Re: [squid-users] Looking for a recomendation for tutorial for transparent proxy under Ubuntu

2015-06-01 Thread dkandle
I got things working (at least they appear to be working now). For some unknown reason when I changed the iptables entry for port 443 from 10.1.10.200/28 to 10.1.10.0/24 it started to work. Even though the HTTP side worked either way. If anyone knows what was going on there I would appreciate under

Re: [squid-users] Looking for a recomendation for tutorial for transparent proxy under Ubuntu

2015-06-01 Thread dkandle
Amos Jeffries wrote > On 2/06/2015 10:57 a.m., dkandle wrote: > >> I also don't understand why the first ip address specification didn't >> work >> but I had to change the 10.1.10.1 to 10.100 which is the exact ip address >> of >> the client. I thought the /28 would have caused this to match any I

Re: [squid-users] Looking for a recomendation for tutorial for transparent proxy under Ubuntu

2015-06-01 Thread Amos Jeffries
On 2/06/2015 10:57 a.m., dkandle wrote: > Slight correction to my iptables: > iptables -t nat -A PREROUTING -i eth2 -s 10.1.10.200/28 -p tcp --dport 80 -j > REDIRECT --to-port 3128 > iptables -t nat -A PREROUTING -i eth2 -s 10.1.10.200/28 -p tcp --dport 443 > -j REDIRECT --to-port 3129 > > I also

Re: [squid-users] Looking for a recomendation for tutorial for transparent proxy under Ubuntu

2015-06-01 Thread dkandle
Slight correction to my iptables: iptables -t nat -A PREROUTING -i eth2 -s 10.1.10.200/28 -p tcp --dport 80 -j REDIRECT --to-port 3128 iptables -t nat -A PREROUTING -i eth2 -s 10.1.10.200/28 -p tcp --dport 443 -j REDIRECT --to-port 3129 I also don't understand why the first ip address specificati

Re: [squid-users] Looking for a recomendation for tutorial for transparent proxy under Ubuntu

2015-06-01 Thread dkandle
Thanks James. That got me most of the way there. I have the HTTP proxy working now but I have some strange (to me) issues with SSL traffic. I am using the ssl-bump I am redirecting both ports 80 and 443 with: iptables -t nat -A PREROUTING -i eth2 -s 10.1.10.1/28 -p tcp --dport 80 -j REDIRECT --to

Re: [squid-users] rock storage

2015-06-01 Thread Amos Jeffries
On 2/06/2015 5:13 a.m., Hussam Al-Tayeb wrote: > Hello, I added a 5000MB rock storage entry in squid.conf > when it filled up, squid cache manager said: > Storage Swap size: 512 KB > Storage Swap capacity: 100.0% used, 0.0% free > > but du -BM says 4703M is the size of the r

[squid-users] rock storage

2015-06-01 Thread Hussam Al-Tayeb
Hello, I added a 5000MB rock storage entry in squid.conf when it filled up, squid cache manager said: Storage Swap size: 512 KB Storage Swap capacity: 100.0% used, 0.0% free but du -BM says 4703M is the size of the rock storage file. ls -l says 524288. Since it is f

Re: [squid-users] Looking for a recomendation for tutorial for transparent proxy under Ubuntu

2015-06-01 Thread James Lay
On 2015-06-01 10:40 AM, dkandle wrote: I am using Ubuntu 14.04 on a server with multiple NICs. I would like to set it up as a transparent proxy. I have the router working and I had squid working as an explicit proxy (where I set the IP address of the server as the proxy in my client's browser)

[squid-users] Looking for a recomendation for tutorial for transparent proxy under Ubuntu

2015-06-01 Thread dkandle
I am using Ubuntu 14.04 on a server with multiple NICs. I would like to set it up as a transparent proxy. I have the router working and I had squid working as an explicit proxy (where I set the IP address of the server as the proxy in my client's browser). Is there a good tutorial which covers thi

Re: [squid-users] ssl_bump and SNI

2015-06-01 Thread James Lay
On Mon, 2015-06-01 at 12:12 +1000, Nathan Hoad wrote: > Hello, > > Here are some excerpts of what I've used, and an example Python helper: > > https_port 60099 intercept ssl-bump tcpkeepalive > cert=/path/to/cert.pem key=/path/to/key.pem options=NO_SSLv2,NO_SSLv3 > generate-host-certificates=on

Re: [squid-users] Squid 2.7, 3.4 and 3.5 Videos/Music/Images/Libraries/CDNs Booster

2015-06-01 Thread Stakres
Hi All, Advanced Caching Add-On for Linux Squid Proxy Cache v2.7, v3.4 and v3.5 with Videos, Music, Images, Libraries and CDNs. New version 2.528 - *June 1st 2015*. - New websites - YouTube mobile app improved More details on https://svb.