[squid-users] Squid tcp_outgoing_mark issue

2017-06-19 Thread Sabu Thaliyath
Hi, I was using the squid directive "tcp_outgoing_mark" in squid 3.3 and it was working for me. However, in 3.5 version, it is not marking the packets. I was using it as tcp_outgoing_mark 0x5 all I was compiling squid using following options for configure ./configure --disable-arch-native --d

Re: [squid-users] Squid authentication problem (Amos Jeffries)

2017-06-19 Thread Sonya Roy
Hi, Thanks for the links. So I tried what you suggested and for testing, I was using this simple config:- http_port 8080 auth_param basic program /usr/lib/squid/basic_ncsa_auth /etc/squid/passwords auth_param basic realm proxy external_acl_type checkclient children-max=20 %MYADDR %LOGIN /usr/loca

Re: [squid-users] Squid authentication problem (Amos Jeffries)

2017-06-19 Thread Amos Jeffries
On 20/06/17 09:15, Amos Jeffries wrote: On 20/06/17 03:20, Sonya Roy wrote: Since you are saying the IP that can be passed to the helpers is configurable, how would I pass the local IP of the server that the client connected to? I checked out the helpers you mentioned, there they check which IP

Re: [squid-users] Squid authentication problem (Amos Jeffries)

2017-06-19 Thread Amos Jeffries
On 20/06/17 03:20, Sonya Roy wrote: Since you are saying the IP that can be passed to the helpers is configurable, how would I pass the local IP of the server that the client connected to? I checked out the helpers you mentioned, there they check which IP the connection is coming from. Not the l

Re: [squid-users] Do peek and stare function exact same at step 1? Also does dstdom_regex work in ssl_bump?

2017-06-19 Thread Alex Rousskov
On 06/19/2017 06:16 AM, Amish wrote: > I was referring to: > http://wiki.squid-cache.org/Features/SslPeekAndSplice#Actions > > Based on explanation I wonder if peek and stare are exactly same at step 1? Both look at the same Client Hello bytes but have at least one different side effect: * If y

Re: [squid-users] squid 4.0.20 does not recognize ssl-bump option.

2017-06-19 Thread Alex Rousskov
On 06/19/2017 03:12 AM, Amos Jeffries wrote: > On 19/06/17 10:53, Alex Rousskov wrote: >> * Squid does not know anything about LibreSSL. Somebody added the >> letters "LibreSSL" to squid.conf.documented, but that was a mistake IMO. > The mentions of LibreSSL in the current file are for things whic

Re: [squid-users] Squid authentication problem (Amos Jeffries)

2017-06-19 Thread Sonya Roy
Since you are saying the IP that can be passed to the helpers is configurable, how would I pass the local IP of the server that the client connected to? I checked out the helpers you mentioned, there they check which IP the connection is coming from. Not the local IP of the server that the client

Re: [squid-users] Squid authentication problem (Amos Jeffries)

2017-06-19 Thread Amos Jeffries
On 20/06/17 00:09, Sonya Roy wrote: Hi, From what I saw with using IP as part of then authentication, it checks which IP the user is connecting to the server from. What I want to check is which public IP of the server the user is connecting to. The IP is whichever one you pass to the various h

[squid-users] Do peek and stare function exact same at step 1? Also does dstdom_regex work in ssl_bump?

2017-06-19 Thread Amish
Hello, I was referring to: http://wiki.squid-cache.org/Features/SslPeekAndSplice#Actions Based on explanation I wonder if peek and stare are exactly same at step 1? If yes, which one should I use at step 1? peek or stare? I am asking because in future their function may change (at step 1). My

Re: [squid-users] Squid authentication problem (Amos Jeffries)

2017-06-19 Thread Sonya Roy
Hi, >From what I saw with using IP as part of then authentication, it checks which IP the user is connecting to the server from. What I want to check is which public IP of the server the user is connecting to. If someone connects to the server's IP address x.x.x.x, I want the outgoing traffic to

Re: [squid-users] squid 4.0.20 does not recognize ssl-bump option.

2017-06-19 Thread Amos Jeffries
On 19/06/17 10:53, Alex Rousskov wrote: On 06/18/2017 09:49 AM, meym wrote: On 06/17/2017 10:09 AM, meym wrote: Squid Cache: Version 4.0.20 "FATAL: Unknown http_port option 'ssl-bump'." Your Squid thinks it was built without OpenSSL support. OpenSSL support is required for SslBump. Examine yo