Re: [squid-users] How to intercept ssl_bump transparent NAT https websites

2017-05-28 Thread Amos Jeffries
On 29/05/17 07:52, Andi wrote: Hi I installed Squid 3.5.25 at debian with libecap3 too. Now my old squid.conf file for v3.48 not work anymore for redirected https websites. I get SSL_ERROR_RX_RECORD_TOO_LONG in Firefox. I redirected them before by Shorewall and it worked wit

Re: [squid-users] External ACL

2017-05-28 Thread avi_h
Hi Amos, So I tried working with some older versions of squid but i still got the same issue. This happens both with my basic helper in python and with the ext_sql_session_acl. I'm kinda lost. Any chance you have any advice? Is it possible that the issue is with the channel parameter? Thanks, Avi

Re: [squid-users] Youtube not TCP_HIT Squid3.5.21-25

2017-05-28 Thread Yuri
Yup, thank you, Amos, for details. I do not remember all changelogs exactly. 29.05.2017 3:09, Amos Jeffries пишет: > On 29/05/17 05:21, Yuri wrote: >> >> 28.05.2017 21:09, Eduardo Carneiro пишет: >>> Ok. Tell me what technical details you need and I post here. >> Configs. Logs. Topology. Usecases

Re: [squid-users] Youtube not TCP_HIT Squid3.5.21-25

2017-05-28 Thread Amos Jeffries
On 29/05/17 05:21, Yuri wrote: 28.05.2017 21:09, Eduardo Carneiro пишет: Ok. Tell me what technical details you need and I post here. Configs. Logs. Topology. Usecases. Examples for single transactions. But if this were an ignoring cache-control issue, wouldn't that happen on squid 3.5.19 and

[squid-users] How to intercept ssl_bump transparent NAT https websites

2017-05-28 Thread Andi
Hi I installed Squid 3.5.25 at debian with libecap3 too. Now my old squid.conf file for v3.48 not work anymore for redirected https websites. I get SSL_ERROR_RX_RECORD_TOO_LONG in Firefox. I redirected them before by Shorewall and it worked with v3.48 #SQUID-PORTS REDIRECT    loc    3140   

Re: [squid-users] Squid TPROXY issues with Google sites

2017-05-28 Thread Alex Rousskov
On 05/28/2017 05:40 AM, Vieri wrote: > Please keep in mind that I'm basically an end-user, a sys-admin. I > wish I had the time to study Squid's source code. Nobody (certainly not me) has suggested anything that requires studying Squid source code. If you think that I have, you have misinterprete

Re: [squid-users] Youtube not TCP_HIT Squid3.5.21-25

2017-05-28 Thread Yuri
28.05.2017 21:09, Eduardo Carneiro пишет: > Ok. Tell me what technical details you need and I post here. Configs. Logs. Topology. Usecases. Examples for single transactions. > > But if this were an ignoring cache-control issue, wouldn't that happen on > squid 3.5.19 and previous versions as well?

Re: [squid-users] Youtube not TCP_HIT Squid3.5.21-25

2017-05-28 Thread Eduardo Carneiro
Ok. Tell me what technical details you need and I post here. But if this were an ignoring cache-control issue, wouldn't that happen on squid 3.5.19 and previous versions as well? With the same conf works on 3.5.19 but not in newest squid3 versions. -- View this message in context: http://squi

Re: [squid-users] Youtube not TCP_HIT Squid3.5.21-25

2017-05-28 Thread Yuri
To better understanding pls read this and all related: http://wiki.squid-cache.org/ConfigExamples/DynamicContent http://wiki.squid-cache.org/Features/StoreID YT, FB, Vimeo uses dynamic content and requires additional efforts to make content cacheable (with some restrictions). The issue your exp

Re: [squid-users] Youtube not TCP_HIT Squid3.5.21-25

2017-05-28 Thread Eduardo Carneiro
As I said before, is a more larger problem. not just Youtube. If rewrite is necessary, doesn't work the cache. I tried with Youtube, Facebook, Vimeo, etc. Anyway I will try these links that you suggested and put here the results. It work very well until Squid 3.5.19. Not in newest versions. --

Re: [squid-users] Squid TPROXY issues with Google sites

2017-05-28 Thread Vieri
Hi Alex et al., Thank you very much for your analysis and help. I really appreciate it. Please keep in mind that I'm basically an end-user, a sys-admin. I wish I had the time to study Squid's source code. All I can do for now is read the docs that so many people have kindly published. In 99% o