Re: [squid-users] Squid with proxy

On 23/05/2015 2:05 a.m., Silvio Siefke wrote: > On Fri, 22 May 2015 23:26:13 +1200 Amos Jeffries > wrote: > >> Without NextProxy is correct if ziproxy is on the "outside" of Squid. >> Like so: >> >> client -> Squid -> ziproxy -> Internet > > In my browser i speak only with squid, other make squ

Re: [squid-users] Proxy chain question

On 23/05/2015 1:49 a.m., Lucas van Braam van Vloten wrote: > Hello, > > Thanks for your reply. > >> Any particular reason? > Unfortunately this double setup is not my choice, our architects > prescribe use of the TMG proxy as mandatory for all internet access from > the internal network. No excep

Re: [squid-users] Squid + Ssl filter conf

I also forgot to mention that for Squid 3.5.x /dev/shm needs to be root:root and privileges of 0777. On Fri, May 22, 2015 at 1:26 PM, Stanford Prescott wrote: > This works for me with Squid 3.5.4. Hope it helps. > > > > *acl localhostgreen src 192.168.192.1acl localnetgreen src > 192.168.192.0/2

Re: [squid-users] Squid + Ssl filter conf

This works for me with Squid 3.5.4. Hope it helps. *acl localhostgreen src 192.168.192.1acl localnetgreen src 192.168.192.0/24 * *http_access allow localhosthttp_access deny !Safe_portshttp_access deny CONNECT !SSL_portshttp_access allow localnetgreenhttp

Re: [squid-users] https quick question

Sorry amos , what shoud I modify squid.conf ? As I told u all I added is I installed the tool yum -y install crypto-utils And generated private and public keys genkey -days 365 xxx then And added to squid.conf https_port xxx:443 accel cert=/etc/pki/tls/certs/xxx.crt key=/etc/pki/tls/priv

[squid-users] Squid + Ssl filter conf

Hi... i tired to research about squid with ssl_bump with many guides. compiling from 3.48 to 3.5.4 and with squid.conf ok but not work for me. someone can share please a squid.conf with your ssl_bump snipped working actually... every manual/guide i found are with very older version, ad the suggest

Re: [squid-users] url_rewrite_extras - not getting data excepted

ies wrote: > On 23/05/2015 12:59 a.m., Patrick wrote: > > Thanks for looking at this, Amos. Unfortunately, I am still seeing the > > same result with the squid-3.5.4-20150522-r13836 daily. > > > > I was thinking I might just being seeing what's described at &g

Re: [squid-users] Squid with proxy

On Fri, 22 May 2015 23:26:13 +1200 Amos Jeffries wrote: > Without NextProxy is correct if ziproxy is on the "outside" of Squid. > Like so: > > client -> Squid -> ziproxy -> Internet In my browser i speak only with squid, other make squid i hope. I use ziproxy for compress the traffic, but when

Re: [squid-users] Proxy chain question

Hello, Thanks for your reply. > Any particular reason? Unfortunately this double setup is not my choice, our architects prescribe use of the TMG proxy as mandatory for all internet access from the internal network. No exceptions. > Since the TMG is a reverse-proxy (...) This is true only for inbo

Re: [squid-users] url_rewrite_extras - not getting data excepted

On 23/05/2015 12:59 a.m., Patrick wrote: > Thanks for looking at this, Amos. Unfortunately, I am still seeing the > same result with the squid-3.5.4-20150522-r13836 daily. > > I was thinking I might just being seeing what's described at > http://www.squid-cache.org/Doc/confi

Re: [squid-users] url_rewrite_extras - not getting data excepted

Thanks for looking at this, Amos. Unfortunately, I am still seeing the same result with the squid-3.5.4-20150522-r13836 daily. I was thinking I might just being seeing what's described at http://www.squid-cache.org/Doc/config/url_rewrite_extras/ as "In practice, a %macro expands as a d

Re: [squid-users] Zyxel USG20 and Squid 3.3

NP: Its too late now, but please in future start new threads for new topics. It seriously screws up reading for those of us with threaded mailers or forum-style mirrors of the mailing list like Nabble. Yes, this was not planned - I first used the wrong button in my email program (list-answer and

Re: [squid-users] Zyxel USG20 and Squid 3.3

Flipping through yoru devices User Guide I see it has Policy Routing features you can configure. But is very light on details so I cant help with exact config. However, if you can figure out how to implement these policies

Re: [squid-users] Zyxel USG20 and Squid 3.3

NP: Its too late now, but please in future start new threads for new topics. It seriously screws up reading for those of us with threaded mailers or forum-style mirrors of the mailing list like Nabble. On 22/05/2015 11:18 p.m., wn48z wrote: > Since long time I'm trying to upgrade from Squid 2.7 t

Re: [squid-users] Compiling squid 3.5.4 with ecap enabled.

Thanks a lot Amos, You are the savior. Another small query, if answered, could save me a lot of trouble. I am trying to compile squid 3.5.3 on the older versions of centos (5.11), suse(11.4) amongst others. Please let me know if there is a minimum requirement for various packages, also g++, glibc

Re: [squid-users] Squid with proxy

On 22/05/2015 10:35 p.m., Silvio Siefke wrote: > On Fri, 22 May 2015 15:39:19 +1200 Amos Jeffries wrote: > >> I dont know why you should have to. ziproxy should be perfectly >> capable of contacting Internet services to respond to the requests >> sent from Squid. > > Yes it works but im not sure

[squid-users] Zyxel USG20 and Squid 3.3

Since long time I'm trying to upgrade from Squid 2.7 to 3.x but every try has failed up to now. I use a ZyXel USG 20 firewall with LAN and DMZ Zone. The Squid proxy server (MySquid) is running inside the DMZ with a single IP. The Zyxel USG 20 has a option for a "HTTP Redirect". This is defined li

[squid-users] Zyxel USG20 and Squid 3.3

Since long time I'm trying to upgrade from Squid 2.7 to 3.x but every try has failed up to now. I use a ZyXel USG 20 firewall with LAN and DMZ Zone. The Squid proxy server (MySquid) is running inside the DMZ with a single IP. The Zyxel USG 20 has a option for a "HTTP Redirect". This is defined

Re: [squid-users] Squid with proxy

On Fri, 22 May 2015 15:39:19 +1200 Amos Jeffries wrote: > I dont know why you should have to. ziproxy should be perfectly > capable of contacting Internet services to respond to the requests > sent from Squid. Yes it works but im not sure is right, when NextProxy in ziproxy.conf is not set. When

[squid-users] squid 3.5.4 and ssl-bump

Hi Amos... ok now I upgrade recompile again everything from 3.4.8 to 3.5.4 this is the conf root@debian-template:/usr/local/squid/sbin# ./squid -k parse 2015/05/22 03:08:17| Startup: Initializing Authentication Schemes ... 2015/05/22 03:08:17| Startup: Initialized Authentication Scheme 'basic'