Re: [squid-users] Limit Bandwith for youtube....

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I'm a little differently solve the problem of the speed limit streaming video. I limit the speed of the video on the router to the proxy, the proxy itself gives cached video streaming to the local network at full speed, because the speed of the loc

Re: [squid-users] Limit Bandwith for youtube....

Ok,thanks! But something is wrong with my config I dont have almost no users... (because is proxy testing) and i have too many download avg. Look , this is Torch to the ip of proxy, to see whats going on...

Re: [squid-users] Transparent intercept Squid 3.5.20: where VPNs go to die.

On 08/29/2016 10:43 AM, Stanford Prescott wrote: > Is there a way to tell Squid that there may be port 443 connections that > don't use TLS/SSL so that a useful message could be generated other than > the "connection failed" message the VPN client gives? Not quite, but we are slowly getting there

Re: [squid-users] ext_kerberos_ldap_group_acl problem ( 2 minorbugsmaybe )

Hi Louis, I know a user and machine account can be used and they work the same. What my concern is, is that many companies deploy password policies for users in AD. You would need to create exceptions for user accounts which have SPNs with associated keytabs as a password change will make

Re: [squid-users] Trouble negotiate_kerberos_auth

Hi Marcio, That looks OK. TT means the helper requires additional data from the client which I did not prepare a test for. In my case I get the AF response. # /opt/squid-trunk/sbin/negotiate_kerberos_auth_test opensuse42.suse.home | awk '{sub(/Token:/,"YR"); print $0}END{print "QQ"}' | /opt

Re: [squid-users] Wget https://www.google.com not download

I think you have to set all these environment variables, see my example: ftp_proxy=ftp://192.168.1.254:8213/ http_proxy=http://192.168.1.254:8213/ https_proxy=https://192.168.1.254:8213/ socks_proxy=socks://192.168.1.254:8213/ Also, I setted the proxy into the file: /etc/wgetrc Hope it helps

[squid-users] Transparent intercept Squid 3.5.20: where VPNs go to die.

I have successfully gotten Squid 3.5.20 to filter both HTTP and HTTPS in transparent intercept mode. With intercept mode, iptables rules redirect port 80 to squid's http_port 800 and HTTPS port 443 is redirected to Squid's https_port 801. It all seems to work exactly as it should. I have recently

Re: [squid-users] Limit Bandwith for youtube....

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Regex for fb video: fbcdn\.net\/v\/(.*\.mp4)\? Written with help of https://regex101.com. 29.08.2016 21:08, erdosain9 пишет: > ... and a last thing with this theme of limit video. for > facebook? > what would be the sysntax??? >

Re: [squid-users] squid user session/connections control

On 27/08/2016 4:57 a.m., Ahmed Alzaeem wrote: > hi amos > sorry i didn’t understand you > > did you mean that the settings below will limit connections per user to 100 > connection ? > > or per ip > > > can you clarify please ?? > On 26/08/2016 7:05 a.m., --Ahmad-- wrote: > > user will con

Re: [squid-users] Wget https://www.google.com not download

Are you sure it is working, some times when i try wget https:// www.google.com it is not download ""wget proxy tunneling failed bad request unable to establish ssl connection"" this message is appears when i try wget https:// URL's On 29-Aug-2016 9:15 pm, "FredB" wrot

Re: [squid-users] Wget https://www.google.com not download

> Set the environment with below command > Export http_ proxy=" 192.168.1.2:8080 " > HTTP > But when I download the website through http it is download. > Wget http://google.com > HTTPS export https_ proxy="192.168.1.2:8080" Fred ___ squid-users mai

[squid-users] Wget https://www.google.com not download

Hello Team, We have one centos 7 client machine and configure the proxy manually through command. Proxy ip 192.168.1.2 Proxy port 8080 Set the environment with below command Export http_ proxy="192.168.1.2:8080" But when I download the website through http it is download. Wget http://google.com

Re: [squid-users] Limit Bandwith for youtube....

... and a last thing with this theme of limit video. for facebook? what would be the sysntax??? (i get this on log https://video-yyz1-1.xx.fbcdn.net/v/t42.1790-2/14194700_1292914777409287_1273911953_n.mp4? - HIER_DIRECT/31.13.80.9 video/mp4 ) Thanks -- View this mess

Re: [squid-users] squid with random outgoing ip from pool of 1000 ips

On 08/29/2016 12:14 AM, --Ahmad-- wrote: > but can you confirm me about the list below if its correct ??? Sorry, I do not have the time to validate your math. > should it be like 1/9987 or .088787 formatting ? According to squid.conf.documented, both should work. However, I recommend the latt

Re: [squid-users] TCP_RESET non http requests on port 80

On 08/29/2016 07:40 AM, Omid Kosari wrote: > config: > http_reply_access deny all > deny_info TCP_RESET all > > = > test type: > telnet 123.com 80 > sgsdgsdgsdgsdg > > RESULT: > HTTP/1.1 403 Forbidden > Server: squid > Mime-Version: 1.0 > Date: Mon, 29 Aug 2016 13:30:47 GMT > Content-Type:

Re: [squid-users] TCP_RESET non http requests on port 80

Alex Rousskov wrote > On 08/28/2016 03:10 AM, Omid Kosari wrote: >> Alex Rousskov wrote >>> I understand that it works for regular requests. Does it also work >>> (i.e., >>> does Squid reset the connection) when handling a non-HTTP request on >>> port 80? > >> No , when the request is non-HTTP it

Re: [squid-users] ext_kerberos_ldap_group_acl problem

Hello Markus,   No, im not useing the latest from trunk Atm i use the ( by debian testing ) supplied 3.5.19. If you want me test test something, im happy to do that for you.   Best regards,   Louis       Van: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] Namens Mar

Re: [squid-users] ext_kerberos_ldap_group_acl problem ( 2 minorbugsmaybe )

Hello Markus,   Thank you for the explanation, that helped a lot.   I use the TLS_CACERTFILE in the init script now and that works for me . ( in debian the /etc/default/squid  )   >>The helper tries to “authenticate” squid to AD as a user with the found SPN >>name, so the UPN must be the