[squid-users] Multicast WCCPv2 + Squid 3.3.8

2015-11-10 Thread Fatah Mumtaz
Hi everyone, Currently i'm building lab for my thesis on the topic Multicast WCCPv2 with Squid. I'm trying to config WCCPv2 to work with single proxy server (Squid 3.3.8) and multiple Cisco 2821 routers. WCCPv2 works well with one proxy server and one router configuration. It's been 2 months since

Re: [squid-users] YouTube Resolution Locker Plugin for Squid Proxy Cache 3.5.x

2015-11-10 Thread HackXBack
in debian when you do this cmd update-rc.d haarp defaults 98 it says root@debian:/etc/init.d# update-rc.d haarp defaults 98 update-rc.d: using dependency based boot sequencing insserv: warning: script 'haarp' missing LSB tags and overrides insserv: warning: script 'haarpclean' missing LSB tags and

Re: [squid-users] YouTube Resolution Locker Plugin for Squid Proxy Cache 3.5.x

2015-11-10 Thread HackXBack
unveiltech can cache youtube html5 with full range 100% hit ? -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/YouTube-Resolution-Locker-Plugin-for-Squid-Proxy-Cache-3-5-x-tp4674463p4674485.html Sent from the Squid - Users mailing list archive at Nabble.com. _

[squid-users] Pass client DNS requests

2015-11-10 Thread Patrick Flaherty
Hi, Again I'm fairly new to Squid but loving it. We enforce only certain domains be accessible via the whitelist directive. Is there a way to pass DNS requests through the proxy for resolution? We are currently using Windows host entries. L I added the following but Squid came back in a ne

Re: [squid-users] cache peer only forward http , not https !!!

2015-11-10 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 11.11.15 1:45, Ahmad Alzaeem пишет: > Hi I don’t have ssl pump > > > > All my users user ip:port to have internet > > > > > > I already have ISA windows server and it works with http and https > > > > Im wondering why all complexity needed fo

Re: [squid-users] cache peer only forward http , not https !!!

2015-11-10 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Are you see in access.log ip:443 CONNECT records? I.e., does your HTTPS traffic incoming to Squid? 11.11.15 1:45, Ahmad Alzaeem пишет: > Hi I don’t have ssl pump > > > > All my users user ip:port to have internet > > > > > > I already have ISA

Re: [squid-users] cache peer only forward http , not https !!!

2015-11-10 Thread Ahmad Alzaeem
Hi I don’t have ssl pump All my users user ip:port to have internet I already have ISA windows server and it works with http and https Im wondering why all complexity needed for peer https !!! Anyway hnere is squid.conf # This file is automatically generated by pfSense

Re: [squid-users] cache peer only forward http , not https !!!

2015-11-10 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I think, we need to take a look on your squid.conf first. 10.11.15 23:18, Ahmad Alzaeem пишет: > Thank you , > > > > Can you just guide me for the https peer directive plz ? > > I can take care of https intercept > > > > So with http , we have

Re: [squid-users] cache peer only forward http , not https !!!

2015-11-10 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I'm probably a little misled. The fact that my configuration is a proxy with a bump. What complicates the task. In the case of conventional non-transparent proxy no tricks are usually not required except that it is necessary to enforce drive of the

Re: [squid-users] cache peer only forward http , not https !!!

2015-11-10 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 You just must remember my two first line from previous mail. You need to configure Squid with SSL Bump to capture HTTPS traffic. Or, of course, you can configure your Squid as non-transparent forwarding proxy. All you need: Your Squid must see HT

Re: [squid-users] cache peer only forward http , not https !!!

2015-11-10 Thread Ahmad Alzaeem
Thank you , Can you just guide me for the https peer directive plz ? I can take care of https intercept So with http , we have directive cache_peer 10.12.0.32 parent 8080 0 no-query no-digest As ok Now what about https directive ? Can u help me Thanks a lot a lot a lot for

Re: [squid-users] SSL bumping without faked server certificates

2015-11-10 Thread Stefan Kutzke
Hi Sebastian, I will give it a try. Regards, Stefan Am Dienstag, den 10.11.2015, 14:27 + schrieb Sebastian Kirschner: > Hi Stefan, > > I think it would be better to peek at step1 (Then you have the Client > SNI) and at step2 you could bump or splice. > Your config > > My assumption is that

Re: [squid-users] cache peer only forward http , not https !!!

2015-11-10 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 1. You need to configure Squid with SSL Bump to capture HTTPS traffic. 2. You need to configure forwarded requests with splice/no bump. :) 10.11.15 22:42, Ahmad Alzaeem пишет: > Hi Guys I want proxy and I want it to forward http & https to remote

[squid-users] cache peer only forward http , not https !!!

2015-11-10 Thread Ahmad Alzaeem
Hi Guys I want proxy and I want it to forward http & https to remote proxy Does the command below enogh ? cache_peer 10.12.0.32 parent 8080 0 no-query no-digest no-tproxy proxy-only or I need to add other line for https ?? BTW the command line above work only for http not for htt

Re: [squid-users] logging to syslog

2015-11-10 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 10.11.15 22:34, Avraham Serour пишет: > Hi, > > I'm using squid 3 and I want to send my access log to syslog, in my case it > is /dev/log > my conf entry is: > access_log syslog:local5.info squid > > but it seems squid is not sending the logs, at

Re: [squid-users] logging to syslog

2015-11-10 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 What is your syslog.conf settings? 10.11.15 22:34, Avraham Serour пишет: > Hi, > > I'm using squid 3 and I want to send my access log to syslog, in my case it > is /dev/log > my conf entry is: > access_log syslog:local5.info squid > > but it seems

[squid-users] logging to syslog

2015-11-10 Thread Avraham Serour
Hi, I'm using squid 3 and I want to send my access log to syslog, in my case it is /dev/log my conf entry is: access_log syslog:local5.info squid but it seems squid is not sending the logs, at least I'm not receiving nothing that seems to be coming from squid Any way I can specify the syslog soc

[squid-users] icap SOPHOS SAVDI and custom errorpage

2015-11-10 Thread David Webb
I've setup squid -v Squid Cache: Version 3.3.8 on RHEL 7.1 and have configured things so that virus scanning with Sophos' SAVDI works and can get to a custom error page however I can't seem to find anyway of getting the name of the detected virus passed across to the custom error page an

Re: [squid-users] SSL bumping without faked server certificates

2015-11-10 Thread Alex Rousskov
On 11/10/2015 07:05 AM, Stefan Kutzke wrote: > My assumption is that I have to use in Squid's config: > acl MYSITE ssl:server_name .mydomain.com > ssl_bump bump MYSITE > ssl_bump splice all > This results in tunneling all https traffic, nothing will be bumped and > cached. Yes, probably becaus

Re: [squid-users] SSL bumping without faked server certificates

2015-11-10 Thread Sebastian Kirschner
Hi Stefan, I think it would be better to peek at step1 (Then you have the Client SNI) and at step2 you could bump or splice. Your config > My assumption is that I have to use in Squid's config: >https_port :3443 intercept ssl-bump cert= >key= >acl MYSITE ssl:server_name .mydomain.com >ssl_bump

[squid-users] SSL bumping without faked server certificates

2015-11-10 Thread Stefan Kutzke
Hi, I needed to setup Squid as a transparent proxy with SSL bumping for only one single https website. The goal was to bump https connections to this website with its offical signed SSL certificate. As an illustration: Website/hostname: https://abc.mydomain.com DNS: abc.mydomain.com A 1.2.3.4

Re: [squid-users] What does this error mean?

2015-11-10 Thread Yuri Voinov
> > > > cache_mem 64 MB > > maximum_object_size_in_memory 256 KB > > memory_replacement_policy heap GDSF > > cache_replacement_policy heap LFUDA > > minimum_object_size 0 KB > > maximum_object_size 4 MB > > cache_dir ufs /var/squid/cache 100 16 256 &

Re: [squid-users] What does this error mean?

2015-11-10 Thread Patrick Flaherty
http_access allow manager localhost http_access deny manager http_access allow purge localhost http_access deny purge http_access deny !safeports http_access deny CONNECT !sslports # Always allow localhost connections # From 3.2 further configuration cleanups have been done to make

[squid-users] cache peer problem with Https only !!

2015-11-10 Thread Ahmad Alzaeem
Hi im using pfsense with cache peer Squid version is 3.4.10 I have peer proxy on port 80 and I can use it with http and https Now if I use pfsense in the middle and let pfsense go to remote proxy (10.12.0.32 port 80 ) And I get internt from the pfsense proxy I only have http w

[squid-users] Help, long response time(2 seconds) in squid!

2015-11-10 Thread 徐永健
Hi, All: I tried to use squid as a web cache server today, but when I test it with http_load, I found squid may have a latency of 2 seconds in some cases. Someone help me? Thanks! The test is --- http_load -parallel 1 -seconds 20 url.txt # the content in url.txt is `http://10.210.136.51:3128/x