Re: [squid-users] can't get bump to work anymore on 3.5.7?

2015-08-19 Thread Jason Haar
On 20/08/15 03:36, Alex Rousskov wrote: > SNI is obtained during step #1. Peeking during step #1 does _not_ > preclude future bumping. thanks for persisting with me Alex - I got there in the end! :-) That looks a lot better, my config is now root# egrep -i 'crtd|bump|ssl:|checkIfHTTPS' squid.con

Re: [squid-users] How to have squid as safe as (e.g.) firefox?

2015-08-19 Thread Alex Rousskov
On 08/19/2015 09:43 AM, Jeremie Rafin wrote: > # Non bumped list (only spliced): wellsfargo > acl splicelist ssl::server_name .wellsfargo.com > > # SSL configuration > acl step1 at_step SslBump1 > acl step2 at_step SslBump2 > ssl_bump peek step1 all > ssl_bump splice step2 splicelist > ssl_bump b

[squid-users] Mac OS X Updates

2015-08-19 Thread John Pearson
Anyone have Mac OS X update caching working ? Without doing a SSL bump. I think they are hosted through https ( https://support.apple.com/en-us/HT202943 ) Thanks! ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org

Re: [squid-users] How to have squid as safe as (e.g.) firefox?

2015-08-19 Thread Amos Jeffries
On 20/08/2015 3:43 a.m., Jeremie Rafin wrote: > Amos and Alex, > > Thanks a lot for all your advises. I appreciate your helpful comments! :)) > > Nevertheless, all is not cristal clear for me. I have setup a sandbox > (virtual box with squid 3.5.7 on debian 7.6; for transparent proxy, I have >

Re: [squid-users] Squid + Mysql

2015-08-19 Thread Eliezer Croitoru
Great to hear it works! And since you are using CentOS I would just say, "take a look at the wiki" at: http://wiki.squid-cache.org/KnowledgeBase/CentOS#Squid-3.5 In a case you would want a squid 3.5 version. Eliezer On 19/08/2015 19:26, adricustodio wrote: thanks dude! I fixed! I was looki

Re: [squid-users] Squid + Mysql

2015-08-19 Thread adricustodio
thanks dude! I fixed! I was looking the logs and found that i needed a pearl_DBD_mysql Installed and all worked fine! -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Mysql-tp4672769p4672777.html Sent from the Squid - Users mailing list archive at Nab

Re: [squid-users] Squid + Mysql

2015-08-19 Thread adricustodio
Amos, thanks for answering... So here is where i am. i configured my basic_db_auth and tested with /usr/lib64/squid/basic_db_auth --user root --password password --plaintext -- persist But my Centos does nothing, it stays blinking... so i need to crtl + c to stop I think something is block

Re: [squid-users] How to have squid as safe as (e.g.) firefox?

2015-08-19 Thread Jeremie Rafin
Amos and Alex, Thanks a lot for all your advises. I appreciate your helpful comments! :)) Nevertheless, all is not cristal clear for me. I have setup a sandbox (virtual box with squid 3.5.7 on debian 7.6; for transparent proxy, I have setup NAT iptables and IP route to run client through squid;

Re: [squid-users] can't get bump to work anymore on 3.5.7?

2015-08-19 Thread Alex Rousskov
On 08/19/2015 04:09 AM, Jason Haar wrote: > So is there no way to get the SNI field from the client without breaking > the opportunity for bump? SNI is obtained during step #1. Peeking during step #1 does _not_ preclude future bumping. If you want to get SNI and bump, then peek at step #1 and bu

Re: [squid-users] Virtual Memory

2015-08-19 Thread Amos Jeffries
On 20/08/2015 12:28 a.m., Jorgeley Junior wrote: > Hi guys, sorry if I'm doing a dumb question... > My squid is using so much virtual memory how you can see in the print, is > that normal? Yes. Squid worker processes use a lot of memory. Then fork() many helper processes. Each of which is allocat

Re: [squid-users] Squid + Mysql

2015-08-19 Thread Amos Jeffries
On 20/08/2015 12:17 a.m., adricustodio wrote: > Hi guys, i got a question... again > > Im runing here Centos7 + squid 3.3.8 > Im trying to set up a squid with mysql auth, but im kinda lost here... > > For now squid is running fine on basic_ncsa_auth > I've created a mysql db called "squid" an

Re: [squid-users] Squid + oracle

2015-08-19 Thread Eliezer Croitoru
How is the OID related exactly? If you have a paid DB I assume you can use it.. Leave aside licensing for the DB guy.. he probably knows whether you need to pay more for something. Eliezer On 19/08/2015 13:23, adricustodio wrote: Because its easyer i guess I have no idea how to start wit

[squid-users] Virtual Memory

2015-08-19 Thread Jorgeley Junior
Hi guys, sorry if I'm doing a dumb question... My squid is using so much virtual memory how you can see in the print, is that normal? I have 8GB physic memory and my squid is set to 4GB, my cache is like this: cache_dir diskd /cache 4096 16 256 Q1=64 Q2=72 cache_dir diskd /cache 4096 16 256 Q1=64 Q

[squid-users] Squid + Mysql

2015-08-19 Thread adricustodio
Hi guys, i got a question... again Im runing here Centos7 + squid 3.3.8 Im trying to set up a squid with mysql auth, but im kinda lost here... For now squid is running fine on basic_ncsa_auth I've created a mysql db called "squid" and a table called "users" with name, pass (varchar) and statu

Re: [squid-users] squid-users Digest, Vol 12, Issue 33

2015-08-19 Thread Du, Hongfei
Hi Eliezer and Amos Sure, I have posted this to the squid-dev list, which is more relevant to this issue. Many thanks for Amos' comments, really helpful information. For clarification, here we look at the HTTP caching, and only look into the cache-dir selection algorithm rather than the peer se

Re: [squid-users] Squid + oracle

2015-08-19 Thread adricustodio
Because its easyer i guess I have no idea how to start with those tools. As long as i noticed you guys said i need the oracle OID, but that is paid, and i dont think we have paid that. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-oracle-tp46727

Re: [squid-users] can't get bump to work anymore on 3.5.7?

2015-08-19 Thread Jason Haar
On 19/08/15 16:07, Alex Rousskov wrote: > Your interpretation is correct: Your configuration tells Squid to peek > at steps #1 and #2 and then try to bump at step #3. Unfortunately, the > last two actions (peeking at step #2 and then bumping at step #3) are > usually not compatible. Please see the

Re: [squid-users] debian Jessie squid with auth (kerberos/ntlm/basic) ERROR type NTLM type 3

2015-08-19 Thread L . P . H . van Belle
Hello Markus,   This a hard one , but ill explian a bit first, because this depends on the pc im testing with.   I have 2 networks within one ip range atm, and with the 2 networks i mean 2 samba (windows) domains. Im migrating the old to new and im testing in the new domain, but old 2 new is