04.12.15 12:59, vivek singh пишет:
Thanks a lot for you responses.
I will update after doing more analysis.
*@Amos Jeffries :*
Q . How does the IP correlate to the tv_ip, sysadmin_ip,
workstation_ip ACLs above?
A. these are separate text files in the same directory, containing ip
lists.
Q.
Thanks a lot for you responses.
I will update after doing more analysis.
*@Amos Jeffries :*
Q . How does the IP correlate to the tv_ip, sysadmin_ip,
workstation_ip ACLs above?
A. these are separate text files in the same directory, containing ip lists.
Q. Any difference with how those machines ar
It’s been a far superior client experience to bumping on the deployments I’ve
seen. Obviously MITM-ing a connection is always going to be a less amenable
situation for clients; technically and ethically.
The only problem I’ve had with splicing is this Host Header Forgery error squid
has when it
Hi there
We just had an incident where I would really have liked to have had
transparent TLS intercept in place. Currently I'm still in
"experimental" phase and don't want to go full "bump", but some quick
testing of just activating "splice" with TLS intercept seems to me to be
zero risk
ie inste
On 4/12/2015 9:46 a.m., Dima Ermakov wrote:
> Hi!
> I have a problem with authentiation.
>
> I use samba ntlm authentication in my network.
>
> Some users ( not all ) have problems with http traffic.
>
> They see basic authentication request.
Meaning you *dont* have NTLM authentication on your
Hi,
Doing some debugging (ALL,9) and looking at the cache log just after
starting the Squid Windows Service and I see the following error. Can anyone
help with what this means? Is it a misconfiguration?
Thanks
Patrick
name: SQUID_ERR_SSL_HANDSHAKE
detail: "%ssl_error_descr: %ssl_lib_e
Hi!
I have a problem with authentiation.
I use samba ntlm authentication in my network.
Some users ( not all ) have problems with http traffic.
They see basic authentication request.
If they enter correct domain login and password, they have auth error.
If this users try to open https sites: all
Or it could be the slow uploads but in 3.5.X which I am almost sure was
not fixed yet.
Eliezer
On 03/12/2015 12:24, Amos Jeffries wrote:
His squid.conf does not contain anything that obviously restricts that.
So I am suspecting the problems some old-ish browsers and OS have with
POST messages
I haven't used delay pools in a while, but I would think that the updated
Squid 3 delay pools (with 64-bit counters and per-authenticated-user
buckets) would allow such quotas.
I'd take the monthly quota and turn it into a per-second rate. If my math
isn't failing me, 100 GB/month = 38,500 bytes p
The cost means "integrate with those using tcp_outgoing_tos/mark and qos_flows
to deliver per-request classification tags to the OS QoS system".
> On Dec 3, 2015, at 8:45 PM, Antony Stone
> wrote:
>
> On Thursday 03 December 2015 at 13:34:32, GoGo net wrote:
>
>> As I do NOT want to add extra
On Thursday 03 December 2015 at 13:34:32, GoGo net wrote:
> As I do NOT want to add extra cost to squid, I will stay with the script
> and try to optimise it.
What do you mean by "cost"?
Antony.
> > On Dec 3, 2015, at 8:27 PM, Amos Jeffries wrote:
> >
> > On 4/12/2015 1:14 a.m., GoGo net wro
On 4/12/2015 1:17 a.m., massimo.s...@asl.bergamo.it wrote:
> I am reviewing our squid.conf about http_access manager
>
>
> http://www.squid-cache.org/Doc/config/http_access/
>
> http_access allow localhost manager
>
>
> http://wiki.squid-cache.org/Features/CacheManager
>
> Ca
As I do NOT want to add extra cost to squid, I will stay with the script and
try to optimise it.
Thanks, Amos.
> On Dec 3, 2015, at 8:27 PM, Amos Jeffries wrote:
>
> On 4/12/2015 1:14 a.m., GoGo net wrote:
>> I am running squid 3.5 in my LAN as a proxy for surfing internet.
>>
>> The proxy is
On 4/12/2015 1:14 a.m., GoGo net wrote:
> I am running squid 3.5 in my LAN as a proxy for surfing internet.
>
> The proxy is shared by all users in the LAN, and every user has a
> username/password configured in their web browser.
>
> Now, I want to limit user traffic quota, say every user 100GB
On Thursday 03 December 2015 at 13:17:24, massimo.s...@asl.bergamo.it wrote:
> http://www.squid-cache.org/Doc/config/http_access/
>
> http_access allow localhost manager
>
> http://wiki.squid-cache.org/Features/CacheManager
>
> Cache manager Access Control in squid.conf
>
I am reviewing our squid.conf about http_access manager
http://www.squid-cache.org/Doc/config/http_access/
http_access allow localhost manager
http://wiki.squid-cache.org/Features/CacheManager
Cache manager Access Control in squid.conf
http_access allow manager localh
I am running squid 3.5 in my LAN as a proxy for surfing internet.
The proxy is shared by all users in the LAN, and every user has a
username/password configured in their web browser.
Now, I want to limit user traffic quota, say every user 100GB/month. How can
achieve this?
Currently, I use a s
On 4/12/2015 12:34 a.m., Massimo.Sala wrote:
> We have a server with squid 3.4.8 as forward proxy ( clients have the
> proxy configured in the browsers ).
>
>
> Sometimes we have Zero-Sized Replies from Windows Servers as discussed
> here :
>
> https://squidproxy.wordpress.com/categor
Hi, Amos,
I am really appreciated for you quick reply.
Many thanks for your information. I will consider if I will post a RFI.
> On Dec 3, 2015, at 6:39 PM, Amos Jeffries wrote:
>
> On 3/12/2015 11:21 p.m., GoGo net wrote:
>> Hi, cool guys,
>>
>> I am running a squid 3.5 on Ubuntu 14.04 as p
On 4/12/2015 12:40 a.m., massimo.s...@asl.bergamo.it wrote:
> Squid 3 as forwarding proxy, intranet LAN.
>
> We want to limit the bandwidth only for multimedia content.
>
> On 3.1.20 we have these lines into squid.conf :
>
> acl localnet src 10.0.0.0/8
>
> acl acl_flussi_media rep_mime_type -i
Squid 3 as forwarding proxy, intranet LAN.
We want to limit the bandwidth only for multimedia content.
On 3.1.20 we have these lines into squid.conf :
acl localnet src 10.0.0.0/8
acl acl_flussi_media rep_mime_type -i ^audio/
acl acl_flussi_media rep_mime_type -i ^video/
delay_pools 1
delay_cla
We have a server with squid 3.4.8 as forward proxy ( clients have the
proxy configured in the browsers ).
Sometimes we have Zero-Sized Replies from Windows Servers as discussed
here :
https://squidproxy.wordpress.com/category/squid-3/
The proxy server is in the internal LAN. We want
On 3/12/2015 11:21 p.m., GoGo net wrote:
> Hi, cool guys,
>
> I am running a squid 3.5 on Ubuntu 14.04 as proxy server through https_port
> 443 (not http_port):
>
>> client —> (https_prot:443) squid —> Internet
>
> Basically speaking, it works well. But TLS brings in some performance
> overhe
On 3/12/2015 11:04 p.m., Yuri Voinov wrote:
> I suggest the problem just required to allow POST method from LAN and/or
> to mail servers. Often this can help.
>
His squid.conf does not contain anything that obviously restricts that.
So I am suspecting the problems some old-ish browsers and OS hav
On 3/12/2015 12:54 p.m., Patrick Flaherty wrote:
> Hi,
>
>
>
> Doing some debugging (ALL,9) and looking at the cache log just after
> starting the Squid Windows Service and I see the following error. Can anyone
> help with what this means? Is it a misconfiguration?
This is not an error.
"ALL
Hi, cool guys,
I am running a squid 3.5 on Ubuntu 14.04 as proxy server through https_port 443
(not http_port):
> client —> (https_prot:443) squid —> Internet
Basically speaking, it works well. But TLS brings in some performance overhead.
Currently, I am planning to enable OCSP stapling to sp
On 3/12/2015 12:42 p.m., Patrick Flaherty wrote:
> Hello,
>
> What does Squid open Sockets for? (As shown below)
>
> 2015/12/02 17:20:53 kid1| DNS Socket created at [::], FD 5
>
> 2015/12/02 17:20:53 kid1| DNS Socket created at 0.0.0.0, FD 6
>
For sending and receiving DNS messages.
Amos
___
I suggest the problem just required to allow POST method from LAN and/or
to mail servers. Often this can help.
03.12.15 16:02, Amos Jeffries пишет:
On 3/12/2015 7:17 p.m., vivek singh wrote:
Thanks for the quick reply. please find the answers below
1. while uploading attachments,it stays idle
On 3/12/2015 7:17 p.m., vivek singh wrote:
> Thanks for the quick reply. please find the answers below
> 1. while uploading attachments,it stays idle without any advancement in
> attachment progress bar.
> 2. we have tested on IE,Crome and Firefox with the same result.
> 3. Major mail services used
On 3/12/2015 6:22 p.m., Kinkie wrote:
> Hi Patrick,
>./configure --disable-ipv6
>
> will do the trick.
But please, *why* do you want to go to such drastic measures?
Amos
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.
On 3/12/2015 4:15 p.m., Marcio Demetrio Bacci wrote:
> My Linux Stations are in Domain, but when a user open your bowser, the user
> and password are asked. Sometimes, during the navegation, the user and
> password are asked again.
Be aware the popup has nothing to do with Squid. It is a mechanism
31 matches
Mail list logo
