Re: [squid-users] WIndows Server AD+Squid Integration: Query User Specs

2017-10-31 Thread Periko Support
Done, is working. Thanks Yuri. On Tue, Oct 31, 2017 at 1:36 PM, Periko Support wrote: > Testing teacher, let u know, thanks and hi-5... > > On Tue, Oct 31, 2017 at 1:30 PM, Yuri wrote: >> (facepalm) Don't use superuser rights (or equivalent) - never - if you >> really won't require it. >> >> Yes

Re: [squid-users] With Rock storage, it seems an object can not be copied from disk cache to memory cache after a restart

2017-10-31 Thread duanyao
在 2017/11/1 上午11:27, Alex Rousskov 写道: On 10/31/2017 08:03 PM, duanyao wrote: it seems an object can never be copied from disk cache to memory cache after a restart. Is this normal? No, I do not think this is "normal". I do not remember intentionally disabling such functionality to work around

Re: [squid-users] With Rock storage, it seems an object can not be copied from disk cache to memory cache after a restart

2017-10-31 Thread Alex Rousskov
On 10/31/2017 08:03 PM, duanyao wrote: > it seems an object can never be copied from disk cache to memory > cache after a restart. Is this normal? No, I do not think this is "normal". I do not remember intentionally disabling such functionality to work around some other problem. However, my reco

[squid-users] With Rock storage, it seems an object can not be copied from disk cache to memory cache after a restart

2017-10-31 Thread duanyao
Hi, I have an issue: if I restart Squid (with Rock storage), I can no longer get TCP_MEM_HIT for any object got cached before that restart -- I always get TCP_HIT instead. Steps to reproduce: 1) Stop squid. 2) Remove & create a new Rock storage, start Squid. 3) Get a url via Squid, e.g.:

Re: [squid-users] adaptation_meta not passing through "%

2017-10-31 Thread Alex Rousskov
On 10/31/2017 02:42 PM, John Refwe wrote:   > I am trying to have squid pass through the destination server IP address > to my RESPMOD ICAP via the adaptation_meta directive. >   > My configuration line looks as follows: >   > adaptation_meta DST_IP "%https://github.com/squid-cache/squid/commit/7d

[squid-users] adaptation_meta not passing through "%

2017-10-31 Thread John Refwe
Hi!   I am trying to have squid pass through the destination server IP address to my RESPMOD ICAP via the adaptation_meta directive.   My configuration line looks as follows:   adaptation_meta DST_IP "%   I can successfully use adaptation_meta to pass through some other logformat codes (if

Re: [squid-users] WIndows Server AD+Squid Integration: Query User Specs

2017-10-31 Thread Periko Support
Testing teacher, let u know, thanks and hi-5... On Tue, Oct 31, 2017 at 1:30 PM, Yuri wrote: > (facepalm) Don't use superuser rights (or equivalent) - never - if you > really won't require it. > > Yes, any user who has permissions to read access to AD. > > 01.11.2017 2:28, Periko Support пишет: >

Re: [squid-users] WIndows Server AD+Squid Integration: Query User Specs

2017-10-31 Thread Yuri
(facepalm) Don't use superuser rights (or equivalent) - never - if you really won't require it. Yes, any user who has permissions to read access to AD. 01.11.2017 2:28, Periko Support пишет: > Don't hate me Yuri, this is why I ask first. > Group Users, them I can use any user for my squid setting

Re: [squid-users] WIndows Server AD+Squid Integration: Query User Specs

2017-10-31 Thread Periko Support
Don't hate me Yuri, this is why I ask first. Group Users, them I can use any user for my squid settings? Thanks...don't hate me please.. On Tue, Oct 31, 2017 at 1:19 PM, Yuri wrote: > > > 01.11.2017 2:16, Periko Support пишет: >> HI Guys. >> >> I want to integrate my authtenticacion vs a Windows

Re: [squid-users] WIndows Server AD+Squid Integration: Query User Specs

2017-10-31 Thread Yuri
01.11.2017 2:16, Periko Support пишет: > HI Guys. > > I want to integrate my authtenticacion vs a Windows Server 2012 R2 AD, > my doubt is related to the user I have to use from the AD. > > What type of user can I use for squid config to query our AD? > > Must be from the Admin group or must a sp

[squid-users] WIndows Server AD+Squid Integration: Query User Specs

2017-10-31 Thread Periko Support
HI Guys. I want to integrate my authtenticacion vs a Windows Server 2012 R2 AD, my doubt is related to the user I have to use from the AD. What type of user can I use for squid config to query our AD? Must be from the Admin group or must a specific role? Squid 3.5.x, thanks guys for your time!!

Re: [squid-users] Manager access for statistics

2017-10-31 Thread James Moe
On 10/30/2017 10:16 AM, Amos Jeffries wrote: > > Between them these entries appear to be saying that you have very > probably configured the Squid machines host name as "sma-server3" > instead of "proxy1.sma.com". > "proxy1.sma.com" is an alias for sma-server3.sma.com. I have tried using sma-

Re: [squid-users] Squid doesn't reload webpage like other clients do

2017-10-31 Thread Alex Rousskov
On 10/31/2017 02:51 AM, Amos Jeffries wrote: > That operational state (HTTP underway) also means RFC 7230 is the > relevant place to look for behaviour requirements. Section 6.3.1 says: >   A proxy MUST NOT automatically retry non-idempotent requests. > So it depends entirely on what type of HTTP

Re: [squid-users] R: Squid doesn't reload webpage like other clients do

2017-10-31 Thread Alex Rousskov
On 10/31/2017 02:53 AM, Amos Jeffries wrote: > On 31/10/17 21:29, Troiano Alessio wrote: >> Can't be an idea to "forward" the rst to the client? In this way the >> proxy will be totally transparent and the reload is demanded to the >> client (browser). > That one is already on the wishlist and eve

Re: [squid-users] IPv6 only network

2017-10-31 Thread Alex Rousskov
On 10/31/2017 01:13 AM, Amos Jeffries wrote: > Why disabling persistence? it has nothing to do with IPv4 vs IPv6. FWIW, the author is correctly following squid.conf instructions: "The use of this directive using client dependent ACLs is incompatible with the use of server side persistent connecti

Re: [squid-users] IPv6 only network

2017-10-31 Thread xpro6000
Since at home I only have IPv4, I can't fully disable ipv4 on the squid server OS. I think the best option for me would be to configure iptables to reject ipv4 on any port other than port "3001" which is what squid is accepting ipv4 connections to. Would that be possible with iptables? On Tue, Oct

Re: [squid-users] can't block streaming

2017-10-31 Thread Amos Jeffries
On 31/10/17 22:05, Vacheslav wrote: Peace, I tired searching and debugging but I couldn’t find a solution, whatever I do youtube keeps working. Here is my configuration: ... # Media Streams ## MediaPlayer MMS Protocol acl media rep_mime_type mms acl mediapr url_regex dvrplayer mediastrea

[squid-users] can't block streaming

2017-10-31 Thread Vacheslav
Peace, I tired searching and debugging but I couldn't find a solution, whatever I do youtube keeps working. Here is my configuration: # Recommended minimum configuration: # # Example rule allowing access from your local networks. # Adapt to list your (internal) IP networks from where

Re: [squid-users] R: Squid doesn't reload webpage like other clients do

2017-10-31 Thread Amos Jeffries
On 31/10/17 21:29, Troiano Alessio wrote: Thank you Alex. Can't be an idea to "forward" the rst to the client? In this way the proxy will be totally transparent and the reload is demanded to the client (browser). Alessio That one is already on the wishlist and even has a old patch that seems

Re: [squid-users] Squid doesn't reload webpage like other clients do

2017-10-31 Thread Amos Jeffries
On 31/10/17 05:22, Alex Rousskov wrote: On 10/30/2017 03:51 AM, Troiano Alessio wrote: I've squid 3.5.20 running on RHEL 7.4. I have a problem to access some websites, for example www.nato.int. This website apply an Anti-DDoS system that reset the first connection after the TCP 3-way handshake

[squid-users] R: Squid doesn't reload webpage like other clients do

2017-10-31 Thread Troiano Alessio
Thank you Alex. Can't be an idea to "forward" the rst to the client? In this way the proxy will be totally transparent and the reload is demanded to the client (browser). Alessio Il presente messaggio e-mail e ogni suo allegato devono intendersi indirizzati esclusivamente al destinatario indic

[squid-users] [icap] Web Safety 5.2 ICAP web filter plugin for Squid is now Release Candidate

2017-10-31 Thread Rafael Akchurin
Greetings all, The version 5.2.0.210A of Web Safety ICAP web filter for Squid proxy is announced as Release Candidate. It is now ready for broad deployment to production systems. The code is complete and anything new will only be added to the upcoming 5.3. This version contains the following fi

Re: [squid-users] IPv6 only network

2017-10-31 Thread Amos Jeffries
On 31/10/17 18:34, xpro6000 wrote: Unfortunately my ISP does not provide an IPv6 IP, I need to create an only IPv6 network so I can test an iphone app as required by the Apple store https://developer.apple.com/support/ipv6/ Squids' default behavi