Re: [squid-users] Wrong req_header result in cache_peer_access when using ssl_bump

2016-07-18 Thread Amos Jeffries
On 19/07/2016 3:19 a.m., Mihai Ene wrote: > Your details helped me understand a lot better. > > It turns out squid correctly adds the header to the CONNECT request, when > that request is made to another proxy. It cannot be itself, unfortunately, > because then it complains about a loop. > > Also

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2016-07-18 Thread Omid Kosari
Also i have seen that another guy did successfully something like that (not exactly ) in this thread http://squid-web-proxy-cache.1019090.n4.nabble.com/cache-peer-hit-miss-and-reject-td4661928.html -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Windows-Updat

Re: [squid-users] rep_header not working

2016-07-18 Thread Omid Kosari
Amos Jeffries wrote > On 19/07/2016 2:42 a.m., Omid Kosari wrote: >> Hello, >> >> It seems rep_header does not work at all. >> >> acl mshit rep_header X-SHMSCDN . >> acl mshit rep_header Content-Type -i text\/html >> acl html rep_header Content-Type -i ^text\/html >> acl apache rep_header Server

Re: [squid-users] rep_header not working

2016-07-18 Thread Omid Kosari
Eliezer Croitoru-2 wrote > Well I cannot say a thing until I will study the subject. > One thing I was thinking about was: > Can you analyze the squid access.log and to reduce from the account\user > the HIT traffic? > If so then I can recommend some log format special log to give you the > needed

Re: [squid-users] rep_header not working

2016-07-18 Thread Amos Jeffries
On 19/07/2016 2:42 a.m., Omid Kosari wrote: > Hello, > > It seems rep_header does not work at all. > > acl mshit rep_header X-SHMSCDN . > acl mshit rep_header Content-Type -i text\/html > acl html rep_header Content-Type -i ^text\/html > acl apache rep_header Server ^Apache > debug_options 28,3 >

Re: [squid-users] acl maxconn and max_user_ip config help please

2016-07-18 Thread Amos Jeffries
On 19/07/2016 5:12 p.m., B. Henry wrote: > Bless you Sir! > I think I follow you everywhere, and will study this carefully along with a > couple examples from the online documentation when I am trtaveling. > One last question on this topic; any gotchas with the max_user_ip acl rule? Yes, the same

Re: [squid-users] acl maxconn and max_user_ip config help please

2016-07-18 Thread B. Henry
Bless you Sir! I think I follow you everywhere, and will study this carefully along with a couple examples from the online documentation when I am trtaveling. One last question on this topic; any gotchas with the max_user_ip acl rule? And excuse my sloppy omission in > > http_access foo_MC My ign

Re: [squid-users] Skype+intercept+ssl_bump

2016-07-18 Thread Alex Rousskov
On 07/18/2016 01:27 AM, Amos Jeffries wrote: > On 15/07/2016 10:38 p.m., Evgeniy Kononov wrote: >> With this setup I have problem with group chats, calls and attachments in >> messages. > The problem is with identifying it in fairly reliable way from all the > other traffic. That is where we are

Re: [squid-users] rep_header not working

2016-07-18 Thread Eliezer Croitoru
Well I cannot say a thing until I will study the subject. One thing I was thinking about was: Can you analyze the squid access.log and to reduce from the account\user the HIT traffic? If so then I can recommend some log format special log to give you the needed details. Eliezer Eliezer Cro

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2016-07-18 Thread Omid Kosari
Alex Rousskov wrote > On 07/18/2016 05:39 AM, Omid Kosari wrote: > >> acl mshit rep_header X-SHMSCDN HIT >> clientside_tos 0x30 mshit > > You cannot use response-based ACLs like rep_header with clientside_tos. > That directive is currently evaluated only at request processing time, > before there

Re: [squid-users] rep_header not working

2016-07-18 Thread Omid Kosari
Hey Eliezer, I am aware of thay sentence . I have carefully read that . But as you see even apache or html one does not work . -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/rep-header-not-working-tp4678561p4678565.html Sent from the Squid - Users mailing l

Re: [squid-users] Skype+intercept+ssl_bump

2016-07-18 Thread Eliezer Croitoru
To clear out my idea, I was thinking about an option to decide if to bump or not based on a SSL handshake test on the destination Service. I do not know skype traffic that much but I do know that a PTR can be "faked" and have seen it couple times in the past. I considered what to do and one of t

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2016-07-18 Thread Alex Rousskov
On 07/18/2016 05:39 AM, Omid Kosari wrote: > acl mshit rep_header X-SHMSCDN HIT > clientside_tos 0x30 mshit You cannot use response-based ACLs like rep_header with clientside_tos. That directive is currently evaluated only at request processing time, before there is a response. > 2016/07/18 16:2

Re: [squid-users] rep_header not working

2016-07-18 Thread Eliezer Croitoru
Hey Omid, The issue is that the docs are unclear to *me* and I suspect that I will need to quote them: acl aclname rep_header header-name [-i] any\.regex\.here # regex match against any of the known reply headers. May be # thought of as a superset of "browser", "refere

[squid-users] rep_header not working

2016-07-18 Thread Omid Kosari
Hello, It seems rep_header does not work at all. acl mshit rep_header X-SHMSCDN . acl mshit rep_header Content-Type -i text\/html acl html rep_header Content-Type -i ^text\/html acl apache rep_header Server ^Apache debug_options 28,3 Other types of acl works fine the log is very huge because of

Re: [squid-users] Wrong req_header result in cache_peer_access when using ssl_bump

2016-07-18 Thread Mihai Ene
Your details helped me understand a lot better. It turns out squid correctly adds the header to the CONNECT request, when that request is made to another proxy. It cannot be itself, unfortunately, because then it complains about a loop. Also unfortunately, your suggestion of doing `ssl-bump` on t

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2016-07-18 Thread Eliezer Croitoru
About the mismatch log output I cannot say a thing since I have not researched it. And about an option to add a HIT HEADER you can use the next script: https://gist.github.com/elico/ac58073812b8cad14ef154d8730e22cb Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261

Re: [squid-users] Wrong req_header result in cache_peer_access when using ssl_bump

2016-07-18 Thread Amos Jeffries
On 18/07/2016 10:23 p.m., Mihai Ene wrote: > Hello, > > I have created a gist with the relevant parts of `cache.log` > (post-connection) > https://gist.github.com/randunel/5c0d282c52e9135aa21b8c6e28925a52 > > The following logs are available: > > 1. The initial HTTP CONNECT requests on port :800

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2016-07-18 Thread Omid Kosari
Dear Eliezer, Unfortunately no success . I will describe what i did maybe i missed something . run the command perl -pi -e '$/=""; s/\r\n\r\n/\r\nX-SHMSCDN: HIT\r\n\r\n/;' /cache1/header/v1/* and verified that the text injected correctly squid config acl mshit rep_header X-SHMSCDN HIT clients

Re: [squid-users] cache peer communication about HIT/MISS between squid and and non-squid peer

2016-07-18 Thread Amos Jeffries
On 18/07/2016 8:05 p.m., Omid Kosari wrote: > Maybe i should describe more . > The port 8080 is a parent peer of squid . It is > http://squid-web-proxy-cache.1019090.n4.nabble.com/Windows-Updates-a-Caching-Stub-zone-A-windows-updates-store-td4678454.html > > squid config is > > acl wu dstdom_reg

Re: [squid-users] This is first time I use squid, i don't know how to edit file squid.conf for start using squid

2016-07-18 Thread Antony Stone
On Monday 18 July 2016 at 11:33:52, james82 wrote: > No,no, you understand wrong. I mean where should I edit and edit what? Not > text problem,sir. 1. Find the section in your configuration file containing the line: #acl localnet src 192.168.0.0/16 # RFC1918 possible internal network 2. Add

Re: [squid-users] Wrong req_header result in cache_peer_access when using ssl_bump

2016-07-18 Thread Mihai Ene
Hello, I have created a gist with the relevant parts of `cache.log` (post-connection) https://gist.github.com/randunel/5c0d282c52e9135aa21b8c6e28925a52 The following logs are available: 1. The initial HTTP CONNECT requests on port :8000 on line 51 https://gist.github.com/randunel/5c0d282c52e9135

Re: [squid-users] This is first time I use squid, i don't know how to edit file squid.conf for start using squid

2016-07-18 Thread james82
No,no, you understand wrong. I mean where should I edit and edit what? Not text problem,sir. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/This-is-first-time-I-use-squid-i-don-t-know-how-to-edit-file-squid-conf-for-start-using-squid-tp4678548p4678552.html

Re: [squid-users] This is first time I use squid, i don't know how to edit file squid.conf for start using squid

2016-07-18 Thread Antony Stone
On Monday 18 July 2016 at 11:04:16, james82 wrote: > I am beginner. I'm not know so much about squid proxy . this is first time > i use it. Please tell us what you are trying to use it for - what do you want to get squid to do for you? > I follow step by step ( some tutorial blog ) Please tell

Re: [squid-users] This is first time I use squid, i don't know how to edit file squid.conf for start using squid

2016-07-18 Thread Andrey Ivnitsky
I can be mistake, but i think that is fat trolling. Or a person made a mistake with the choice of profession. Yuri Voinov писал 2016-07-18 15:00: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > I suggest be better you start from here: > > https://en.wikipedia.org/wiki/Text_editor > > h

Re: [squid-users] This is first time I use squid, i don't know how to edit file squid.conf for start using squid

2016-07-18 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I suggest be better you start from here: https://en.wikipedia.org/wiki/Text_editor https://en.wikipedia.org/wiki/List_of_text_editors There is no step-by-step instruction how to edit text file. This is very basic IT experience you must to have b

[squid-users] This is first time I use squid, i don't know how to edit file squid.conf for start using squid

2016-07-18 Thread james82
I am beginner. I'm not know so much about squid proxy . this is first time i use it. I follow step by step ( some tutorial blog ) and they said I have to edit file squid.conf for use it. I don't know how to edit it. please somebody tell me step step how to do it? i ask here because i need complete

Re: [squid-users] cache peer communication about HIT/MISS between squid and and non-squid peer

2016-07-18 Thread Omid Kosari
Maybe i should describe more . The port 8080 is a parent peer of squid . It is http://squid-web-proxy-cache.1019090.n4.nabble.com/Windows-Updates-a-Caching-Stub-zone-A-windows-updates-store-td4678454.html squid config is acl wu dstdom_regex \.download\.windowsupdate\.com$ acl wu-rejects dstdom_r

Re: [squid-users] Skype+intercept+ssl_bump

2016-07-18 Thread Amos Jeffries
On 15/07/2016 10:38 p.m., Evgeniy Kononov wrote: > Hello! > > Can you help me with correct settings for squid to use skype ? > FYI: there are currently no known "correct" setting for Skype when SSL-Bump is involved. There are settings known to work when Squid is setup as an explicit proxy, and

Re: [squid-users] acl maxconn and max_user_ip config help please

2016-07-18 Thread Amos Jeffries
On 18/07/2016 6:23 p.m., B. Henry wrote: > First, thanks for answering. > Second, I have read the entire default conf file, yes, once made the mistake > of reading one for a different squid version than mine, but then got a fresh > copy of the one for my exact version. > I've also read the FAQ, a