Re: [squid-users] after changed from 3.4.13 to 3.5.8 sslbump doesn't work for the site https://banking.postbank.de/

2015-09-28 Thread Yuri Voinov
Don't think so we can detect pinned apps automatically. You need find it manually this time AFAIK. 29.09.15 2:29, HackXBack пишет: Yuri, Dear friend. use splice HAA ? ok and how you cant detect automatically to make squid splice the pinned app automatically ? other wise , it is a real problem

Re: [squid-users] On what methods does url filtering needs to apply?

2015-09-28 Thread Eliezer Croitoru
OK then, Your logic kind of adds-up to me. So basically if a system doesn't touch OPTIONS\PUT\OTHER methods it can cause issues and the arguments of the sysadmin I encountered is kind of non realistic for most cases but can apply to a very specific environment. And the result would be that I

Re: [squid-users] On what methods does url filtering needs to apply?

2015-09-28 Thread Alex Rousskov
On 09/28/2015 12:34 PM, Eliezer Croitoru wrote: > Mainly content filtering is for offensive content. ... > The main issue is about offensive content in the presentation layer. If you define "content" as "information that a browser may show to a regular user", then you have to filter all [response

Re: [squid-users] squid with SMP registeration time out when i use 10K opened sessions

2015-09-28 Thread Amos Jeffries
On 28/09/2015 7:24 p.m., Ahmad Alzaeem wrote: > Hi amos > > I have 10 K > > I DIVIDED them to 5 files > > Each file has 2 K > And each file has its own cache.log file /visible name etc > > The question im asking is : > > Do I need to put the directive in cpu_affinity_map process_numbers=

Re: [squid-users] analyzing cache in and out files

2015-09-28 Thread Amos Jeffries
On 29/09/2015 7:59 a.m., Leonardo Rodrigues wrote: > > Hi, > > I have a running squid that, until some weeks ago, was not doing any > kind of cache, it was just used for access controle rules. Now i have > enabled it for windows updateand some specificURLs caching and it's just > working

Re: [squid-users] after changed from 3.4.13 to 3.5.8 sslbump doesn't work for the site https://banking.postbank.de/

2015-09-28 Thread HackXBack
Yuri, Dear friend. use splice HAA ? ok and how you cant detect automatically to make squid splice the pinned app automatically ? other wise , it is a real problem if cant detected automatically , and in my opinion it is a bug . -- View this message in context: http://squid-web-proxy-cache.101

Re: [squid-users] On what methods does url filtering needs to apply?

2015-09-28 Thread Eliezer Croitoru
Thanks Marcus, In this case I do not care about malware in the OPTIONS,HEAD or PUT methods. And it seems like this is the main different between a basic abusive content filtering(leaving the abusive definition abstract) and a security product which meant to block malware. I still suspect that i

[squid-users] analyzing cache in and out files

2015-09-28 Thread Leonardo Rodrigues
Hi, I have a running squid that, until some weeks ago, was not doing any kind of cache, it was just used for access controle rules. Now i have enabled it for windows updateand some specificURLs caching and it's just working fine. I was looking, however, for a way of tracking fil

Re: [squid-users] On what methods does url filtering needs to apply?

2015-09-28 Thread Marcus Kool
"content filtering" may filter only content while a generic filter may filter anything including malware that uses PUT, OPTION and/or HEAD to upload credit card data. So it depends on what you want to filter. If it is downloadable content only, you can stick with filtering GET POST CONNECT. Ma

Re: [squid-users] On what methods does url filtering needs to apply?

2015-09-28 Thread Eliezer Croitoru
Thanks for the insight. You are right, it is not well defined. I will try to rephrase or clear couple things. Mainly content filtering is for offensive content. This by definition is not the goal of a security related product that would not like to reveal the client attempts to reach the site us

Re: [squid-users] after changed from 3.4.13 to 3.5.8 sslbump doesn't work for the site https://banking.postbank.de/

2015-09-28 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I suggest, a good idea to bypass bankings around bump. As by as pinned Apple apps. In another word - use splice, Luke! ;) 28.09.15 20:43, HackXBack пишет: > this happen with me on all apple applications, and to make them work fine you > must none

Re: [squid-users] after changed from 3.4.13 to 3.5.8 sslbump doesn't work for the site https://banking.postbank.de/

2015-09-28 Thread HackXBack
this happen with me on all apple applications, and to make them work fine you must none bump for the ip's they used, it is the same problem, same log output as yours. Thanks. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/after-changed-from-3-4-13-to-3-5-8-s

Re: [squid-users] SSL Bump in intercept mode

2015-09-28 Thread Alex Rousskov
On 09/28/2015 12:57 AM, Степаненко Сергей wrote: > I'm use config with > ssl_bump stare all > ssl_bump bump all > When I'm use ssl bump, squid not send certificate chain. > Info from s_client > > with ssl_bump > Certificate chain > 0 s:/C=US/ST=California/L=Mountain View/O=Google Inc/CN=goo

Re: [squid-users] after changed from 3.4.13 to 3.5.8 sslbump doesn't work for the site https://banking.postbank.de/

2015-09-28 Thread Sebastian Kirschner
I increased the log level and performed a GET to https://banking.postbank.de/ , what I don't get is why squid start to generate a certificate for the ssl bump ? cache.log 2015/09/28 14:25:28.964 kid1| 33,5| client_side.cc(4135) getSslContextStart: Generating SSL certificate for banking.postbank.