On 13/02/2016 10:15 a.m., Stefan Hölzle wrote:
> I have some new insight:
> The following line triggers the unwanted client ip ptr lookup:
>
> ./src/client_side.cc:3590:
> fqdncache_gethostbyaddr(clientConnection->remote, FQDN_LOOKUP_IF_MISS);
> Source package:
> http://www.squid-cache.org/Version
I have some new insight:
The following line triggers the unwanted client ip ptr lookup:
./src/client_side.cc:3590:
fqdncache_gethostbyaddr(clientConnection->remote, FQDN_LOOKUP_IF_MISS);
Source package:
http://www.squid-cache.org/Versions/v3/3.5/squid-3.5.10.tar.gz
This line should only be called
Hi Amos,
thanks for your reply.
I finally figured it out - the connection abort does not come from squid or the
pfsense SPI firewall on which squid actually runs.
The abort comes from the microsoft exchange remote connectivity analyzer
(exrca) - don´t know why.
Also the auto configuration fro
Here's the requested "squid -v" output:
Squid Cache: Version 3.5.10
Service Name: squid
configure options: '--host=x86_64-suse-linux-gnu'
'--build=x86_64-suse-linux-gnu' '--program-prefix=' '--exec-prefix=/usr'
'--bindir=/usr/bin' '--sysconfdir=/etc' '--datadir=/usr/share'
'--includedir=/usr/incl
> For example, in IE version 8, getting an error given below,
You can try to disable SSL3 in advanced options and enable TLS1.0 and/or better
SSLV3 is absolete now.
Van: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] Namens
Prasad Desai
Verzonden: vrijdag 12 febru
Hi gents.
Does anybody meet this issue?
This one:
ssl_bump peek step1
ssl_bump splice disable-ssl-bump
ssl_bump stare step2
ssl_bump bump all
always lead to much records in cache.log:
2016/02/12 15:59:40 kid1| hold write on SSL connection on FD 25
2016/02/12 15:59:40 kid1| hold write on
On 12/02/2016 9:07 p.m., Prasad Desai wrote:
> Hi,
>
> I have successfully configured SSLBump Peek and Splice in my transparent
> proxy and it is working as expected except in Internet explorer.
>
> For example, in IE version 8, getting an error given below,
>
A very out of date version. Are yo
On 12/02/2016 9:59 p.m., Jason Haar wrote:
> Hi there
>
> Given the real work on ssl-bump seems to be in squid-4, I thought to try
> it out. Unfortunately, we're using CentOS-6 and the compilers are too
> old? (gcc-c++-4.4.7/clang-3.4.2)
Yes.
>
> CentOS-7 should be fine - but replacing an entir
Hi there
Given the real work on ssl-bump seems to be in squid-4, I thought to try
it out. Unfortunately, we're using CentOS-6 and the compilers are too
old? (gcc-c++-4.4.7/clang-3.4.2)
CentOS-7 should be fine - but replacing an entire system just to have a
play is a bit too much to ask, so has an
Hi,
I have successfully configured SSLBump Peek and Splice in my transparent
proxy and it is working as expected except in Internet explorer.
For example, in IE version 8, getting an error given below,
(71) Protocol error (TLS code: SQUID_ERR_SSL_HANDSHAKE)
Handshake with SSL server failed: erro
10 matches
Mail list logo
