Re: [squid-users] HTTPS issues with squidguard after upgrading from squid 2.7 to 3.5

2016-06-15 Thread reqman
Seems nice. But I did not find any concrete documentation howto. Furthermore, answering back SSL requests without any SSL-bumping is an issue there as well. I'll try to have a better look, time allowed. M.- 2016-06-15 14:36 GMT+03:00 FredB : > >> >> You are mentioning ufdbGuard. Are its lists fre

Re: [squid-users] HTTPS issues with squidguard after upgrading from squid 2.7 to 3.5

2016-06-15 Thread Amos Jeffries
On 16/06/2016 6:12 a.m., Eliezer Croitoru wrote: > Hey Michael, > > > > Well I have not tested FreeBSD dependencies and patches and I am not > following them daily. > > The issue itself with SquidGuard and the url_rewrite interface is more of an > issue in most cases with CONNECT requests as

[squid-users] URL access based on AD group membership

2016-06-15 Thread Nilesh Gavali
please notify us by reply e-mail or telephone and immediately and permanently delete the message and any attachments. Thank you -- next part -- An HTML attachment was scrubbed... URL: < http://lists.squid-cache.org/pipermail/squid-users/attachments/20160615/a91ac99

Re: [squid-users] URL access based on AD group membership

2016-06-15 Thread Bruno de Paula Larini
Em 15/06/2016 10:50, nilesh.gav...@tcs.com escreveu: Hi Team; I have setup as below- * Squid Kerberos authentication with windows AD 2012r2. - works fine. * Now need to restrict access based on AD Group membership. Below configuration done but no luck. when try to access with user who is

Re: [squid-users] Queue incoming requests when fetching from origin

2016-06-15 Thread Alex Rousskov
On 06/14/2016 02:51 AM, Jaap Dam wrote: > I've part of the logging as an attachment. I'm requesting a single URL > in this log. The log starts with a stale cache of the item. Collapsed forwarding does not apply to cache revalidation requests yet. Factory is working on implementing collapsed reva

Re: [squid-users] URL access based on AD group membership

2016-06-15 Thread Amos Jeffries
On 16/06/2016 1:50 a.m., nilesh.gavali wrote: > Hi Team; > I have setup as below- > Squid Kerberos authentication with windows AD 2012r2. - works fine. > Now need to restrict access based on AD Group membership. > > Below configuration done but no luck. when try to access with user who is > not p

[squid-users] URL access based on AD group membership

2016-06-15 Thread nilesh . gavali
Hi Team; I have setup as below- Squid Kerberos authentication with windows AD 2012r2. - works fine. Now need to restrict access based on AD Group membership. Below configuration done but no luck. when try to access with user who is not part of the group mention, still he is able to browse Interne

Re: [squid-users] HTTPS issues with squidguard after upgrading from squid 2.7 to 3.5

2016-06-15 Thread Marcus Kool
On 06/15/2016 08:24 AM, reqman wrote: I have been using squidGuard for 10+ years. Not the best one could have, but I am accustomed to its use and idiosyncrasies. Furthermore, it is package well supported on FreeBSD. You are mentioning ufdbGuard. Are its lists free for government use? If not,

Re: [squid-users] HTTPS issues with squidguard after upgrading from squid 2.7 to 3.5

2016-06-15 Thread FredB
> > You are mentioning ufdbGuard. Are its lists free for government use? > If not, then I can not use it, since we have very strict purchasing > requirements, even if it costs $1. And of course, I would have to go > through evaluation, the usual learning curve etc. > > Don't get me wrong here, I

Re: [squid-users] HTTPS issues with squidguard after upgrading from squid 2.7 to 3.5

2016-06-15 Thread Marcus Kool
On 06/15/2016 04:22 AM, reqman wrote: Hello all, I have been running squid 2.7.X alongside squidguard 1.4 on a FreeBSD 8.x box for years. Started out some 10 years ago, with a much older squid/squidguard/FreeBSD combination. Having to upgrade to FreeBSD 10.3, I examined my option regarding sq

Re: [squid-users] Squid high memory usage

2016-06-15 Thread FredB
> > Yes I guess this is a good track for me (more or less 2 now ...) > Maybe half_closed should be help but unfortunately it crashes squid, > Bug 4156 > > Fred > ___ Maybe this is also related with the post "Excessive TCP memory usage" because I'

Re: [squid-users] Squid high memory usage

2016-06-15 Thread FredB
Yes I guess this is a good track for me (more or less 2 now ...) Maybe half_closed should be help but unfortunately it crashes squid, Bug 4156 Fred ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/s

Re: [squid-users] Squid high memory usage

2016-06-15 Thread Marcus Kool
On 06/15/2016 04:30 AM, FredB wrote: Maybe I'm wrong, but the server is also using many memories for TCP cat /proc/net/sockstat sockets: used 13523 TCP: inuse 8612 orphan 49 tw 31196 alloc 8728 mem 18237 UDP: inuse 14 mem 6 UDPLITE: inuse 0 RAW: inuse 0 FRAG: inuse 0 memory 0 netstat -lataupe

[squid-users] Squid not allowing HTTPS access

2016-06-15 Thread Nilesh Gavali
Thanks Amos for update. I tried the same as explain by you in earlier reply. but after this, Proxy response degraded like anything. also HTTPS site are not opening. So reverted back to the solution given by Eliezer. Next, I want to restrict the URL access based on AD OU membership for users, c

Re: [squid-users] HTTPS issues with squidguard after upgrading from squid 2.7 to 3.5

2016-06-15 Thread Eliezer Croitoru
Hey Michael, I am missing couple details about the setup which might affect the way we would be able to understand what is causing the issue and how to resolve it. There are changes from squid 2.7 to 3.5 and to my opinion these are mandatory to resolve and to not go one step back. What version o

Re: [squid-users] Squid high memory usage

2016-06-15 Thread FredB
Maybe I'm wrong, but the server is also using many memories for TCP cat /proc/net/sockstat sockets: used 13523 TCP: inuse 8612 orphan 49 tw 31196 alloc 8728 mem 18237 UDP: inuse 14 mem 6 UDPLITE: inuse 0 RAW: inuse 0 FRAG: inuse 0 memory 0 netstat -lataupen | wc -l 38780