Re: [squid-users] https access only for few users

2017-11-09 Thread Amos Jeffries
On 10/11/17 08:36, Simon Dcunha wrote: Dear Amos, Million thanks for the immediate reply. i will check it out and let you know so sorry for being so silly regards simon You're Welcome, and no worries. Helping people learn to do things better is most of what this list is about. Amos

Re: [squid-users] url_rewrite_program and ACLs

2017-11-09 Thread Amos Jeffries
On 10/11/17 00:39, Vieri wrote: From: Amos Jeffries Darn. You have the one case that calls for keeping the helper :-( You can still move the ACLs that load in a reasonable times into squid.conf and leave the others in SG/ufdbguard. Using url_rewrite_access to

Re: [squid-users] Problem with squid and acces to localhost ipv6

2017-11-09 Thread Amos Jeffries
On 10/11/17 02:58, Nicolás Hervé wrote: Hi, I have a problem with some users who use pgadmin v4, sometimes a "connection to :: 1 failed" error appears when they enter http: // localhost: 55501 / the system returns (111) connection refused. Why can this be happening? and how can I solve it? T

Re: [squid-users] https access only for few users

2017-11-09 Thread Simon Dcunha
Dear Amos, Million thanks for the immediate reply. i will check it out and let you know so sorry for being so silly regards simon - Original Message - From: "Amos Jeffries" To: squid-users@lists.squid-cache.org Sent: Thursday, November 9, 2017 1:31:47 PM Subject: Re: [squid-users] ht

Re: [squid-users] Non intrusive sslbump for whitelisting (asked many times but..)

2017-11-09 Thread Amos Jeffries
On 09/11/17 11:34, A. Benz wrote: Hi Amos, Many thanks for your detailed reply. I have modified the config following your comments, before you see the new config (attached below), pls let me know your thoughts on the following: 1. > The workarounds and gotcha's listed at >

Re: [squid-users] SQUID memory error after vm.swappines changed from 60 to 10

2017-11-09 Thread Marcus Kool
On 09/11/17 11:04, Bike dernikov1 wrote: [snip] Memory compsumption:squid use largest part of memory (12GB now, second proces use 300MB memory), 14GB used by all process. So squid use over 80% of total used memory. So no there are not any problematic process. But we changed swappiness settings

Re: [squid-users] SQUID memory error after vm.swappines changed from 60 to 10

2017-11-09 Thread Alex Rousskov
On 11/09/2017 06:49 AM, Bike dernikov1 wrote: >>> On 11/08/2017 02:26 AM, Bike dernikov1 wrote: > So why didn't swap hop in? As I implied earlier, I do not recommend researching swap-related details because I do not recommend using (or relying on) swap. >> 2. Removing swap (or at least not coun

[squid-users] Problem with squid and acces to localhost ipv6

2017-11-09 Thread Nicolás Hervé
Hi, I have a problem with some users who use pgadmin v4, sometimes a "connection to :: 1 failed" error appears when they enter http: // localhost: 55501 / the system returns (111) connection refused. Why can this be happening? and how can I solve it? ___

Re: [squid-users] SQUID memory error after vm.swappines changed from 60 to 10

2017-11-09 Thread Bike dernikov1
>>On 11/08/2017 02:26 AM, Bike dernikov1 wrote: >> I hope that someone can explain what happened, why squid stopped working. >I can suggest a working theory: You did not have enough RAM before >vm.swappiness changes and the same insufficient RAM problem led to >failed system calls after you told

Re: [squid-users] url_rewrite_program and ACLs

2017-11-09 Thread Vieri
From: Amos Jeffries > > The shutdown time with two sequential calls should be only the time > needed to close all the open FD connections, shutdown helpers and > release however much memory Squid is using. All that happens in just a > few seconds normally I u

Re: [squid-users] SQUID memory error after vm.swappines changed from 60 to 10

2017-11-09 Thread Bike dernikov1
On Wed, Nov 8, 2017 at 3:48 PM, Marcus Kool wrote: > > On 08/11/17 11:36, Bike dernikov1 wrote: >> >> Hi, >> >> We stumbled on ufdbGuard, but licence/price was problem, we didn't >> read documentation carefully. > > yes, ufdbguard is free. > >> We will definitely try ufdbGuard, but we are now in p

Re: [squid-users] url_rewrite_program and ACLs

2017-11-09 Thread Vieri
From: Amos Jeffries > > Darn. You have the one case that calls for keeping the helper :-( > > You can still move the ACLs that load in a reasonable times into > squid.conf and leave the others in SG/ufdbguard. Using > url_rewrite_access to restrict which transac

Re: [squid-users] https access only for few users

2017-11-09 Thread Amos Jeffries
On 09/11/17 23:03, Simon Dcunha wrote: Dear All, I have squid running with no issues for a long time and recently i have the below task. User access to internet is based on physical machine IP address acl so only user ips listed in the conf file have access to internet i need to allow access

Re: [squid-users] url_rewrite_program and ACLs

2017-11-09 Thread Amos Jeffries
On 09/11/17 20:51, Vieri wrote: From: Amos Jeffries acl foo ... http_access deny foo deny_info 302:http://example.com/ foo In Squid-3.2+ the deny_info URL portion can use logformat macros for dynamic redirection - like the "rew" substitutions only changing

[squid-users] https access only for few users

2017-11-09 Thread Simon Dcunha
Dear All, I have squid running with no issues for a long time and recently i have the below task. User access to internet is based on physical machine IP address acl so only user ips listed in the conf file have access to internet i need to allow access to only one site for some users and deny

[squid-users] url_rewrite_extras can't send source port on tproxy mode

2017-11-09 Thread Ibrahim Ercan
Hi. I have a problem regarding tproxy. I configured squid with tproxy by below tutorial. https://wiki.squid-cache.org/Features/Tproxy4 Then I configured a url rewrite program as follows url_rewrite_program /path/to/foo.py url_rewrite_extras "%>a %>p" On nat configuration it is working well, but