Re: [squid-users] Why 3.5 and 4.x shows different tags in access.log due to CONNECT?

2016-04-23 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 http://bugs.squid-cache.org/show_bug.cgi?id=4503 24.04.16 3:25, Alex Rousskov пишет: > On 04/23/2016 02:38 PM, Yuri Voinov wrote: >> >> 4.x shows: >> >> 1461442623.529580 192.168.100.103 NONE_ABORTED/200 0 CONNECT >> 45.55.230.38:443 - ORIGIN

Re: [squid-users] Why 3.5 and 4.x shows different tags in access.log due to CONNECT?

2016-04-23 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Opens bug? 24.04.16 3:25, Alex Rousskov пишет: > On 04/23/2016 02:38 PM, Yuri Voinov wrote: >> >> 4.x shows: >> >> 1461442623.529580 192.168.100.103 NONE_ABORTED/200 0 CONNECT >> 45.55.230.38:443 - ORIGINAL_DST/45.55.230.38 - >> >> and this C

Re: [squid-users] Why 3.5 and 4.x shows different tags in access.log due to CONNECT?

2016-04-23 Thread Alex Rousskov
On 04/23/2016 02:38 PM, Yuri Voinov wrote: > > 4.x shows: > > 1461442623.529580 192.168.100.103 NONE_ABORTED/200 0 CONNECT > 45.55.230.38:443 - ORIGINAL_DST/45.55.230.38 - > > and this CONNECT is NOT aborted! > > 3.5.x shows: > > 1461442791.695462 192.168.100.102 TAG_NONE/200 0 CONNECT

[squid-users] Squid 3.5.17-1 is available for Ubuntu 14.04 LTS (online repo ubuntu.diladele.com)

2016-04-23 Thread Rafael Akchurin
Greetings everyone, The Squid 3.5.17-1 package for Ubuntu 14.04 LTS is now available. This version is recompiled using Squid DEB source from Debian Testing with some changes required to support SSL bump / libecap3 on Ubuntu 14.04 LTS. * Original release notes are at http://www.squid-cache.

[squid-users] Why 3.5 and 4.x shows different tags in access.log due to CONNECT?

2016-04-23 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 4.x shows: 1461442623.529580 192.168.100.103 NONE_ABORTED/200 0 CONNECT 45.55.230.38:443 - ORIGINAL_DST/45.55.230.38 - and this CONNECT is NOT aborted! 3.5.x shows: 1461442791.695462 192.168.100.102 TAG_NONE/200 0 CONNECT 91.250.107.40:

Re: [squid-users] Using Squid with 1 NIC

2016-04-23 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Without any sexual perversion with WCCP/NAT etc.etc.etc. Only regular CCNA/SA works. :) 24.04.16 1:26, Tom пишет: > Sorry for not being more clearer on my first post. So I have a VMware > environment running mostly CentOS 6 and multiple port grou

Re: [squid-users] Using Squid with 1 NIC

2016-04-23 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 In general, you're nobody forbids specify one visible from all networks IP address / network interface, define a proxy on it and use WPAD / PAC to configure clients by means of DHCP / DNS. 24.04.16 1:26, Tom пишет: > Sorry for not being more clear

Re: [squid-users] Using Squid with 1 NIC

2016-04-23 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 24.04.16 1:26, Tom пишет: > Sorry for not being more clearer on my first post. So I have a VMware > environment running mostly CentOS 6 and multiple port groups: > > Each port group it its own network segment. Please see below: > > 192.168.1.0/

Re: [squid-users] Using Squid with 1 NIC

2016-04-23 Thread Tom
Sorry for not being more clearer on my first post. So I have a VMware environment running mostly CentOS 6 and multiple port groups: Each port group it its own network segment. Please see below: 192.168.1.0/24 GW 192.168.1.1 proxy=192.168.1.2 CentOS servers in this network 192.168.1.0/24 192.168

Re: [squid-users] Using Squid with 1 NIC

2016-04-23 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I've based on op's diagram. We are know nothing about what he want. Thelepaty on Bali on vacation. 23.04.16 23:46, Antony Stone пишет: > On Saturday 23 April 2016 at 19:12:56, Yuri Voinov wrote: > >> http://wiki.squid-cache.org/ConfigExamples/Int

Re: [squid-users] Using Squid with 1 NIC

2016-04-23 Thread Antony Stone
On Saturday 23 April 2016 at 19:12:56, Yuri Voinov wrote: > http://wiki.squid-cache.org/ConfigExamples/Intercept Surely there's no reason to have to set up intercept mode (unless the OP can't configure the applications to use an explicit proxy)? I'm assuming the gateway 192.168.1.1 does outboun

Re: [squid-users] Using Squid with 1 NIC

2016-04-23 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 http://wiki.squid-cache.org/ConfigExamples/Intercept 23.04.16 23:08, Tom Ku пишет: > Hi All, > > I know this question has been beaten to death but I can't seem to find any answers via google. So i'm trying to set up a Squid proxy for my VMware i

[squid-users] Using Squid with 1 NIC

2016-04-23 Thread Tom Ku
Hi All, I know this question has been beaten to death but I can't seem to find any answers via google. So i'm trying to set up a Squid proxy for my VMware infrastructure. I have multiple port groups networks and I plan to put a Squid server in each port group to monitor network/internet traffic.

[squid-users] Squid 3.5.17 for Microsoft Windows 64-bit is available

2016-04-23 Thread Rafael Akchurin
Greetings everyone, The CygWin based build of Squid proxy for Microsoft Windows version 3.5.17 is now available (amd64 only!). * Original release notes are at http://www.squid-cache.org/Versions/v3/3.5/squid-3.5.17-RELEASENOTES.html. * Ready to use MSI package can be downloaded from http:/

Re: [squid-users] Need help with Squid on Windows

2016-04-23 Thread Rafael Akchurin
Hello Yuri and all, I would then try the process monitor that will most probably give an answer why the perl exe helper does not start. Best regards, Rafael -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Yuri Voinov Sent: Saturday,

Re: [squid-users] Need help with Squid on Windows

2016-04-23 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Raf, I can confirm - perl helpers (I've tried to use store-ID with Active Perl) does not work with Win version of Squid. I've tried to configure it several times. Without success. With the same symptoms. WBR, Yuri 23.04.16 18:26, Rafael Akchurin

Re: [squid-users] Need help with Squid on Windows

2016-04-23 Thread Rafael Akchurin
Hello Jason, Amos, all, Possibly the issue can be related to Squid being compiled with Cygwin https://cygwin.com/ml/cygwin/2012-03/msg00302.html, I'm not sure whether this issue with standard output has been fixed in the current Cygwin. One of the workarounds that could possibly work is to inst

Re: [squid-users] Browser circunvents acl's blocking https (intercept mode)

2016-04-23 Thread Amos Jeffries
On 23/04/2016 10:08 p.m., Jason Haar wrote: > On Sun, Apr 17, 2016 at 9:11 PM, Amos Jeffries wrote: > >> Like Jok mentioned Chrome is probably using QUIC protocol or one of the >> other non-HTTPS is uses. >> > > > Other non-HTTPS? Can you expand on that? I'm aware of QUIC (udp/443) and > ensure

Re: [squid-users] Browser circunvents acl's blocking https (intercept mode)

2016-04-23 Thread Jason Haar
On Sun, Apr 17, 2016 at 9:11 PM, Amos Jeffries wrote: > Like Jok mentioned Chrome is probably using QUIC protocol or one of the > other non-HTTPS is uses. > Other non-HTTPS? Can you expand on that? I'm aware of QUIC (udp/443) and ensure our firewalls block it so as to force it to tcp/443 - but