Re: [squid-users] Content Adaptation with HTTPs

2017-08-19 Thread Christopher Ahrens
The current solution doesn't work for me since it only supports a very limited number of clients. I am working with a charity that provides internet services to those with impaired vision, the intention of my project was to set up a semi-public proxy for recipient of the charity (EG, we woul

Re: [squid-users] client-->iptables-->squid-proxy->another-proxy

2017-08-19 Thread Diogenes S. Jesus
For those looking into this topic, I was able to make it work on 3.5. The trick is to have "ssl_bump splice all". My upstream proxy is 10.1.7.7:3128. This is all in Ubuntu 16.04 - however the squid package was rebuilt due to lack of --with-openssl and --enable-ssl (there are several guides on the i

Re: [squid-users] IPv6 and TPROXY

2017-08-19 Thread Amos Jeffries
On 20/08/17 12:08, Eliezer Croitoru wrote: You can use tproxy but you will need to somehow make it so squid will do "NAT" instead of only tproxy or to findout what is causing the issue to happen in the network layer of the connection. It can be a simple iptables rule which block traffic or anot

Re: [squid-users] Content Adaptation with HTTPs

2017-08-19 Thread Eliezer Croitoru
Hey Christopher, For such a solution you will be required to have a content adaptation service that was designed to render the JS and other content in the page. It's not something you would find out there just waiting for you since a lot of work is required to write such a piece of software. The

Re: [squid-users] IPv6 and TPROXY

2017-08-19 Thread Eliezer Croitoru
You can use tproxy but you will need to somehow make it so squid will do "NAT" instead of only tproxy or to findout what is causing the issue to happen in the network layer of the connection. It can be a simple iptables rule which block traffic or another issue like rp_filter. If you are up to i

[squid-users] Content Adaptation with HTTPs

2017-08-19 Thread Christopher Ahrens
I am looking for guidance on doing Content Adaptation with https traffic on my network to aid some accessibility systems like increasing the contrast between text and the background (Modifying font color and background tags, removing background images) or removing extraneous content such a soci

Re: [squid-users] IPv6 and TPROXY

2017-08-19 Thread Walter H.
Hello, not really, I must live with the fact, that I can't configure tproxy, as I can't update any kernel ... Walter On 19.08.2017 22:09, Eliezer Croitoru wrote: Any progress with the issue? Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngt

Re: [squid-users] IPv6 and TPROXY

2017-08-19 Thread Eliezer Croitoru
Any progress with the issue? Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: Walter H. [mailto:walte...@mathemainzel.info] Sent: Sunday, August 13, 2017 21:31 To: Eliezer Croitoru Cc: squid-users@li

Re: [squid-users] Memory leak (was: Squid 3.x never_direct and DNS requests problem.)

2017-08-19 Thread Eliezer Croitoru
Hey Emmanuel, Something is not clear to me. Are you using url_rewrite or store_id helpers in any form? Also what DNS lookups squid does exactly? - Reverse - Forward Also: - internal clients - external domains Thanks, Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-287042

Re: [squid-users] Squid IPv4:port to IPv6

2017-08-19 Thread Amos Jeffries
On 19/08/17 18:15, Walter H. wrote: On 19.08.2017 04:03, davidjesse091 wrote: I'm trying to connect to Squid with one IPv4 IP and based on the port I'm connecting with, I want Squid to use a different IPv6 IP for the connection. NP: you are making two wrong assumptions here. 1) that Squid on