Almost, What I was talking about and meant was to take the current official
StoreID helper written in perl and remove the parts of the ID replacement while
leaving the regex matching intact.
Then pass to the StoreID helper the url and the source IP and let it match the
url to the regex from the
On 03/22/2017 09:25 AM, Eliezer Croitoru wrote:
> I didn't meant by convert the StoreID helper to convert it into an
> external_acl helper
> It has both OK and ERR and a "checklist" which would be a match or not.
Sigh. The combination of your answers does not make any sense to me.
Squid does
I'm afraid that rewriting the rules is a big job. I strongly doubt that
someone will lay it out in public open access for free. Saving traffic
is money.
Here's what I want to say. There are no really effective helpers in the
public domain. As I know.
22.03.2017 21:38, Eduardo Carneiro пишет:
> Hi
Hi Yuri.
The reason I came here is because I've already tried but I didn't succeed. I
really expected a more specific answer. Not just "You can fix it yourself,
the code is open."
Anyway, thanks. I'll Keep trying to fix this.
--
View this message in context:
http://squid-web-proxy-cache.10190
On 23/03/2017 2:44 a.m., Heiler Bemerguy wrote:
>
> Hi dude,
>
> I've noticed our users are being blocked by a rule which prevents
> CONNECTs to IP addresses instead of FQDN.
>
> What puzzles me is WHY skype is trying to connect to IPs even after
> connecting to FQDNs.. ? Have anyone noticed thi
Hey Alex,
I didn't meant by convert the StoreID helper to convert it into an external_acl
helper
It has both OK and ERR and a "checklist" which would be a match or not.
Eliezer
Eliezer Croitoru
Linux System Administrator
Mobile: +972-5-28704261
Email: elie...@ngtech.co.il
-Origi
If you do "lsof /var/log | grep -i delete" does it show squid writing to a
deleted access.log / cache.log?
j
From: "Chee M Gui"
To: squid-users@lists.squid-cache.org
Sent: Wednesday, March 22, 2017 10:17:32 AM
Subject: [squid-users] Squid stopped working after cache.log and access.log
r
On Wednesday 22 March 2017 at 16:17:32, Chee M Gui wrote:
> Hi All
>
> We recently installed Squid 3.5.12-1ubuntu7.3 on Ubuntu 16.04.2 LTS. It
> ran fine at first but stopped working after a while. telnet server 3128
> still works, i.e., opens a blank window, but Squid is just not accepting
>
Hi All
We recently installed Squid 3.5.12-1ubuntu7.3 on Ubuntu 16.04.2 LTS. It
ran fine at first but stopped working after a while. telnet server 3128
still works, i.e., opens a blank window, but Squid is just not accepting
requests.Then we realized that there is no new access.log file. T
On 03/22/2017 07:20 AM, Markus Wernig wrote:
> Small update:
>
> - The URL ... is the AIA for the Root CA
>
> Since squid is sslbumping the connection, it must be doing the AIA
> lookups (presumably for SSL verification). Does anybody have an idea why
> it is blocking its own requests?
My answer
Things are changed in the web on regular basis. Nothing permanent in the
world.
So, store ID rules lost relevance and no longer work.
You can fix it yourself, the code is open.
22.03.2017 20:35, Eduardo Carneiro пишет:
> I have been using this helper for a while. It works very well.
> Congratul
Thank you. In regards to the external ACL helper, would I basically say
something like:
external_acl_type foo %URL /path/to/my/helper
And then have my helper compare the contents of %URL to the mirror list and
spit out "OK" for pass or "ERR" for fail?
Thanks,
j
- Original Message -
I have been using this helper for a while. It works very well.
Congratulations!
But I noticed that after squid 3.5.19, this helper doesn't work anymore. Is
this a known problem? Is there any way to fix this?
Best regards.
Eduardo Carneiro
--
View this message in context:
http://squid-web-prox
Hi dude,
I've noticed our users are being blocked by a rule which prevents
CONNECTs to IP addresses instead of FQDN.
What puzzles me is WHY skype is trying to connect to IPs even after
connecting to FQDNs.. ? Have anyone noticed this? Any workaround apart
from whitelisting Microsoft IPs
On 03/21/2017 06:17 PM, Eliezer Croitoru wrote:
> The current StoreID helper can be converted pretty fast into what he needs.
Jason needs to block access. How can a [converted] StoreID helper block
access without becoming an external_acl helper?
Alex.
> -Original Message-
> From: squid-u
Small update:
- The URL http://apps.identrust.com/roots/dstrootcax3.p7c is not the
OCSP responder, but the AIA for the Root CA (DST Root CA X3) embedded in
the issuing CA's certificate's CA Issuers.
- Same for
http://swisssign.net/cgi-bin/authority/download/5B257B96A465517EB839F3C078665EE83AE7F0EE
On Wednesday 22 March 2017 at 11:59:14, christian brendan wrote:
> One more thing,
> Does this implies using two NICs (Network Interface Cards)?
No, this is not necessary.
> And the squid server has to be in-between clients and the internet?
That is the simpler way of doing it (in which case yo
One more thing,
Does this implies using two NICs (Network Interface Cards)?
And the squid server has to be in-between clients and the internet?
Regards
On Tue, Mar 21, 2017 at 5:29 PM, christian brendan <
bosscb.chrisb...@gmail.com> wrote:
> Thanks a lot for the information.
> I will try this
18 matches
Mail list logo
