Re: [squid-users] cache_peer - ssloptions / sslv3

2016-02-10 Thread Amos Jeffries
On 11/02/2016 9:08 a.m., Yuri Voinov wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > The http://bugs.squid-cache.org/show_bug.cgi?id=4429 is returns :) > > Re-open this bug again :) > > Awful bug strikes back :D > Yes it is that bug. However, "latest" Squid is now 4.0.5, wi

[squid-users] Filtering HTTPS URLs

2016-02-10 Thread Victor Hugo
Hi, I was wondering if it is possible to filter HTTPS URLs using squid (for example to blacklist reddit.com but allow https://www.reddit.com/r/news/)? I thought this may be possible using ssl_bump and url_regex. I have been trying this using squid 3.5.13 but with no success. Here is the squid co

Re: [squid-users] cache_peer - ssloptions / sslv3

2016-02-10 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 The http://bugs.squid-cache.org/show_bug.cgi?id=4429 is returns :) Re-open this bug again :) Awful bug strikes back :D 11.02.16 1:43, Florian Stamer пишет: > Hi, > > here http://www.squid-cache.org/Versions/v4/cfgman/cache_peer.html it sais, tha

[squid-users] cache_peer - ssloptions / sslv3

2016-02-10 Thread Florian Stamer
Hi, here http://www.squid-cache.org/Versions/v4/cfgman/cache_peer.html it sais, that ssloptions=... ALL Enable various bug workarounds suggested as "harmless" by OpenSSL Be warned that this reduces SSL/TLS strength to

Re: [squid-users] Squid 3.4.1 as a reverse Proxy for Exchange 2016 - Problems with Exchange Active Sync

2016-02-10 Thread Amos Jeffries
On 11/02/2016 3:40 a.m., Philipp Fischer wrote: > Hi, > > i´m trying to get squid working as reverse Proxy for Exchange 2016. > > Actually it works quite smooth for OWA but fails again and again > when trying to connecto to the EAS Site of my Exchange. > > From the IIS-Logs of the mailserver i

Re: [squid-users] unable to bypass authentication for certain domains

2016-02-10 Thread lravelo
OK so an update. I was able to bypass this but it seems like it might be a maintenance nightmare. I created the following acl's:acl netscaler src 172.21.11.0/24acl directdstdomain "/etc/squid3/sites.direct.txt"essentially we have a Citrix NetScaler t

[squid-users] Squid 3.4.1 as a reverse Proxy for Exchange 2016 - Problems with Exchange Active Sync

2016-02-10 Thread Philipp Fischer
Hi, i´m trying to get squid working as reverse Proxy for Exchange 2016. Actually it works quite smooth for OWA but fails again and again when trying to connecto to the EAS Site of my Exchange. >From the IIS-Logs of the mailserver i can see 401 replys two or three times >and then squid sends t

Re: [squid-users] ext_ldap_group_acl - allowing websites based on ad group membership

2016-02-10 Thread Amos Jeffries
On 10/02/2016 5:21 a.m., mathew abraham wrote: > Thank you for the quick reply. I have tried it with quotes the results are > the same. It's not working. > Well, that means only that there is more wrong. Looking a bit closer I see your LDAP filters are all lower-case. I know that others have f

Re: [squid-users] script /usr/lib/squid3/log_db_daemon

2016-02-10 Thread Amos Jeffries
On 9/02/2016 11:23 p.m., Tony Peña wrote: > Hi > > I want to modify the /usr/lib/squid3/log_db_daemon script, but I'm not know > very knowledge about PERL, so if i want to modify to get on the mysql > table, not epoch_time, and date_time in human readable i guess first change > the scheme... Hi T