Re: [squid-users] problem with squidGuard redirect page after upgrading squid

2016-01-07 Thread Jason Haar
On 08/01/16 18:36, Amos Jeffries wrote: > But you do want to block all of http://good.site/bad\.url.* right? > > Otherwise the malware can get around the protection trivially just by > adding a meaningless suffix to it. You are totally right - good catch :-) > > With all the scraping are you also

Re: [squid-users] problem with squidGuard redirect page after upgrading squid

2016-01-07 Thread Amos Jeffries
On 8/01/2016 9:48 a.m., Jason Haar wrote: > On 08/01/16 01:56, Marcus Kool wrote: >> Can you explain what the huge number of regexes is used for ? > malware urls. I'm scraping them from publicly available sources like > phishtank, malwaredomains.com. Ironically, they don't need to be regexes > - b

[squid-users] How large cacheable object with Rock store now?

2016-01-07 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi gents, did anybody know: How large cacheable object with Rock store now? -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEcBAEBCAAGBQJWjuLkAAoJENNXIZxhPexG3CEH/3EM1sVFvDa8LV40AG4FWT5H 64hTdbdI2Kahfb4DpfW820+aTQNzYAvGsDsHT+yVnLDBu5A95/JaQx/

Re: [squid-users] problem with squidGuard redirect page after upgrading squid

2016-01-07 Thread Jason Haar
On 08/01/16 01:56, Marcus Kool wrote: > Can you explain what the huge number of regexes is used for ? malware urls. I'm scraping them from publicly available sources like phishtank, malwaredomains.com. Ironically, they don't need to be regexes - but squid only has a "url_regex" acl type - so regex

Re: [squid-users] Queries on safe_ports

2016-01-07 Thread Amos Jeffries
On 8/01/2016 4:32 a.m., Anonymous cross wrote: > Hi All, > > I have basic queries on an usage of safe and SSL_ports in squid. > > Since squid proxies only HTTP packets then why do we need to add different > protocols in safe ports? Some protocols particularly the older text based ones that ports

[squid-users] Queries on safe_ports

2016-01-07 Thread Anonymous cross
Hi All, I have basic queries on an usage of safe and SSL_ports in squid. Since squid proxies only HTTP packets then why do we need to add different protocols in safe ports? Our box is configured to redirect only port 80 packets to 3129? Do we need to have safe and SSL ports in such a case? I a

Re: [squid-users] Squid with NTLM auth behind netscaler

2016-01-07 Thread Fabio Bucci
Hi Amos, just configured squid.conf as: auth_param negotiate program /usr/lib64/squid/negotiate_kerberos_auth -d -s HTTP/myproxy.domain auth_param negotiate children 100 auth_param negotiate keep_alive on acl auth proxy_auth REQUIRED http_access allow auth but it doesn't work and browser requir

Re: [squid-users] Squid 3.5.12 RPMs update for CentOS 7.

2016-01-07 Thread Eliezer Croitoru
I have just updated the CentOS 7 build due to an error in the the build process of the RPM auto dependencies identification. Details: When the RED-HAT rpm build tools sets the dependencies for a script it sets the "shbang" binary location as a static dependency requirement. In this specific cas

Re: [squid-users] problem with squidGuard redirect page after upgrading squid

2016-01-07 Thread Marcus Kool
On 01/07/2016 12:31 AM, Jason Haar wrote: On 06/01/16 00:04, Amos Jeffries wrote: Yes. Squid always has been able to given enough RAM. Squid stores most ACLs in memory as Splay trees, so entries are sorted by frequency of use which is dynamically adapted over time. Regex are pre-parsed and agg

Re: [squid-users] kerberos authentication with a machine account doesn't work

2016-01-07 Thread L . P . H . van Belle
Hai,   First whats your OS/squid and samba version, handy to know. And post your smb.conf please.   Few things to check. /etc/krb5.keytab should have rights 600 (root:root) Run : klist -e -k /etc/krb5.keytab  post the output.   Your SPN for squid must be HTTP/fqdn And not http/fqdn