Re: [squid-users] TProxy not working (Squid 3.5.12, Ubuntu Server 16.04.1)

2016-10-26 Thread Jens Offenbach
@Amos Thank you very much for improving the Squid configuration. I am currently in the setup phase and "opened" everything, in order not to run into permission problems. I have added and removed your suggestions, respectively. The configuration looks much better now. I was able to solve my Tpro

Re: [squid-users] Using Squid to Create Multiple Proxy IP's

2016-10-26 Thread Amos Jeffries
On 27/10/2016 3:37 p.m., john huggins wrote: > Okay so if I create multiple private IP addresses on my virtual service > provider, how would I go about using them with squid. > > My goal: to use these IP's to spoof my public IP. If one gets banned or > goes dead, I just go to my network setting on

Re: [squid-users] Using Squid to Create Multiple Proxy IP's

2016-10-26 Thread Amos Jeffries
On 27/10/2016 3:18 p.m., john huggins wrote: > Okay maybe this makes more sense.. Can I assign multiple private IP's to it > all at once > Um ... The basic/default configuration of Squid does not involve IP assignments at all. Just a listening port (3128) receiving all traffic sent to that port

Re: [squid-users] Using Squid to Create Multiple Proxy IP's

2016-10-26 Thread john huggins
Okay so if I create multiple private IP addresses on my virtual service provider, how would I go about using them with squid. My goal: to use these IP's to spoof my public IP. If one gets banned or goes dead, I just go to my network setting on my local machine and change the proxy to an active "sp

Re: [squid-users] Using Squid to Create Multiple Proxy IP's

2016-10-26 Thread Amos Jeffries
On 27/10/2016 12:30 p.m., john huggins wrote: > I've looked up and down everywhere but I can't seem how to use squid to > mass create multiple proxy IP's. Any help would be appreciated it. > What do you mean by "create multiple proxy IP's" ?? IP and HTTP are different protocols. Neither one "cre

[squid-users] Using Squid to Create Multiple Proxy IP's

2016-10-26 Thread john huggins
I've looked up and down everywhere but I can't seem how to use squid to mass create multiple proxy IP's. Any help would be appreciated it. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] filtering http(s) sites, transparently

2016-10-26 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 27.10.2016 4:37, Amos Jeffries пишет: > On 27/10/2016 7:55 a.m., Yuri Voinov wrote: >> >> 27.10.2016 0:54, Jok Thuau пишет: >> >>> Setting up the client and the proxy to use a common infrastructure for >>> DNS (dnsmasq on the network) helped a lo

Re: [squid-users] filtering http(s) sites, transparently

2016-10-26 Thread Amos Jeffries
On 27/10/2016 7:55 a.m., Yuri Voinov wrote: > > 27.10.2016 0:54, Jok Thuau пишет: > >> Setting up the client and the proxy to use a common infrastructure for >> DNS (dnsmasq on the network) helped a lot. > > Yes, this is common and best practice already. I think, time to write > article on Wiki

Re: [squid-users] filtering http(s) sites, transparently

2016-10-26 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 27.10.2016 0:54, Jok Thuau пишет: > > On Wed, Oct 26, 2016 at 11:45 AM, Yuri Voinov mailto:yvoi...@gmail.com>> wrote: > > > > Jok, > > it can be DNS leak. Does you tested it? 8.8.8.8 can be poisoned (probably) or intercepted by ISP. > > >

Re: [squid-users] filtering http(s) sites, transparently

2016-10-26 Thread Jok Thuau
On Wed, Oct 26, 2016 at 11:45 AM, Yuri Voinov wrote: > > > Jok, > > it can be DNS leak. Does you tested it? 8.8.8.8 can be poisoned (probably) > or intercepted by ISP. > > DNS is working fine and is not being poisoned/intercepted/messed with. The records that come back from the google servers app

Re: [squid-users] filtering http(s) sites, transparently

2016-10-26 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jok, it can be DNS leak. Does you tested it? 8.8.8.8 can be poisoned (probably) or intercepted by ISP. 27.10.2016 0:01, Jok Thuau пишет: > After being side-tracked with a few different project, I ended up with the > config below. It appears to

Re: [squid-users] filtering http(s) sites, transparently

2016-10-26 Thread Jok Thuau
After being side-tracked with a few different project, I ended up with the config below. It appears to do the right things, though the ACL organization could use some cleanup... (Browsing to authorized sites works, browsing to something else, i get a denied page from squid) However, even though ms

Re: [squid-users] Problems with acltype "dst"

2016-10-26 Thread Sergio Belkin
Nevermind, shame of me :) I had a typo 2016-10-26 11:57 GMT-03:00 Sergio Belkin : > Hi, > > I've found that sometimes acl dst is ignored. > > I've found a workaround, that is adding the domain name corresponding to a > given Ip address to a separated dstdomain acltype. > > It's ugly because some

Re: [squid-users] Transparent and non Transparent at the same time

2016-10-26 Thread reinerotto
Just configure 2 different ports for squid to listen, one is transparent, the other is not. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Transparent-and-non-Transparent-at-the-same-time-tp4680309p4680314.html Sent from the Squid - Users mailing list archiv

[squid-users] Problems with acltype "dst"

2016-10-26 Thread Sergio Belkin
Hi, I've found that sometimes acl dst is ignored. I've found a workaround, that is adding the domain name corresponding to a given Ip address to a separated dstdomain acltype. It's ugly because sometimes users access to a websites by IP address... But I wonder why... is it has to do with that?

Re: [squid-users] Objects with values below 60 second for Cache-Control max-age are not cached

2016-10-26 Thread Garri Djavadyan
Sorry, Amos, it seems my latest reply was ambiguous. I tried to inform, that while debugging the issue I have found the cause. It was default value for 'minimum_expire_time'. On Wed, 2016-10-26 at 23:58 +1300, Amos Jeffries wrote: > On 26/10/2016 7:21 p.m., Garri Djavadyan wrote: > > > > On Wed,

Re: [squid-users] skype connection problem

2016-10-26 Thread Nicolas Valera
Well, this is really frustrating! I'm trying with socks5 and it doesn't work... the behavior is the same as https proxy, it tries to connect to the peer through udp, not through the proxy. i can't believe it! On 10/25/2016 11:44 AM, Eliezer Croitoru wrote: I am working on these but it involv

[squid-users] Connection problem when you reload in squid3.4

2016-10-26 Thread Yurian Gonzalez
I have a problem with squid3.4: The situation is: I have a web application that writes into several files for example: ip_lan.txt -> IP subnet of PC LAN mac_lan.txt -> Mac PC LAN subnet These files are used by squid3 to allow access, so that whenever the application modifies these files have

[squid-users] Transparent and non Transparent at the same time

2016-10-26 Thread erdosain9
Hi. Well, i just want to know if is possible config at the same time Transparent and No Transparent for different subnets... Like 192.168.1.0/24 No transparent 192.168.100.0/24-- Transparent i want this, because i have a net (1.0) that i can manager and other (100.0)

Re: [squid-users] external_acl_type problem

2016-10-26 Thread Amos Jeffries
On 27/10/2016 12:12 a.m., reinerotto wrote: > Looks like I found a workaround: To use %SRC %SRCPORT. Which avoids (at least > up to now) identical key. > So it looks like a bug in squid. > This _might_ be part of the problem: > 2016/10/26 06:11:28.417 kid1| 82,4| external_acl.cc(816) aclMatchExte

Re: [squid-users] external_acl_type problem

2016-10-26 Thread Amos Jeffries
On 26/10/2016 9:56 p.m., reinerotto wrote: >> You referred to some assumptions that we might have on a linux system but > the question from my side is: > What for example? > Disk Space? > Libraries? > Etc..< > > Sorry, I do not really know. I had one similar, very strange effect on my > embedded L

Re: [squid-users] external_acl_type problem

2016-10-26 Thread reinerotto
Looks like I found a workaround: To use %SRC %SRCPORT. Which avoids (at least up to now) identical key. So it looks like a bug in squid. This _might_ be part of the problem: 2016/10/26 06:11:28.417 kid1| 82,4| external_acl.cc(816) aclMatchExternal: entry = { date=1477480288, result=DENIED tag= lo

Re: [squid-users] TProxy not working (Squid 3.5.12, Ubuntu Server 16.04.1)

2016-10-26 Thread Amos Jeffries
On 26/10/2016 7:42 p.m., Jens Offenbach wrote: > Hi, > I am trying to setup a transparent proxy with Squid 3.5.12 on Ubuntu Server > 16.04.1, but I cannot get it working. When a client tries to connect to the > web, the connection always times out. > > Hopefully, someone has an idea what's going

Re: [squid-users] Objects with values below 60 second for Cache-Control max-age are not cached

2016-10-26 Thread Amos Jeffries
On 26/10/2016 7:21 p.m., Garri Djavadyan wrote: > On Wed, 2016-08-24 at 19:09 +0500, Garri Djavadyan wrote: >> On Mon, 2016-08-22 at 16:46 +0500, Garri Djavadyan wrote: >>> >>> Hello Squid users, >>> >>> Can anyone explain, why Squid doesn't cache the objects with max- >>> age >>> values below 60 s

Re: [squid-users] external_acl_type problem

2016-10-26 Thread Eliezer Croitoru
Thanks for the details! It gave me another perspective on things. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of reinerotto

Re: [squid-users] external_acl_type problem

2016-10-26 Thread reinerotto
>You referred to some assumptions that we might have on a linux system but the question from my side is: What for example? Disk Space? Libraries? Etc..< Sorry, I do not really know. I had one similar, very strange effect on my embedded LINUX, regarding bash: It was necessary for redirect function