Re: [squid-users] HTTPS issues with squidguard after upgrading from squid 2.7 to 3.5

2016-06-16 Thread reqman
Amos you are absolutely correct, don't know why I eradicated the newline between url_rewrite_program and url_rewrite_children. And thanks again to all posters for their help! 2016-06-17 5:34 GMT+03:00 Amos Jeffries : > On 16/06/2016 7:54 p.m., reqman wrote: >> Hello Eliezer, >> >> first let me th

Re: [squid-users] Regex optimization

2016-06-16 Thread Amos Jeffries
On 27/04/2016 11:32 p.m., Alfredo Rezinovsky wrote: > I saw in debug log that when an ACL has many regexes each one is compared > sequentially. > > If I have > > www.facebook.com > facebook.com > www.google.com > google.com > > If will be faster to check just ONE optimized regex like > (www\.)?(

Re: [squid-users] Regex optimization

2016-06-16 Thread Amos Jeffries
On 17/06/2016 10:23 a.m., Alfredo Rezinovsky wrote: > A small quantity of big regexes performs well. The CPU load is the same as > if there's no regex at all. > > The thing I don't understand is why this specific regex matches every uri I > throw at it in squid, but not in linux grep, or regex101.

Re: [squid-users] SQUID and accessing https urls failing

2016-06-16 Thread Amos Jeffries
On 17/06/2016 1:47 p.m., Blaxton wrote: > Hi > Squid is running with default and we can access HTTP URLsbut accessing to > HTTPS URLs timing out and nothing is being logged in log file. > I was assuming connecting to HTTPS URLs should work the same as HTTP > connections out of the box. They do n

Re: [squid-users] HTTPS issues with squidguard after upgrading from squid 2.7 to 3.5

2016-06-16 Thread Amos Jeffries
On 16/06/2016 7:54 p.m., reqman wrote: > Hello Eliezer, > > first let me thank you for providing a complete and detailed > explanation, I think I understand now what gives here. > > Minor note: Amos is correct in stating that url_rewrite_access > basically controls what is thrown into the redirec

[squid-users] SQUID and accessing https urls failing

2016-06-16 Thread Blaxton
Hi Squid is running with default and we can access HTTP URLsbut accessing to HTTPS URLs timing out and nothing is being logged in log file. I was assuming connecting to HTTPS URLs should work the same as HTTP connections out of the box. Thanks   ___ sq

Re: [squid-users] HTTPS issues with squidguard after upgrading from squid 2.7 to 3.5

2016-06-16 Thread Marcus Kool
On 06/16/2016 10:21 PM, Eliezer Croitoru wrote: I have a non-public question but if you can share it will be nice. What is the users size\capacity of the system? I am asking since I have seen that many squidGuard based systems have acted slower then with ICAP. By slower I mean that the initial

Re: [squid-users] Regex optimization

2016-06-16 Thread Alfredo Rezinovsky
A small quantity of big regexes performs well. The CPU load is the same as if there's no regex at all. The thing I don't understand is why this specific regex matches every uri I throw at it in squid, but not in linux grep, or regex101.com. The generation of the big regexes takes seconds and is d

Re: [squid-users] Regex optimization

2016-06-16 Thread Benjamin E. Nichols
On 6/16/2016 3:28 PM, Yuri Voinov wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I propose to nominate for the second place of the contest "The most inefficient use of computing resources - 2016." :-!:-D Because first place already occuped. :-D 30 millions pornsites in one squid's

Re: [squid-users] Regex optimization

2016-06-16 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I propose to nominate for the second place of the contest "The most inefficient use of computing resources - 2016." :-!:-D Because first place already occuped. :-D 30 millions pornsites in one squid's ACL and 7 minutes for squid -k refresh. 8-)

Re: [squid-users] Regex optimization

2016-06-16 Thread Antony Stone
On Thursday 16 June 2016 at 21:11:50, Alfredo Rezinovsky wrote: > Well.. I tried. > I need to ban 8613 URLs. Because a law. Have you considered https://www.urlfilterdb.com/products/ufdbguard.html ? > If I put one per line in a file and set the filename for an url_regex acl > it works. But when t

Re: [squid-users] Queue incoming requests when fetching from origin

2016-06-16 Thread Alex Rousskov
On 06/16/2016 01:45 AM, Jaap Dam wrote: > Thanks for the information. Could you elaborate on when collapsed > forwarding does apply? Squid is currently able to collapse HTTP client [miss] requests (but not internally generated HTTP requests triggered by HTTP client requests). Furthermore, to be c

Re: [squid-users] SSL Bump with valid CA

2016-06-16 Thread Alex Crow
> > Now i need to try to configurate squid with a non self-signed certificate > This is impossible, as you don't have access to the CA's signing key, for very good reason (you could create certs for any site in the world and it would be trusted by any browser that trusts StartSSL's CA). You

[squid-users] URL access based on AD group membership

2016-06-16 Thread Nilesh Gavali
Team; Further to me earlier mail , I did some test with LDAP group. but still no solution. I am able to authenticate with squid_ldap_auth helper but when I use squid_ldap_group helper it send error. pls let me know what i am doing wrong. Below is the o/p from the helper command. Same use is abl

Re: [squid-users] HTTPS issues with squidguard after upgrading from squid 2.7 to 3.5

2016-06-16 Thread Marcus Kool
On 06/16/2016 02:19 AM, reqman wrote: Seems nice. But I did not find any concrete documentation howto. There is a Reference Manual at the download section of ufdbGuard: https://www.urlfilterdb.com/downloads/software_doc.html There is also a mailing list for ufdbGuard at sourceforge and you c

[squid-users] SSL Bump with valid CA

2016-06-16 Thread afranoux
Hello, I'm student in computer lab and i finish a squid 3.5.19 with SSL-bump with self signed certificat in intercept mode (work well). Now i need to try to configurate squid with a non self-signed certificate My gait: openssl genrsa 2048 > redrocks.key openssl req -new -key redrocks

[squid-users] URL access based on AD group membership

2016-06-16 Thread Nilesh Gavali
Hello Team/Amos; can you pls...awaiting reply Thanks & Regards Nilesh Suresh Gavali From: Nilesh Gavali/MUM/TCS To: squid-users@lists.squid-cache.org, squ...@treenet.co.nz Date: 15/06/2016 20:14 Subject:URL access based on AD group membership Thanks Amos, for reply; My squid

Re: [squid-users] Queue incoming requests when fetching from origin

2016-06-16 Thread Jaap Dam
Hi Alex, Thanks for the information. Could you elaborate on when collapsed forwarding does apply? With your extra information, my assumption would be that it only applies on requests of a resource that has never been cached before. Or does it make more sense in a distributed Squid setup? Not sure