Re: [squid-users] forward_max_tries 1 has no effect

2017-11-27 Thread Ivan Larionov
I think I found part of the config which triggers the retry. == # Check for newproxy request header acl newproxy_acl req_header x-use-newproxy -i true # proxy cache_peer 127.0.0.1 parent 18070 0 no-query no-digest no-netdb-exchange name=proxy cache_peer_access proxy deny newproxy_acl # newp

[squid-users] Transparent Squid

2017-11-27 Thread LINGYUN ZHAO
Dear Squid team, I need Squid as a real 'transparent' proxy on Fedora without changing 5 tuples. Is it possible? The setup is simple as Client -- Fedora Server The Squid version is 3.5.20.The key configuration on Squid as below: http_port 0.0.0.0:3128 transparent acl lo

Re: [squid-users] Working peek/splice no longer functioning on some sites

2017-11-27 Thread James Lay
On Sun, 2017-11-26 at 09:50 +0200, Alex K wrote: > Perhaps an alternative is to peek only on step1: > > acl step1 at_step SslBump1 > > ssl_bump peek step1 > acl allowed_https_sites ssl::server_name_regex > "/opt/etc/squid/http_url.txt" > ssl_bump splice allowed_https_sites > ssl_bump terminate al

Re: [squid-users] filtering HTTPS sites with transparent child Squid

2017-11-27 Thread Amos Jeffries
On 27/11/17 21:20, Stegner, Martin wrote: Hi everyone, I’ve set up a Squid as a transparent child-proxy. Every request is redirected to another Squid with the content filtering add-on e2guardian. I encounter the problem that the transparent child Squid only forwards IP-Addresses to the e2guar

[squid-users] filtering HTTPS sites with transparent child Squid

2017-11-27 Thread Stegner, Martin
Hi everyone, I've set up a Squid as a transparent child-proxy. Every request is redirected to another Squid with the content filtering add-on e2guardian. I encounter the problem that the transparent child Squid only forwards IP-Addresses to the e2guardian when HTTPS is used and so e2guardian ca