[squid-users] IPv6 only network

2017-10-30 Thread xpro6000
Unfortunately my ISP does not provide an IPv6 IP, I need to create an only IPv6 network so I can test an iphone app as required by the Apple store https://developer.apple.com/support/ipv6/ What I did was, I created a VPS with IPv6 support, I added the following to squid.conf http_port 3001 acl p

Re: [squid-users] Squid doesn't reload webpage like other clients do

2017-10-30 Thread Andrei
It's regarding active fingerprinting and mitigating attacks, not just it's passive use. (Sorry for the dbl send) On Oct 30, 2017 21:41, "Alex Rousskov" wrote: > On 10/30/2017 12:15 PM, Andrei wrote: > > You do realize that there's nothing "weird" about p0f, right? > > Right. I do not know why yo

Re: [squid-users] Squid doesn't reload webpage like other clients do

2017-10-30 Thread Alex Rousskov
On 10/30/2017 12:15 PM, Andrei wrote: > You do realize that there's nothing "weird" about p0f, right? Right. I do not know why you had to ask though: There is nothing related to p0f (i.e., a passive traffic analysis tool) in my response. And the original question is probably unrelated to p0f as we

Re: [squid-users] Squid doesn't reload webpage like other clients do

2017-10-30 Thread Andrei
You do realize that there's nothing "weird" about p0f, right? Perhaps you should have a read over: http://lcamtuf.coredump.cx/p0f3/ https://blog.cloudflare.com/introducing-the-p0f-bpf-compiler/ On Mon, Oct 30, 2017 at 11:22 AM, Alex Rousskov < rouss...@measurement-factory.com> wrote: > On 10/30

Re: [squid-users] Manager access for statistics

2017-10-30 Thread Amos Jeffries
On 30/10/17 12:01, James Moe wrote: On 10/29/2017 04:54 AM, Amos Jeffries wrote: What does access.log show for the manager request? The above port is IPv6-enabled but the manager_admin ACL only allows an IPv4. 1509311060.445 15 192.168.69.115 TCP_MISS/403 4464 GET http://proxy1.sma.com:3

Re: [squid-users] Squid doesn't reload webpage like other clients do

2017-10-30 Thread Alex Rousskov
On 10/30/2017 03:51 AM, Troiano Alessio wrote: > I've squid 3.5.20 running on RHEL 7.4. I have a problem to access > some websites, for example www.nato.int. This website apply an > Anti-DDoS system that reset the first connection after the TCP 3-way > handshake (SYN/SYN-ACK/ACK/RST-ACK). All subs

Re: [squid-users] Certificate for bump?

2017-10-30 Thread Yuri
Will not work. You need a root CA certificate with the "signing certificate request" property, not just "server/client authentication". 30.10.2017 21:29, erdosain9 пишет: > Hi. What you think about using certificate for bump from > https://letsencrypt.org??? > Thanks to all. > > > > -- > Sent fro

Re: [squid-users] Certificate for bump?

2017-10-30 Thread Aaron Turner
Unless you have very very narrow bump requirements for only domains you control, I don't see much use in that. -- Aaron Turner https://synfin.net/ Twitter: @synfinatic My father once told me that respect for the truth comes close to being the basis for all morality. "Something cannot emerg

[squid-users] Certificate for bump?

2017-10-30 Thread erdosain9
Hi. What you think about using certificate for bump from https://letsencrypt.org??? Thanks to all. -- Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html ___ squid-users mailing list squid-users@lists.squid-cache.o

[squid-users] Squid doesn't reload webpage like other clients do

2017-10-30 Thread Troiano Alessio
Hello, I've squid 3.5.20 running on RHEL 7.4. I have a problem to access some websites, for example www.nato.int. This website apply an Anti-DDoS system that reset the first connection after the TCP 3-way handshake (SYN/SYN-ACK/ACK/RST-ACK). All subsequent TCP connections are accepted. The websit