Re: [squid-users] Correct Syntax for ACL?

2015-05-27 Thread Amos Jeffries
On 28/05/2015 8:18 a.m., Serge Fonville wrote: > Hi, > > how does squid distinquish between a file containing rules >> e.g. acl acl-file url_regex -i "/etc/url-acl.squid" >> or the rule itself >> e.g. acl acl-rule url_regex -i "\.exe$" >> with the same acl-type? >> > From http://www.squid-cache.

Re: [squid-users] Squid, Gmail.com and HSTS.

2015-05-27 Thread Amos Jeffries
On 28/05/2015 6:33 a.m., Michael Monette wrote: > Yeah I don't know what I am doing wrong but I don't have these ACL types..Or > I am somehow not copy & pasting properly: > > FATAL: Invalid ACL type 'ssl::server_name' > FATAL: Bungled /etc/squid/squid.conf line 54: acl nobumpsites > ssl::server_

Re: [squid-users] Squid, Gmail.com and HSTS.

2015-05-27 Thread Amos Jeffries
On 28/05/2015 5:51 a.m., Michael Monette wrote: > Thanks for the reply. I am compiling the latest squid now and going to give > that a shot using ssl::server_name. The precompiled binary for CentOS was > only at 3.5.04 and didn't have ssl::server_name support I guess. > > While I have you here,

Re: [squid-users] Correct Syntax for ACL?

2015-05-27 Thread Serge Fonville
Hi, how does squid distinquish between a file containing rules > e.g. acl acl-file url_regex -i "/etc/url-acl.squid" > or the rule itself > e.g. acl acl-rule url_regex -i "\.exe$" > with the same acl-type? > >From http://www.squid-cache.org/Doc/config/acl/ Every access list definition must begi

Re: [squid-users] Correct Syntax for ACL?

2015-05-27 Thread Hussam Al-Tayeb
On Wednesday 27 May 2015 22:03:14 Walter H. wrote: > Hello, > > would this be the correct syntax: > > acl crl-file url_regex -i \.crl$ > > or need it to be > > acl crl-file url_regex -i "\.crl$" > > how does squid distinquish between a file containing rules > e.g. acl acl-file url_regex -i "/e

[squid-users] Correct Syntax for ACL?

2015-05-27 Thread Walter H.
Hello, would this be the correct syntax: acl crl-file url_regex -i \.crl$ or need it to be acl crl-file url_regex -i "\.crl$" how does squid distinquish between a file containing rules e.g. acl acl-file url_regex -i "/etc/url-acl.squid" or the rule itself e.g. acl acl-rule url_regex -i "\.e

Re: [squid-users] New server_name acl causes fatal error starting Squid 3.5.4

2015-05-27 Thread Mike
Stanford Prescott gmail.com> writes: > > > Never mind. I figured the acl out. I was using someone else's instructions who accidentally left out the double :: ssl::server_name using just a single :. I am getting the same thing as you except I don't have the mistake you did. I literally copi

Re: [squid-users] Squid, Gmail.com and HSTS.

2015-05-27 Thread Michael Monette
Yeah I don't know what I am doing wrong but I don't have these ACL types..Or I am somehow not copy & pasting properly: FATAL: Invalid ACL type 'ssl::server_name' FATAL: Bungled /etc/squid/squid.conf line 54: acl nobumpsites ssl::server_name .google.com Squid Cache (Version 3.5.4): Terminated abn

Re: [squid-users] Squid, Gmail.com and HSTS.

2015-05-27 Thread Amos Jeffries
On 28/05/2015 4:15 a.m., Michael Monette wrote: > Has anyone been able to configure Squid in a way so that if you type https://gmail.com in your browser, you are NOT presented with the "OMG HSTS I refuse to load anything" page? When I go to https://gmail.com, I get an invalid certificate because th

Re: [squid-users] Squid, Gmail.com and HSTS.

2015-05-27 Thread Michael Monette
I just thought of something else. First of all I'm new to squid and I am not aware of 10% of the things its capable of yet so I will ask. Is squid capable of adding custom SNIs? Like could I have it so gmail.com is added to the certificate as a subject alternate name EVEN though the original c

[squid-users] Squid, Gmail.com and HSTS.

2015-05-27 Thread Michael Monette
Has anyone been able to configure Squid in a way so that if you type https://gmail.com in your browser, you are NOT presented with the "OMG HSTS I refuse to load anything" page? When I go to https://gmail.com, I get an invalid certificate because the cert is for mail.google.com, issued by my CA.

Re: [squid-users] ipf transparent enabled, but squid says not supported

2015-05-27 Thread James Lay
On 2015-05-27 09:45 AM, Stephen Borrill wrote: I have: Squid Cache: Version 3.5.4 Service Name: squid configure options: '--sysconfdir=/usr/pkg/etc/squid' '--localstatedir=/var/squid' '--datarootdir=/usr/pkg/share/squid' '--disable-strict-error-checking' '--enable-auth' '--enable-cachemgr-hostna

[squid-users] ipf transparent enabled, but squid says not supported

2015-05-27 Thread Stephen Borrill
I have: Squid Cache: Version 3.5.4 Service Name: squid configure options: '--sysconfdir=/usr/pkg/etc/squid' '--localstatedir=/var/squid' '--datarootdir=/usr/pkg/share/squid' '--disable-strict-error-checking' '--enable-auth' '--enable-cachemgr-hostname=localhost' '--enable-delay-pools' '--enable-i

Re: [squid-users] Logformat tag for a specific ACL

2015-05-27 Thread Amos Jeffries
On 27/05/2015 10:04 p.m., FredB wrote: > Hello, > > There is a way to "tag" an ACL in access.log ? > > acl test url_regex "/tmp/myfile" > > logformat fred %>a %[ui %[un [%tl] "%rm %ru HTTP/%rv" %>Hs % "%{User-Agent}>h" > access_log daemon:/var/log/squid/access.log fred > > If I put something at

[squid-users] Logformat tag for a specific ACL

2015-05-27 Thread FredB
Hello, There is a way to "tag" an ACL in access.log ? acl test url_regex "/tmp/myfile" logformat fred %>a %[ui %[un [%tl] "%rm %ru HTTP/%rv" %>Hs %h" access_log daemon:/var/log/squid/access.log fred If I put something at the end logformat fred %>a %[ui %[un [%tl] "%rm %ru HTTP/%rv" %>Hs %h" t