How to cache Chrome Installer ?

2015-05-18 Thread Stakres
Hi All, Has someone of you already cached this object ? *http://r8---sn-n4g-jqbe.gvt1.com/edgedl/chrome/win/776B03BEAFB2810D/42.0.2311.152_chrome_installer.exe* I know this is a dynamic object provided by Google, we tried with the StoreID by not yet able to get a TCP_HIT from Squid. If any idea,

Re: [squid-users] about squid trouble

2015-05-18 Thread Antony Stone
On Monday 18 May 2015 at 21:05:35 (EU time), Amaury Viera Hernández wrote: > I work at the University of Computer Sciences at Havana, Cuba (6000 > users aproximately). We surf using squid, but in many ocassions when we > are surfing I get an error page of exceed quota telling me that the > cuota o

[squid-users] about squid trouble

2015-05-18 Thread Amaury Viera Hernández
Hi everyone: I recently subscribe to this list and I'm going to introduce myself briefly. I work at the University of Computer Sciences at Havana, Cuba (6000 users aproximately). We surf using squid, but in many ocassions when we are surfing I get an error page of exceed quota telling me that

Re: [squid-users] block inappropriate images of google

2015-05-18 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Also note: Most browser's anti-proxy plugins exists for Android/Apple. 19.05.15 0:25, Dwayne Hottinger пишет: > There is a way to use an internal dns server to redirect all google > searches to their safe search google. This does help with inapp

Re: [squid-users] block inappropriate images of google

2015-05-18 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Transparent DNS interception is more reliable technics, but requires some advanced things. Including continious support. And also this will not proof against browser anti-proxy plugins. BTW, gents, we are talking about advanced internet users - H

Re: [squid-users] block inappropriate images of google

2015-05-18 Thread Dwayne Hottinger
There is a way to use an internal dns server to redirect all google searches to their safe search google. This does help with inappropriate images and searches that maybe quesionable. Just 'google' dns safesearch. You should get a few hits. Im currently doing this and it works very well. On Mon

Re: [squid-users] block inappropriate images of google

2015-05-18 Thread Rafael Akchurin
Hello Andres, N.B. Please take my answer with a huge grain of salt. The google images search returns image results (thumbnails) as inline base 64 encoded images in the CSS. Selectively blocking them with any URL redirector will not work. It is possible to completely block google images but I a

Re: [squid-users] block inappropriate images of google

2015-05-18 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 You need to use solution which is exists over 10 years. url_rewrite_program. With good blacklist good redirector can be block almost all unwanted content. Three most known programs: squidgiard DansGuardian ufdbguard and more. 18.05.15 23:49, A

[squid-users] block inappropriate images of google

2015-05-18 Thread Andres Granados
hello!I need help on how to block pornographic images of google, I was trying different options and still do not succeed, try: http_reply_access with request_header_add, and even with a configuration dns, I think is to request_header_add the best, though not it has worked for me, I hope your hel

[squid-users] block inappropriate images of google

2015-05-18 Thread Andres Granados
hello!I need help on how to block pornographic images of google, I was trying different options and still do not succeed, try: http_reply_access with request_header_add, and even with a configuration dns, I think is to request_header_add the best, though not it has worked for me, I hope your hel

Re: [squid-users] IPv6 and syntax?

2015-05-18 Thread Amos Jeffries
On 19/05/2015 3:20 a.m., Walter H. wrote: > On 18.05.2015 13:25, Amos Jeffries wrote: >>> I would have done it this way: >>> >>> acl block_whole_network dst_as 4837 >>> deny_info errorpage block_whole_network >>> http_access deny block_whole_network >>> >>> but this crashes squid ... >>> >> Ouch. I

Re: [squid-users] IPv6 and syntax?

2015-05-18 Thread Walter H.
On 18.05.2015 13:25, Amos Jeffries wrote: I would have done it this way: acl block_whole_network dst_as 4837 deny_info errorpage block_whole_network http_access deny block_whole_network but this crashes squid ... Ouch. Is that the crash? ye

Re: [squid-users] squid does not send cached object to an icap-server

2015-05-18 Thread Yuri Voinov
My setup never send infected file against clean cached version. If you mean really dynamic URL - this is another problem, which can't related with I-CAP and AV scanning. In general, in the past I've checked my cache with AV offline every week. But never seen infected files. Also with old vers

Re: [squid-users] squid does not send cached object to an icap-server

2015-05-18 Thread Stefan Kuegler
Am 18.05.2015 um 14:01 schrieb Yuri Voinov: http://squidclamav.darold.net/config.html Trust your cache (obsolete/unused in v6.x) One of the main configuration directive for performance improvement is 'trust_cache'. SquidClamav detect if the file to download is already stored in Squid

Re: [squid-users] Squid 3.4.10 and sslcrtd

2015-05-18 Thread Amos Jeffries
On 18/05/2015 11:23 p.m., Veiko Kukk wrote: > Hi > > I'd like to know if I understand Squid documentation properly. > I have following http_port and sslbump configuration: > > http_port 127.0.0.1:3128 ssl-bump generate-host-certificates=off > cert=/var/spool/squid/ssl_cert/squid_ca.pem > ssl_bump

Re: [squid-users] Saving memory cache to disk on reboot?

2015-05-18 Thread Leonardo Rodrigues
On 18/05/15 08:55, Yan Seiner wrote: The title says it all - is it possible to save the memory cache to disk on reboot? I reboot my systems weekly and I wonder if this would be any advantage. Initially, let's say that a cache can ALWAYS be lost. Sometimes it may not be desirable, but los

Re: [squid-users] squid does not send cached object to an icap-server

2015-05-18 Thread Yuri Voinov
http://squidclamav.darold.net/config.html Trust your cache (obsolete/unused in v6.x) One of the main configuration directive for performance improvement is 'trust_cache'. SquidClamav detect if the file to download is already stored in Squid cache. If you activate 'trust_cache', SquidCl

[squid-users] Saving memory cache to disk on reboot?

2015-05-18 Thread Yan Seiner
The title says it all - is it possible to save the memory cache to disk on reboot? I reboot my systems weekly and I wonder if this would be any advantage. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listi

Re: [squid-users] squid does not send cached object to an icap-server

2015-05-18 Thread Amos Jeffries
On 18/05/2015 11:17 p.m., Stefan Kuegler wrote: > Hi Yuri. >> >> http://i.imgur.com/mW7gNwD.png >> >> http://squidclamav.darold.net/config.html >> >> This is for squidclamav (I use it and have no problems with malware). > > I just installed squidclamav - but the behaviour is always the same. An >

Re: [squid-users] IPv6 and syntax?

2015-05-18 Thread Amos Jeffries
On 16/05/2015 11:09 p.m., Walter H. wrote: > On 16.05.2015 10:13, Amos Jeffries wrote: >> On 16/05/2015 6:22 p.m., Walter H. wrote: >>> On 16.05.2015 01:41, Amos Jeffries wrote: On 16/05/2015 6:14 a.m., Walter H. wrote: > Hello, > > is IPv6 somewhat similar to IPv4? Somewhat,

[squid-users] Squid 3.4.10 and sslcrtd

2015-05-18 Thread Veiko Kukk
Hi I'd like to know if I understand Squid documentation properly. I have following http_port and sslbump configuration: http_port 127.0.0.1:3128 ssl-bump generate-host-certificates=off cert=/var/spool/squid/ssl_cert/squid_ca.pem ssl_bump server-first all From documentation: generate-host-cert

Re: [squid-users] squid does not send cached object to an icap-server

2015-05-18 Thread Stefan Kuegler
Hi Yuri. http://i.imgur.com/mW7gNwD.png http://squidclamav.darold.net/config.html This is for squidclamav (I use it and have no problems with malware). I just installed squidclamav - but the behaviour is always the same. An object which has been stored in squid-cache will not be detected by