Re: [squid-users] issue with video

2015-12-15 Thread Amos Jeffries
On 16/12/2015 3:02 a.m., Magic Link wrote: > > Hi, > the preview video here doesn't start, only the ads starts, then black screen > appears. Then i don't have the choice, the play button appears and itplays > the ads again and again : > http://www.cbsnews.com/news/heroin-in-the-heartland-60-min

Re: [squid-users] squid 3.5.12 and ecap

2015-12-15 Thread Amos Jeffries
On 16/12/2015 12:53 a.m., behrad eslami wrote: > Hi I add simple rule to ecap module and deny some url. I forground > (squid -N -d10) all things work well. when i run service wtih mutiple > workers, after a while some url not filter and user can open them in > browsers. I compile Squid 3.5.12 and l

Re: [squid-users] Squid: forward to another squid server with authentication

2015-12-15 Thread Amos Jeffries
On 16/12/2015 1:03 p.m., Amaury Viera Hernández wrote: > Hello everyone. This is a more detailed explanation about my > trouble: > The more detailed explanation makes it clear that you are not going to be able to use the login=PASSTHRU workaround for getting NTLM to work. Clients that are interce

[squid-users] Squid: forward to another squid server with authentication

2015-12-15 Thread Amaury Viera Hernández
Hello everyone. This is a more detailed explanation about my trouble: I have two network cards: a shared Wifi card(wlp2s0) : 10.42.0.1 a Network card with access to my LAN(enp4s0): 10.8.77.1 In short, I am looking for a simple way to do the following (please give code samples if possible): Set

Re: [squid-users] cant bump ssl

2015-12-15 Thread Amos Jeffries
Another possibility that has not been mentioned yet is that the sslproxy_* settings might be resulting in some form of server TLS error that causes the connection(s) to get stuck. On 16/12/2015 8:46 a.m., HackXBack wrote: > > sslproxy_version 0 "0" is an invalid setting for this directive. > ss

Re: [squid-users] Time for cache synchronization between siblings

2015-12-15 Thread Amos Jeffries
On 16/12/2015 7:16 a.m., Sreenath BH wrote: > Hi, > > I have a setup with three squid peers (siblings in squid.conf) and > three upstream servers(peers with parent and originserver in > squid.conf). > > I am using htcp for the three squid siblings. > How much time does it take for one squid serve

Re: [squid-users] cant bump ssl

2015-12-15 Thread Alex Rousskov
On 12/15/2015 02:57 PM, Amos Jeffries wrote: > On 16/12/2015 9:17 a.m., Alex Rousskov wrote: >> On 12/15/2015 12:46 PM, HackXBack wrote: >>> why i cant bump ssl conection with android >>> my squid conf is >> >>> ssl_bump bump ssl_step2 SNIGroup5 >>> ssl_bump splice all >> >> >> In modern Squids, y

Re: [squid-users] Authenticate against the squid of my organization

2015-12-15 Thread Amos Jeffries
On 16/12/2015 9:14 a.m., Amaury Viera Hernández wrote: > Hello everyone: > > This is my main doubt: > I'm using an authenticated proxy (squid) in my university but i do not > have access to change any configuration in that proxy. > > I need to install squid in my local machine and specify in some

Re: [squid-users] cant bump ssl

2015-12-15 Thread Amos Jeffries
On 16/12/2015 9:17 a.m., Alex Rousskov wrote: > On 12/15/2015 12:46 PM, HackXBack wrote: >> why i cant bump ssl conection with android >> my squid conf is > >> ssl_bump bump ssl_step2 SNIGroup5 >> ssl_bump splice all > > > In modern Squids, your configuration above is equivalent to: > > ssl_

Re: [squid-users] Not work HELP change cache dir

2015-12-15 Thread Amos Jeffries
On 16/12/2015 9:35 a.m., juancho Alfonso wrote: > s.o. centos 7squid version 3.3 > in the squid.conf file > cache_dir aufs /var/spool/squid 20480 16 256 > cache_effective_user squid > cache_effective_group squidthis way works > cache_dir aufs /var/spool/squid2 20480 16 256 cache_effective_user squ

Re: [squid-users] Installing Squid as a service on Oracle Linux 7.2

2015-12-15 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 You are welcome ;) 16.12.15 3:08, sebastien.boulia...@cpu.ca пишет: > Hi, > > Thanks you very much for your answer. > It tooks me about 1 min to get it too. > > I reach the wiki where Eliezer give his repositery. > > I just did a yum –y install sq

[squid-users] Authenticate against the squid of my organization

2015-12-15 Thread Amaury Viera Hernández
Hello everyone: This is my main doubt: I'm using an authenticated proxy (squid) in my university but i do not have access to change any configuration in that proxy. I need to install squid in my local machine and specify in some place that this squid will use my user and password of the squid

Re: [squid-users] Installing Squid as a service on Oracle Linux 7.2

2015-12-15 Thread Sebastien.Boulianne
Hi, Thanks you very much for your answer. It tooks me about 1 min to get it too. I reach the wiki where Eliezer give his repositery. I just did a yum –y install squid-3.5.11 and I got the squid.service… All is perfect now. Thanks anyways. Sébastien De : squid-users [mailto:squid-users-boun.

Re: [squid-users] Installing Squid as a service on Oracle Linux 7.2

2015-12-15 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On the day when I forget how to write scripts - I kill myself :) 16.12.15 2:29, sebastien.boulia...@cpu.ca пишет: > Hi, > > Your answer didn’t help me. > Does it have anyone who create a service file for squid and want to share it. > I tried the s

Re: [squid-users] Installing Squid as a service on Oracle Linux 7.2

2015-12-15 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ok, I'll just done your job. See attachements. I wrote squid.service, it takes approx. 30 seconds. PS. But note: you must install both files manually yourself. Read manuals anyway. 16.12.15 2:29, sebastien.boulia...@cpu.ca пишет: > Hi, > > Your

Re: [squid-users] Installing Squid as a service on Oracle Linux 7.2

2015-12-15 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I'm in doubt that someone will do the work for you, the system administrator :) Especially since there is no big problem to read the manual and write a dozen lines. :) Repositories Linux - evil, they weaned experts think :) 16.12.15 2:29, sebast

[squid-users] Not work HELP change cache dir

2015-12-15 Thread juancho Alfonso
s.o. centos 7squid version 3.3 in the squid.conf file cache_dir aufs /var/spool/squid 20480 16 256 cache_effective_user squid cache_effective_group squidthis way works cache_dir aufs /var/spool/squid2 20480 16 256 cache_effective_user squid cache_effective_group squidorcache_dir aufs PATHEXTERNALD

Re: [squid-users] Installing Squid as a service on Oracle Linux 7.2

2015-12-15 Thread Sebastien.Boulianne
Hi, Your answer didn’t help me. Does it have anyone who create a service file for squid and want to share it. I tried the squid.service from the yum package (v3.3.8) but it didn’t work. Thanks Sébastien De : squid-users [mailto:squid-users-boun...@lists.squid-cache.org] De la part de Yuri Voino

Re: [squid-users] cant bump ssl

2015-12-15 Thread HackXBack
i cant understand ssl_bump rules for version 3.5 what i can do to bump this 3 domains fbcdn\.net akamaihd\.net i\.ytimg\.com -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/cant-bump-ssl-tp4675201p4675203.html Sent from the Squid - Users mailing list archive

Re: [squid-users] cant bump ssl

2015-12-15 Thread Alex Rousskov
On 12/15/2015 12:46 PM, HackXBack wrote: > why i cant bump ssl conection with android > my squid conf is > ssl_bump bump ssl_step2 SNIGroup5 > ssl_bump splice all In modern Squids, your configuration above is equivalent to: ssl_bump splice all because, during the very first SslBump processi

[squid-users] cant bump ssl

2015-12-15 Thread HackXBack
hello, am using squid 3.5 why i cant bump ssl conection with android my squid conf is # SSL_BUMP_WHITE_LIST = 0 [squid_ssl/build/48] acl ssl_step1 at_step SslBump1 acl ssl_step2 at_step SslBump2 acl ssl_step3 at_step SslBump3 ssl_bump peek ssl_step1 # SNI Group fbcdn acl SNIGroup5 ssl::server_

Re: [squid-users] Using subordinate CA for SSL Bump

2015-12-15 Thread Alex Rousskov
On 12/14/2015 04:48 PM, Marcus Kool wrote: > On 12/14/2015 09:16 PM, Amos Jeffries wrote: >> Squid may be horribly sending >> all-but-one of the certs needed, on the assumption that the signing cert >> is itself installed on the client. > The RFC says that it is not necessary to send the signing

[squid-users] Time for cache synchronization between siblings

2015-12-15 Thread Sreenath BH
Hi, I have a setup with three squid peers (siblings in squid.conf) and three upstream servers(peers with parent and originserver in squid.conf). I am using htcp for the three squid siblings. How much time does it take for one squid server to 'know' that another peer has a particular object cached

Re: [squid-users] Installing Squid as a service on Oracle Linux 7.2

2015-12-15 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Squid's source don't contain automatically installed autostart services for all possible platforms. You can do it yourself. 15.12.15 21:15, sebastien.boulia...@cpu.ca пишет: > Hi, > > I hope all is going perfectly for you. > > Im trying to install

[squid-users] Installing Squid as a service on Oracle Linux 7.2

2015-12-15 Thread Sebastien.Boulianne
Hi, I hope all is going perfectly for you. Im trying to install Squid-3.5.12 from source. I followed the doc to compile it properly. When I ran squid -z, all is perfect. [root@squid /]# squid -z [root@squid /]# 2015/12/15 10:06:20 kid1| Set Current Directory to /var/spool/squid 2015/12/15 10:0

Re: [squid-users] issue with video

2015-12-15 Thread Magic Link
Hi, the preview video here doesn't start, only the ads starts, then black screen appears. Then i don't have the choice, the play button appears and itplays the ads again and again : http://www.cbsnews.com/news/heroin-in-the-heartland-60-minutes/. Tested with squid 3.4.8 and 3.5.10If i use

Re: [squid-users] Transfer-Encoding tag not delivered to c-icap server

2015-12-15 Thread Giray Simsek
That was helpful. I looked at the ICAP request/response headers as well as the squid log.  After seeing the following line in the log file: 2015/12/15 11:52:58.104 kid1| 93,3| Xaction.cc(512) setOutcome: Warning: reseting outcome: from ICAP_MOD to ICAP_ERR_OTHER I thought it must be caused by

Re: [squid-users] Reverse proxy: session expired in 15 minutes

2015-12-15 Thread Antony Stone
On Tuesday 15 Dec 2015 at 13:02, Roberto Carna wrote: > Development team say that a session is conformed by cookies, and the > expiration time defined is 3 hours. Squid will not change the content of the cookies (although it's possible it could remove them, depending on the configuration). Does

Re: [squid-users] Reverse proxy: session expired in 15 minutes

2015-12-15 Thread Amos Jeffries
On 16/12/2015 2:02 a.m., Roberto Carna wrote: > Development team say that a session is conformed by cookies, and the > expiration time defined is 3 hours. Squid has nothing to do with Cookie headers. Except to ensure that they are erased from cached responses as per the Cookie requirements. Amos

Re: [squid-users] Reverse proxy: session expired in 15 minutes

2015-12-15 Thread Roberto Carna
Development team say that a session is conformed by cookies, and the expiration time defined is 3 hours. 2015-12-15 9:32 GMT-03:00 Antony Stone : > On Tuesday 15 Dec 2015 at 11:39, Roberto Carna wrote: > >> Dear, we have a Squid3 as reverse proxy with default configuration. >> >> We have a domain

Re: [squid-users] Reverse proxy: session expired in 15 minutes

2015-12-15 Thread Antony Stone
On Tuesday 15 Dec 2015 at 11:39, Roberto Carna wrote: > Dear, we have a Squid3 as reverse proxy with default configuration. > > We have a domain pointed to a web server. In this server the user > session expiration is setup in 3 hs, but each 15 minutes the session > expires. What is your definit

Re: [squid-users] Reverse proxy: session expired in 15 minutes

2015-12-15 Thread Roberto Carna
I add that the main line in squid3.conf is: cache_peer 10.10.1.10 parent 80 0 no-query originserver login=PASS name=SiteXXX Thanks again. 2015-12-15 8:39 GMT-03:00 Roberto Carna : > Dear, we have a Squid3 as reverse proxy with default configuration. > > We have a domain pointed to a web server.

[squid-users] squid 3.5.12 and ecap

2015-12-15 Thread behrad eslami
Hi I add simple rule to ecap module and deny some url. I forground (squid -N -d10) all things work well. when i run service wtih mutiple workers, after a while some url not filter and user can open them in browsers. I compile Squid 3.5.12 and libecpa 1.0.0. squid compiled with below options:'--b

Re: [squid-users] file descriptors leak

2015-12-15 Thread André Janna
Em 28/11/2015 22:46, André Janna escreveu: I took another network trace this time both at Squid and Windows client ends. cache.log: 2015/11/27 11:30:55.610 kid1| SECURITY ALERT: Host header forgery detected on local=177.43.198.106:443 remote=192.168.64.4:61802 FD 5465 flags=33 (local IP does

[squid-users] Reverse proxy: session expired in 15 minutes

2015-12-15 Thread Roberto Carna
Dear, we have a Squid3 as reverse proxy with default configuration. We have a domain pointed to a web server. In this server the user session expiration is setup in 3 hs, but each 15 minutes the session expires. At this time, we are not sure about the origin of the session expiration. Taking into

[squid-users] squid url_rewrite_program for urls with parametes

2015-12-15 Thread Flavius Nopcea
Hi, i try to rewrite a URL based on its parametes. for example the url: www.google.com?param1=value1¶m2=value2 the problem is that I do not get the parameters as input in the url rewrite program. do you know a way how I can do this? thanks a lot