Re: [squid-users] acl problem

2017-08-29 Thread Amos Jeffries
On 30/08/17 03:12, Alex Gutiérrez Martínez wrote: Hello community, I just installed squid 3.3.8 on ubuntu 14.04. The use of this software is only providing the Internet to my users. But something is wrong with my setup. I must clarify that I use as an authentication system the Ldap plug-in that

Re: [squid-users] Squid Reverse Proxy and WebDAV caching

2017-08-29 Thread Amos Jeffries
On 30/08/17 04:02, Olivier MARCHETTA wrote: Hello, Sorry for posting fast. But if I have done another test using Internet Explorer to download the files instead of WebDAV. And now I will see the cache Hits raising up to 100% in the memory. Yay. -

Re: [squid-users] Squid Reverse Proxy and WebDAV caching

2017-08-29 Thread Olivier MARCHETTA
Hello, Sorry for posting fast. But if I have done another test using Internet Explorer to download the files instead of WebDAV. And now I will see the cache Hits raising up to 100% in the memory. --- Cache information for squid: Hi

Re: [squid-users] Squid Reverse Proxy and WebDAV caching

2017-08-29 Thread Olivier MARCHETTA
Hello again, I have quickly setup a Squid version 3.5.26 on Windows and with a minimalist config file: --- acl allsrc src all http_access allow allsrc http_port 3128 cache_dir ufs /cygdrive/c/squidcache 100 16 256 coredump_dir /var/

Re: [squid-users] squid stops replying

2017-08-29 Thread Vieri
Good news. My Squid process "failed" earlier than expected. This is one of the first warning messages I see in the log when it happens: WARNING! Your cache is running out of filedescriptors # squidclient mgr:info | grep 'file descri' Maximum number of file descriptors: 1024 Available number of f

Re: [squid-users] FATAL: shm_open(/squid-ssl_session_cache.shm)

2017-08-29 Thread Aaron Turner
Fair enough. I can understand why Squid would want to do that for user security purposes. Sounds like having a single layer/wide cache using the rock cache is the way to go. Probably would end up fixing a lot of issues I'm seeing. -- Aaron Turner https://synfin.net/ Twitter: @synfinatic

[squid-users] acl problem

2017-08-29 Thread Alex Gutiérrez Martínez
Hello community, I just installed squid 3.3.8 on ubuntu 14.04. The use of this software is only providing the Internet to my users. But something is wrong with my setup. I must clarify that I use as an authentication system the Ldap plug-in that comes with squid. The problem is that some acl, al

Re: [squid-users] extract http headers from CONNECT / bumped ssl?

2017-08-29 Thread Aaron Turner
Thanks Amos. I didn't realize that %>ha{} was a valid format. -- Aaron Turner https://synfin.net/ Twitter: @synfinatic My father once told me that respect for the truth comes close to being the basis for all morality. "Something cannot emerge from nothing," he said. This is profound thin

Re: [squid-users] Block WebRTC Leak using Squid

2017-08-29 Thread Sekar Duraisamy
browserleaks.com/ip . I am testing through Mozilla Browser On Mon, Aug 28, 2017 at 12:47 PM, Eliezer Croitoru wrote: > I remembered something so please also try: > http://ngtech.co.il/ip.php > > and compare it to the output of: > http://myip.net.il/ > > and please let us know what browsers have y

Re: [squid-users] Squid Reverse Proxy and WebDAV caching

2017-08-29 Thread Olivier MARCHETTA
Hello Amos, Thank you for your answer. I have applied the configuration updates you recommended. My squid config file is more simple now. But unfortunately, I can see the cache filling itselt, but not being hit. Here's the internal manager info log: ---

Re: [squid-users] FATAL: shm_open(/squid-ssl_session_cache.shm)

2017-08-29 Thread Alex Rousskov
On 08/28/2017 10:27 AM, Aaron Turner wrote: > So I guess what I'd like to know is how squid handles a multi-layer > cache config with ssl bumping? If you are asking how to SSL bump requests in one Squid worker and then satisfy those bumped requests in another Squid worker (and/or another Squid in

Re: [squid-users] Block WebRTC Leak using Squid

2017-08-29 Thread Eliezer Croitoru
I remembered something so please also try: http://ngtech.co.il/ip.php and compare it to the output of: http://myip.net.il/ and please let us know what browsers have you tested this with. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il

Re: [squid-users] Block WebRTC Leak using Squid

2017-08-29 Thread Eliezer Croitoru
Can you share the site which shows your real ip address so I can test it locally? Also what is the output of: http://myip.net.il/ Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:s

Re: [squid-users] Block WebRTC Leak using Squid

2017-08-29 Thread Amos Jeffries
On 28/08/17 21:19, Sekar Duraisamy wrote: browserleaks.com/ip . I am testing through Mozilla Browser One of the sites that use non-HTTP mechanisms to figure out their results. Squid has nothing to do with the data sources they are actually using. To see what details are being emitted through

Re: [squid-users] FATAL: shm_open(/squid-ssl_session_cache.shm)

2017-08-29 Thread Aaron Turner
Thanks Alex. So I guess what I'd like to know is how squid handles a multi-layer cache config with ssl bumping? For obvious performance reasons, I don't want to bump the same connection twice. Much rather have the first layer bump the connection and have a memory cache. If that cache is a miss,

Re: [squid-users] FATAL: shm_open(/squid-ssl_session_cache.shm)

2017-08-29 Thread Alex Rousskov
On 08/28/2017 12:06 PM, Aaron Turner wrote: > Sounds like having a single layer/wide cache using the rock cache is > the way to go. Probably would end up fixing a lot of issues I'm > seeing. Yes, but it will not fix all of them, and it will probably add a few new ones. You have to pick your poi

Re: [squid-users] Block WebRTC Leak using Squid

2017-08-29 Thread Eliezer Croitoru
Thanks for this useful site. This site cannot be used to test squid in any environment but only in a specific one. What the links I gave you shows? http://myip.net.il/ http://ngtech.co.il/ip.php ?? If you want to bullet proof you network and you have full control over it then you should use the