Re: [squid-users] Saving memory cache to disk on reboot?

2015-05-21 Thread Amos Jeffries
On 19/05/2015 12:21 a.m., Leonardo Rodrigues wrote: > On 18/05/15 08:55, Yan Seiner wrote: >> The title says it all - is it possible to save the memory cache to >> disk on reboot? Squid does what it can between shutdown signal arriving and the shutdown_timeout completing. Theres not time to do muc

Re: [squid-users] url_rewrite_extras - not getting data excepted

2015-05-21 Thread Amos Jeffries
On 22/05/2015 4:10 a.m., Patrick wrote: > Hello, > > I think I'm having a problem with the url_rewrite_extras function. I'm > using version 3.5.3. I've been trying to use the %ue macro to send the > user= returned by my external_acl_type program. But when I look at > the url_rewrite_program outp

Re: [squid-users] Storage mem in 3.5.4, not sure what is happening

2015-05-21 Thread Amos Jeffries
On 22/05/2015 3:07 a.m., Sebastian Goicochea wrote: > We've found the problem: > > As we are only using just one worker, memory_cache_shared has to be off > when rock is enabled. > It wasn't clear at first because I interpreted that memory_cache_shared > could be on no matter how many workers you

Re: [squid-users] Squid with proxy

2015-05-21 Thread Amos Jeffries
On 22/05/2015 8:32 a.m., Silvio Siefke wrote: > Hello, > > i use squid with ziproxy for mobile traffic compression. Squid work, > Ziproxy work, okay not so what i think but its work. My problem is, > so i understand i connect to squid and squid give traffic to ziproxy > and then come back to sq

Re: [squid-users] Squid 3.3 to 3.5 url_rewrite_program changes

2015-05-21 Thread Amos Jeffries
On 22/05/2015 12:34 p.m., PSA wrote: > That would be true, but we are using a wildcard certificate, and only > rewriting the subdomain, so the certificate is still valid. > > Would squid 3.5 allow us to rewrite the subdomain in a similar way to your > redirect example, without relying on a hel

Re: [squid-users] https quick question

2015-05-21 Thread Amos Jeffries
On 22/05/2015 3:22 p.m., snakeeyes wrote: > clientNegotiateSSL: Error negotiating SSL connection on FD 36: > error:1407609B:SSL routines:SSL23_GET_CLIENT_HELLO:https proxy request (1/-1) > 2015/05/21 20:20:17| clientNegotiateSSL: Error negotiating SSL connection on > FD 45: error:1407609C:SSL rou

Re: [squid-users] Proxy chain question

2015-05-21 Thread Amos Jeffries
On 22/05/2015 4:58 a.m., Lucas van Braam van Vloten wrote: > Hello list, > > In my network I have a Microsoft TMG proxy server for http(s) access to > internet. > This TMG server also serves as a reverse proxy to channel incoming > traffic to a Squid reverse proxy in the internal network (yes, two

Re: [squid-users] Squid 3.3 to 3.5 url_rewrite_program changes

2015-05-21 Thread PSA4444
That would be true, but we are using a wildcard certificate, and only rewriting the subdomain, so the certificate is still valid. Would squid 3.5 allow us to rewrite the subdomain in a similar way to your redirect example, without relying on a helper script? -- View this message in context: ht

[squid-users] Squid with proxy

2015-05-21 Thread Silvio Siefke
Hello, i use squid with ziproxy for mobile traffic compression. Squid work, Ziproxy work, okay not so what i think but its work. My problem is, so i understand i connect to squid and squid give traffic to ziproxy and then come back to squid. Right? But must i set NextProxy in ziproxy.conf or n

Re: [squid-users] New server_name acl causes fatal error starting Squid 3.5.4

2015-05-21 Thread Stanford Prescott
Thanks, Amos. I really appreciate that. On Wed, May 20, 2015 at 11:02 PM, Amos Jeffries wrote: > On 21/05/2015 6:03 a.m., Stanford Prescott wrote: > > I think I finally figured out how to not bump certain sites and to bump > all > > others. I put this in squid.conf > > > > > > > > > > > > > > >

Re: [squid-users] https quick question

2015-05-21 Thread snakeeyes
clientNegotiateSSL: Error negotiating SSL connection on FD 36: error:1407609B:SSL routines:SSL23_GET_CLIENT_HELLO:https proxy request (1/-1) 2015/05/21 20:20:17| clientNegotiateSSL: Error negotiating SSL connection on FD 45: error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request (1/-1) 2

[squid-users] Proxy chain question

2015-05-21 Thread Lucas van Braam van Vloten
Hello list, In my network I have a Microsoft TMG proxy server for http(s) access to internet. This TMG server also serves as a reverse proxy to channel incoming traffic to a Squid reverse proxy in the internal network (yes, two reverse proxies in a line) This Squid server is currently configured

Re: [squid-users] https quick question

2015-05-21 Thread snakeeyes
Thank you amos so much So far I didn’t add CA to my browser And I followed many docs about how to create the .key file and .crt file but always I get( ssl negotiation error) What could be the problem Where should I check and troubleshoot ? BTW I have the directive https_port 443 accel key=/ro

[squid-users] url_rewrite_extras - not getting data excepted

2015-05-21 Thread Patrick
Hello, I think I'm having a problem with the url_rewrite_extras function. I'm using version 3.5.3. I've been trying to use the %ue macro to send the user= returned by my external_acl_type program. But when I look at the url_rewrite_program output I just get a "-" value for this macro. Example:

Re: [squid-users] https quick question

2015-05-21 Thread Amos Jeffries
On 22/05/2015 9:09 a.m., snakeeyes wrote: > Hi , > > I WANT TO ESTABLISH squid https reverse proxy on squid > > > > Assume I configured and the keys x.crt & x.key needed for the > directive > > https_port 443 accl cert=/etc/squid/ssl/.crt > key=/etc/squid/ssl/.key vhost >

Re: [squid-users] Storage mem in 3.5.4, not sure what is happening

2015-05-21 Thread Sebastian Goicochea
We've found the problem: As we are only using just one worker, memory_cache_shared has to be off when rock is enabled. It wasn't clear at first because I interpreted that memory_cache_shared could be on no matter how many workers you had or what fs were you using. Thanks for your time, Seba

[squid-users] https quick question

2015-05-21 Thread snakeeyes
Hi , I WANT TO ESTABLISH squid https reverse proxy on squid Assume I configured and the keys x.crt & x.key needed for the directive https_port 443 accl cert=/etc/squid/ssl/.crt key=/etc/squid/ssl/.key vhost the question is being asked now do I need to add a certific

Re: [squid-users] Squid 3.4.8 with ssl-bump config.

2015-05-21 Thread Amos Jeffries
On 21/05/2015 9:50 p.m., Tony Peña wrote: > Hi again.. > > now work ok the compilation.. but have issues with the https sites. > > squid start ok... but can't see the sites with https on the browser... i > make the certificate ... and put myCA.der on windows client > > i test it with: > 1- ssl-b

Re: [squid-users] Novice question on TPROXY and SSL-BUMP behavior

2015-05-21 Thread Amos Jeffries
On 21/05/2015 2:42 a.m., Nick Belnap wrote: > I've been tasked with preventing a client's users from accessing consumer Gmail accounts while only accessing their corporate Google Apps accounts. Google gives an overview here: https://support.google.com/a/answer/1668854?hl=en. > > Being a novice

Re: [squid-users] Compiling squid 3.5.4 with ecap enabled.

2015-05-21 Thread Amos Jeffries
On 21/05/2015 7:58 p.m., Ashish Behl wrote: > Hello All, > I am trying to compile squid with ecap enabled (--enable-ecap) > I have compiled ecap already and placed the install files in /opt/ecap-1.0 > > = > curl -LOR http://www.measurement-fa

Re: [squid-users] Squid 3.5: internal-static icons on ftp:// requests

2015-05-21 Thread Andre Albsmeier
On Thu, 21-May-2015 at 21:54:21 +1200, Amos Jeffries wrote: > On 21/05/2015 5:35 p.m., Andre Albsmeier wrote: > > On Tue, 19-May-2015 at 19:52:14 +1200, Amos Jeffries wrote: > >> On 19/05/2015 6:29 p.m., Andre Albsmeier wrote: > >>> When browsing e.g. > >>> > >>> ftp://ftp.mozilla.org/pub/thunderbi

Re: [squid-users] Squid 3.5: internal-static icons on ftp:// requests

2015-05-21 Thread Amos Jeffries
On 21/05/2015 5:35 p.m., Andre Albsmeier wrote: > On Tue, 19-May-2015 at 19:52:14 +1200, Amos Jeffries wrote: >> On 19/05/2015 6:29 p.m., Andre Albsmeier wrote: >>> When browsing e.g. >>> >>> ftp://ftp.mozilla.org/pub/thunderbird/releases/31.5.0/win32/en-GB/ >>> >> >>> and now the icons on ftp://f

Re: [squid-users] Squid 3.3 to 3.5 url_rewrite_program changes

2015-05-21 Thread Amos Jeffries
On 21/05/2015 4:29 p.m., PSA wrote: > Hi Amos, > > Thanks for the reply. It's weird that the <=2.4 operation still worked all > the time. > Anyway, I don't think what my helper is doing is exactly equivalent of that > because: > > deny_info 301: https://api.domain.com%R site > > is a redir

[squid-users] Squid 3.4.8 with ssl-bump config.

2015-05-21 Thread Tony Peña
Hi again.. now work ok the compilation.. but have issues with the https sites. squid start ok... but can't see the sites with https on the browser... i make the certificate ... and put myCA.der on windows client i test it with: 1- ssl-bump server-first all 2- ssl-bump client-first all testing a

Re: [squid-users] receive 504 from googlecode.com

2015-05-21 Thread Amos Jeffries
On 21/05/2015 5:37 p.m., 刘岚 wrote: > Hello, I met gateway timeout when I request pages which need resources from > googlecode. I use squid-3.0.STABLE18.tar.gz and here is the squid.conf file: That would be https:// URLs right? If so you are probably hitting one of the bugs in CONNECT handling tha

[squid-users] Compiling squid 3.5.4 with ecap enabled.

2015-05-21 Thread Ashish Behl
Hello All, I am trying to compile squid with ecap enabled (--enable-ecap) I have compiled ecap already and placed the install files in /opt/ecap-1.0 = curl -LOR http://www.measurement-factory.com/tmp/ecap/libecap-1.0.0.tar.gz tar -xzvf libeca