Re: [squid-users] squid 2.7/lusca not work with web auth IIS

2016-04-20 Thread zodyo
anybody here? im newbie and need some advice here, or how to bypass some sites with auth -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-2-7-lusca-not-work-with-web-auth-IIS-tp4677157p4677182.html Sent from the Squid - Users mailing list archive at Nabb

Re: [squid-users] ssl_bump newbie troubles

2016-04-20 Thread Alex Rousskov
On 04/20/2016 04:18 PM, Odhiambo Washington wrote: > On 21 April 2016 at 00:11, Alex Rousskov wrote: > > On 04/20/2016 02:22 PM, Odhiambo Washington wrote: > > > All I want is the ability to intercept SSL sites and control access to > > them using TIME ACLs. That's all. You also want

Re: [squid-users] ssl_bump newbie troubles

2016-04-20 Thread Odhiambo Washington
On 21 April 2016 at 00:11, Alex Rousskov wrote: > On 04/20/2016 02:22 PM, Odhiambo Washington wrote: > > > All I want is the ability to intercept SSL sites and control access to > > them using TIME ACLs. That's all. > > I will assume that your definition of a "site" is "domain name". > Yes. >

Re: [squid-users] ssl_bump newbie troubles

2016-04-20 Thread Alex Rousskov
On 04/20/2016 02:22 PM, Odhiambo Washington wrote: > All I want is the ability to intercept SSL sites and control access to > them using TIME ACLs. That's all. I will assume that your definition of a "site" is "domain name". > So in simple: > 1. UserX tries to access facebook.com/youtube.com >

Re: [squid-users] ssl_bump newbie troubles

2016-04-20 Thread Odhiambo Washington
On 20 April 2016 at 18:38, Alex Rousskov wrote: > On 04/20/2016 08:16 AM, Odhiambo Washington wrote: > > > I even wonder if this config is correct: > > > > acl ssl_bump_broken_sites dstdomain ... > > ssl_bump none ssl_bump_broken_sites > > ssl_bump peek step1 > > ssl_bump stare step2 > > ssl_bum

[squid-users] Cert authority invalid failures.

2016-04-20 Thread Markey, Bruce
I'm curious as to why this is happening. Proxy was implemented last week and since then I've been dealing with all the sites that don't work. Not a problem, knew it was going to happen. I'd like to understand why the following is happening. 1. User goes to https://www.whatever.com 2.

[squid-users] Squid 3.5.9 Problems with Teamviewer

2016-04-20 Thread epytir
Hey Squid Users, Sorry for my bad english im learning it currently. I got a little problem with my squid proxy. I installed it with ufdbguard and squidclamav and everything works fine. The users login with kerberos ntlm or normal username passowrt authentication. My Problem is when Users start

Re: [squid-users] ssl_bump newbie troubles

2016-04-20 Thread Amos Jeffries
On 21/04/2016 2:16 a.m., Odhiambo Washington wrote: > Hi, > > I am trying my hands on ssl_bump and it's almost working, but that's > ish-ish.. because I have several problems. > > I even wonder if this config is correct: > > *acl step1 at_step SslBump1* > *acl step2 at_step SslBump2* > *acl step

Re: [squid-users] ssl_bump newbie troubles

2016-04-20 Thread Alex Rousskov
On 04/20/2016 08:16 AM, Odhiambo Washington wrote: > I even wonder if this config is correct: > > acl ssl_bump_broken_sites dstdomain ... > ssl_bump none ssl_bump_broken_sites > ssl_bump peek step1 > ssl_bump stare step2 > ssl_bump bump all You did not say what you want Squid to do, so it is di

Re: [squid-users] Routing Internally And/Or Externally?

2016-04-20 Thread Amos Jeffries
On 21/04/2016 2:12 a.m., nkingsquid wrote: > Amos, I have changed the code around a bit to reflect what you guys have been > telling me. The Netscaler is NATing. Security before, after, and around > the device is substantial, I will tweak the coded to reflect that at a later > time, at the moment

Re: [squid-users] New to proxies

2016-04-20 Thread Amos Jeffries
On 21/04/2016 2:12 a.m., cjwengler wrote: > I'm confused. I simply need high speed private proxies that work on sneakers > and shopping websites. > The use to which you would put them seems to be skirting the fine edge of the law in many countries. For certain you would be violating the shopping

Re: [squid-users] New to proxies

2016-04-20 Thread cjwengler
I'm confused. I simply need high speed private proxies that work on sneakers and shopping websites. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/New-to-proxies-tp4677151p4677171.html Sent from the Squid - Users mailing list archive at Nabble.com.

Re: [squid-users] Routing Internally And/Or Externally?

2016-04-20 Thread nkingsquid
Amos, I have changed the code around a bit to reflect what you guys have been telling me. The Netscaler is NATing. Security before, after, and around the device is substantial, I will tweak the coded to reflect that at a later time, at the moment I am desperately looking for that 1 answer I menti

Re: [squid-users] New to proxies

2016-04-20 Thread Mike
These are code words, they're looking to setup proxies to bypass filters, corporate networks, school blocks, and other setups designed to restrict their use (which they agreed to by using these limited networks). Another possibility is scammer/spammer using a virus with a proxy to reroute all s

Re: [squid-users] Routing Internally And/Or Externally?

2016-04-20 Thread nkingsquid
Eliezer, this was very Helpful! I have changed several things that you mentioned that were incorrect and I will post my code below (changing names and IPs to protect the confused :P ). At a high level this is my situation: Our users have devices that are supplied by us. On these devices we ha

[squid-users] ssl_bump newbie troubles

2016-04-20 Thread Odhiambo Washington
Hi, I am trying my hands on ssl_bump and it's almost working, but that's ish-ish.. because I have several problems. I even wonder if this config is correct: *acl step1 at_step SslBump1* *acl step2 at_step SslBump2* *acl step3 at_step SslBump3* *acl ssl_bump_broken_sites dstdomain "/usr/local/e

Re: [squid-users] New to proxies

2016-04-20 Thread cjwengler
Most sneaker websites only allow you to purchase one shoe/item per IP or orders cancel. I have 700 IPs right now but most aren't working. I need more too. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/New-to-proxies-tp4677151p4677166.html Sent from the Squ

Re: [squid-users] New to proxies

2016-04-20 Thread Antony Stone
On Wednesday 20 April 2016 at 14:34:07, cjwengler wrote: > I use the proxies for my sneaker program and I need one proxy per account > for that. Why? > Sometimes I run up to 1000 accounts. Do you have 1000 IP addresses? > The proxies are used for purchasing sneakers and clothing on sites such

Re: [squid-users] New to proxies

2016-04-20 Thread cjwengler
I use the proxies for my sneaker program and I need one proxy per account for that. Sometimes I run up to 1000 accounts. The proxies are used for purchasing sneakers and clothing on sites such as Nike, Adidas, Supreme, Footlocker, Eastbay, Champs, Finishline, etc. -- View this message in context

Re: [squid-users] Squid 4: Cloudflare SSL connection problem

2016-04-20 Thread Yuri Voinov
The latest tests shows that Squid for unknown reasons do outgoing connection using IPv6 only. Which leads to "Network unreacheble" with my ISP - it does not support IPv6. Full wireshark dumps for single outgoing transaction attached to bug already. 20.04.16 17:14, Eliezer Croitoru пишет: He

Re: [squid-users] Squid 4: Cloudflare SSL connection problem

2016-04-20 Thread Eliezer Croitoru
Hey Yuri, I think that the bug solution or identification is requiring a full tcpdump trace for a single request as was mentioned on the bug report: http://bugs.squid-cache.org/show_bug.cgi?id=4497#c39 http://bugs.squid-cache.org/show_bug.cgi?id=4497#c40

Re: [squid-users] Never expire any object Squid configuration

2016-04-20 Thread Amos Jeffries
On 20/04/2016 7:24 p.m., Veiko Kukk wrote: > Hi, > > We have a Squid between our server application and openstack swift > backend in accel/reverse mode with store-id configuraton (to strip > temporary authentication URL-s). We want that any object that has been > stored in squid cache is never aga

[squid-users] Never expire any object Squid configuration

2016-04-20 Thread Veiko Kukk
Hi, We have a Squid between our server application and openstack swift backend in accel/reverse mode with store-id configuraton (to strip temporary authentication URL-s). We want that any object that has been stored in squid cache is never again fetched from source and never again checked if