Re: [squid-users] source spoofing without tproxy?

2017-06-12 Thread David Kewley
Thanks for your reply, Amos. On Mon, Jun 12, 2017 at 9:50 PM, Amos Jeffries wrote: > On 13/06/17 13:48, David Kewley wrote: > >> I want my clients to explicitly address squid as a proxy (not use >> tproxy), but have squid spoof the source addresses in the forwarded >> connection, so that further

Re: [squid-users] Error Compiling squid-3.5.26 with libecap-1.0.1 on CentOS Linux release 7.3.1611

2017-06-12 Thread Norbert Naveen
Hello The Make output can be found at https://drive.google.com/open?id=0B_dDVNpzSGEKcFlMSlBVZWs5c2c Thanks Naveen -Original Message- From: Alex Rousskov [mailto:rouss...@measurement-factory.com] Sent: Tuesday, June 13, 2017 2:12 AM To: norbert.nav...@tayana.in; squid-users@lists.s

Re: [squid-users] source spoofing without tproxy?

2017-06-12 Thread Amos Jeffries
On 13/06/17 13:48, David Kewley wrote: I want my clients to explicitly address squid as a proxy (not use tproxy), but have squid spoof the source addresses in the forwarded connection, so that further hops know the original source address from the IPv4 headers. I could find no indication that

Re: [squid-users] Content / Message JS Injection for HTTP Pages Only

2017-06-12 Thread Amos Jeffries
On 13/06/17 08:36, Eliezer Croitoru wrote: Hey Naveen, ECAP and ICAP been in use for such things very long ago. This is one of the reasons for the movement in the network to encrypt traffic and also to pin certificates in the applications. You will need to choose to go either with ECAP or ICAP a

Re: [squid-users] Content / Message JS Injection for HTTP Pages Only

2017-06-12 Thread Norbert Naveen
Hello Eliezer Thanks for your response shall have a look at it and revert Between ECAP & ICAP which one is optimal ? Something I have for reference is below http://wiki.squid-cache.org/SquidFaq/ContentAdaptation#Summary Kindly suggest Thanks Naveen -Original Message- From:

Re: [squid-users] client-->iptables-->squid-proxy->another-proxy

2017-06-12 Thread Amos Jeffries
On 13/06/17 08:33, JerylCook wrote: I've been stuck on this for a few days :P... I 'thought' I had a fairly good understanding of squid + ssl_bump but not so sure. In a nutshell i am having an issue linking a second proxy server via cache_peer. we have 2 boxes. *Configuration:* 1 box, has i

[squid-users] source spoofing without tproxy?

2017-06-12 Thread David Kewley
I want my clients to explicitly address squid as a proxy (not use tproxy), but have squid spoof the source addresses in the forwarded connection, so that further hops know the original source address from the IPv4 headers. I could find no indication that anyone else has done this, and when I tried

[squid-users] client-->iptables-->squid-proxy->another-proxy

2017-06-12 Thread JerylCook
I've been stuck on this for a few days :P... I 'thought' I had a fairly good understanding of squid + ssl_bump but not so sure. In a nutshell i am having an issue linking a second proxy server via cache_peer. we have 2 boxes. *Configuration:* 1 box, has iptables configured to send all outbound

Re: [squid-users] Error Compiling squid-3.5.26 with libecap-1.0.1 on CentOS Linux release 7.3.1611

2017-06-12 Thread Alex Rousskov
On 06/12/2017 11:29 AM, Norbert Naveen wrote: > I have attached Outputs of both Configure and Make > And libecap.pc contents are as below Your ./configure output and libecap.pc contents look good to me, but there is no sign of the eCAP library (-lecap) being linked with Squid during "make". If

Re: [squid-users] Content / Message JS Injection for HTTP Pages Only

2017-06-12 Thread Eliezer Croitoru
Hey Naveen, ECAP and ICAP been in use for such things very long ago. This is one of the reasons for the movement in the network to encrypt traffic and also to pin certificates in the applications. You will need to choose to go either with ECAP or ICAP and from there the direction is pretty simple.

Re: [squid-users] Office 365 Support for Squid Proxy

2017-06-12 Thread Eliezer Croitoru
The main question is if it uses websockets or not and if you are using SSL-BUMP or not. If you are using SSL-BUMP it's one thing while if you are not it’s another story. Also it will be different if you are using the proxy in INTERCEPT mode or a regular forward proxy mode. We would be able to an

Re: [squid-users] Office 365 Support for Squid Proxy

2017-06-12 Thread Leonardo Rodrigues
i have a lot of customers who access Office 365 through squid proxies and have no problem at all. Office 365 is just another website, there's absolutely no need for special configurations for it to simply work. Em 12/06/17 06:05, Blason R escreveu: Hello All, If someone can confirm if

[squid-users] Content / Message JS Injection for HTTP Pages Only

2017-06-12 Thread Norbert Naveen
Hello Squid Admins Squid 3.5 acts as HTTP Proxy only and does not allow any other kind of Traffic For Such a Setup where only HTTP traffic flows through Squid I want to Insert a Banner / Java Script based Dynamic Page in the HTTP response , to notify the users or alert the users based on thei

Re: [squid-users] Error Compiling squid-3.5.26 with libecap-1.0.1 on CentOS Linux release 7.3.1611

2017-06-12 Thread Norbert Naveen
Hello Alex, Output of configure as below squid-3.5.26]# ./configure '--enable-ecap' 'PKG_CONFIG_PATH=/usr/local/lib/pkgconfig' checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for a thread-safe mkdir -p... /usr/bin/mkdir -

Re: [squid-users] Error Compiling squid-3.5.26 with libecap-1.0.1 on CentOS Linux release 7.3.1611

2017-06-12 Thread Norbert Naveen
Hello Alex Sorry and Thanks for the response , I have attached Outputs of both Configure and Make And libecap.pc contents are as below # cat /usr/local/lib/pkgconfig/libecap.pc prefix=/usr/local exec_prefix=${prefix} libdir=${exec_prefix}/lib includedir=${prefix}/include Name: eCAP Descript

Re: [squid-users] Error Compiling squid-3.5.26 with libecap-1.0.1 on CentOS Linux release 7.3.1611

2017-06-12 Thread Alex Rousskov
On 06/12/2017 10:36 AM, Norbert Naveen wrote: > I have CentOS Linux release 7.3.1611 64 bit > cd libecap-1.0.1 > ./configure 'CXXFLAGS=-O2 -m64 -pipe' 'CFLAGS=-O2 -m64 -pipe' > gmake > gmake install-strip > cd squid-3.5.26 > ./configure '--enable-ecap' 'PKG_CONFIG_PATH=/usr/local/lib/pkgconfig'

[squid-users] Error Compiling squid-3.5.26 with libecap-1.0.1 on CentOS Linux release 7.3.1611

2017-06-12 Thread Norbert Naveen
Hello I have CentOS Linux release 7.3.1611 64 bit On the same I tried to Install the below cd libecap-1.0.1 ./configure 'CXXFLAGS=-O2 -m64 -pipe' 'CFLAGS=-O2 -m64 -pipe' gmake gmake install-strip cd squid-3.5.26 ./configure '--enable-ecap' 'PKG_CONFIG_PATH=/usr/local/lib/pkgcon

[squid-users] Office 365 Support for Squid Proxy

2017-06-12 Thread Blason R
Hello All, If someone can confirm if squid can very well work with Office 365? If anyone has any documentation can someone please forward that to me? I do have almost around 400 Office 365 users hence wanted to know what configuration I might need for Office 365 traffic? __