Can squid mitm SSL connections, but deliberately generate invalid certs for
upstream connections which are self signed or invalid so my browser will flag
them?
--
Sent from my Android device with K-9 Mail. Please excuse my brevity.___
squid-users mail
Hey Victor,
I do not think it's too crazy.
It is a very common statement in the Law of Pharmacy to not operate
"heavy" tools when taking a specific medicine. In most cases it is there
since the operation of such tools(light\heavy) requires the
worker\operator a specific amount of concentration
On 11/03/2016 4:31 p.m., Victor Sudakov wrote:
> Dear Colleagues,
>
> New Internet access rules are being introduced in our company, among
> them there is a requirement to have special groups of Internet users
> who are permitted to:
>
> 1. Download files from the Internet.
>
That one is easy.
In case anyone reads Russian, I have covered 2 new topics (possible
problems) in the Russian Squid+Kerberos Howto:
http://tinyurl.com/h68emax
--
Victor Sudakov, VAS4-RIPE, VAS47-RIPN
sip:suda...@sibptus.tomsk.ru
___
squid-users mailing list
squid-user
Hey,
I wanted to ask something very specific, how often do you restart the
service if at all? what shutdown_flifetime
[http://www.squid-cache.org/Doc/config/shutdown_lifetime/] are you using?
Eliezer
On 09/03/2016 15:17, Heiler Bemerguy wrote:
Hi Amos,
Now you can help me on tracking it d
Dear Colleagues,
New Internet access rules are being introduced in our company, among
them there is a requirement to have special groups of Internet users
who are permitted to:
1. Download files from the Internet.
2. Use Web forums.
3. Use streaming audio/video.
By default users should have n
Sorry I got confused with my email service issue.
+1 Alex
Eliezer
On 11/03/2016 03:13, Alex Rousskov wrote:
On 03/10/2016 04:43 PM, joe wrote:
trying to purge url
squidclient -h192.192.192.212 -p3128 PURGE
http://www.oggi.it/global_assets/js/searchform.js
Missing squidclient -m option to sp
On 11/03/2016 12:43 p.m., joe wrote:
> trying to purge url
> squidclient -h192.192.192.212 -p3128 PURGE
> http://www.oggi.it/global_assets/js/searchform.js
>
>
> Generated Fri, 11 Mar 2016 00:08:34 GMT by proxy.netgatesss.com
> (squid)
>
>
>
> debug_options ALL,2
You cannot purge something
On 11/03/2016 6:30 a.m., Cindy Cicalese wrote:
> Thank you for your response, Eliezer.
>
> I added the logformat command that you suggested. I needed to modify it
> slightly, since I'm running squid 3.1 (I changed %>eui). An example of what I am seeing in /var/log/squid/access.log is:
The 'eui'
squid.conf ...
Eliezer
On 11/03/2016 01:43, joe wrote:
trying to purge url
squidclient -h192.192.192.212 -p3128 PURGE
http://www.oggi.it/global_assets/js/searchform.js
Generated Fri, 11 Mar 2016 00:08:34 GMT by proxy.netgatesss.com
(squid)
debug_options ALL,2
---
2016/03/11 02:
On 03/10/2016 06:12 PM, Alex Samad wrote:
> how can I set it up so that specific URL's are not bumped
You cannot. Peeking or staring at unencrypted SSL client and server
details does not provide Squid with HTTP/URL-level information. Your
splicing/bumping decision has to be made based on unencryp
On 03/10/2016 04:43 PM, joe wrote:
> trying to purge url
> squidclient -h192.192.192.212 -p3128 PURGE
> http://www.oggi.it/global_assets/js/searchform.js
Missing squidclient -m option to specify the PURGE _method_.
Alex.
___
squid-users mailing list
s
Hi
i have
# Test src IPS
acl testIP src "/etc/squid/lists/noSSL-testip.lst"
# list of sites to splice only
acl spliceOnly_domain ssl::server_name "/etc/squid/lists/noSSL-spliceonly.lst"
acl spliceOnly_url urlpath_regex -i "/etc/squid/lists/noSSL-spliceonly-url.lst"
# for testing
# anything not
On 11/03/2016 3:22 a.m., Cindy Cicalese wrote:
> I am using Squid for caching with Apache and MediaWiki over HTTPS only.
> Unfortunately, no pages are being cached; each request is being sent from
> Squid to Apache. I would appreciate help figuring out how to get caching to
> work.
>
> My configur
squidclient -h192.192.192.212 -p3128 PURGE
http://www.lorientlejour.com/js/owl.carousel/owl.carousel.min.js
that one other error it dose not remove it at all stay hit
2016/03/11 02:30:04.517 kid1| 5,2| TcpAcceptor.cc(220) doAccept: New
connection on FD 25
2016/03/11 02:30:04.518 kid1| 5,2| TcpAcc
trying to purge url
squidclient -h192.192.192.212 -p3128 PURGE
http://www.oggi.it/global_assets/js/searchform.js
Generated Fri, 11 Mar 2016 00:08:34 GMT by proxy.netgatesss.com
(squid)
debug_options ALL,2
---
2016/03/11 02:11:20.479 kid1| 5,2| TcpAcceptor.cc(220) doAccept: New
con
Thank you for your response, Eliezer.
I added the logformat command that you suggested. I needed to modify it
slightly, since I'm running squid 3.1 (I changed eui). An example of what I am seeing in /var/log/squid/access.log is:
1457630282.410490 172.31.169.175 TCP_MISS/200 4621 GET
https:///
Hey Cindy,
I do not have too much experience with MediaWIKI but I ran some test on
it in the past for both caching and other things.
I am using this logformat to detect couple things that are related to
caching:
logformat cache_headers %ts.%03tu %6tr %>a %Ss/%03>Hs %%Sh/%h" "%{Cache-Control}>ha
I am using Squid for caching with Apache and MediaWiki over HTTPS only.
Unfortunately, no pages are being cached; each request is being sent from
Squid to Apache. I would appreciate help figuring out how to get caching to
work.
My configuration is as follows:
- Squid is configured to listen on
On 11/03/2016 1:02 a.m., Trent Renshaw wrote:
> Hi,
>
> We are able to pass and perform a WebSocket connection upgrade to a backend
> server using Nginx without any issue.
>
> However, we use Squid as a reverse proxy in our a production environment and
> cannot find any documentation on how t
Hi,
We are able to pass and perform a WebSocket connection upgrade to a backend
server using Nginx without any issue.
However, we use Squid as a reverse proxy in our a production environment and
cannot find any documentation on how to pass and/or perform the connection
upgrade in Squid.
In
On 10/03/2016 10:57 p.m., joe wrote:
>
>> Ah, you said you understood Vary. But this mail indicates that you do
>> not quite understand it well enough.
> i do understand may be the way sometime i try to explain it goes buggy lol
> like those bug any way
>
>> I prune away the extra headers to clar
Sounds known :)))
I faced this behaviour with 3.5 all time, which is forced me to jump to
4.x. 3.5 dies on my platform every shutdown, so this made it completely
unusable in production.
But 4.x has the similar issue:
http://bugs.squid-cache.org/show_bug.cgi?id=4438
10.03.16 16:16, Amos
>Ah, you said you understood Vary. But this mail indicates that you do
>not quite understand it well enough.
i do understand may be the way sometime i try to explain it goes buggy lol
like those bug any way
>I prune away the extra headers to clarify:
>>Firefox:
>> GET /en_US/embeds.js HTTP/1.1
On 10/03/2016 4:41 p.m., Alex Samad wrote:
> Hi
>
> running
> rpm -qa squid
> squid-3.5.14-1.el6.x86_64
>
>
> doing a restart saw this
> 2016/03/10 14:36:28 kid1| Squid Cache (Version 3.5.14): Exiting normally.
> FATAL: Received Segment Violation...dying.
> 2016/03/10 14:36:28 kid1| storeDirWri
25 matches
Mail list logo
