Re: [squid-users] forward_max_tries 1 has no effect

2017-11-29 Thread Ivan Larionov
Thanks Alex. Unfortunately I don't have enough C/C++ skills to fix it. I've created a bug report – https://bugs.squid-cache.org/show_bug.cgi?id=4788 We've also changed parent behavior so it will not silently close the connection but will return 502 in this exact situation and seems like it fixes

Re: [squid-users] Transparent Squid

2017-11-29 Thread Amos Jeffries
On 29/11/17 02:03, Matus UHLAR - fantomas wrote: On 27.11.17 11:24, LINGYUN ZHAO wrote: I need Squid as a real 'transparent' proxy on Fedora without changing 5 tuples. Is it possible? tuples? The technical name for an entry in the system NAT table is a 3-tuple or 4-tuple. Though what a "

Re: [squid-users] Working peek/splice no longer functioning on some sites

2017-11-29 Thread Amos Jeffries
On 28/11/17 03:50, James Lay wrote: On Sun, 2017-11-26 at 09:50 +0200, Alex K wrote: Perhaps an alternative is to peek only on step1: acl step1 at_step SslBump1 ssl_bump peek step1 acl allowed_https_sites ssl::server_name_regex "/opt/etc/squid/http_url.txt" ssl_bump splice allowed_https_site

Re: [squid-users] Fwd: [Squid-3.5.20]Squid transparent proxy http/https without client site config

2017-11-29 Thread Amos Jeffries
On 30/11/17 01:34, minh hưng đỗ hoàng wrote: Dear Amos, Sorry for concluded hurriedly. When i do a test with 1 user, it's seem ok, no more Aler from cache.log. But when i test with more users, the Alert log from cache.log happen again. And so i can't access some https page as chatwork.com , fac

Re: [squid-users] Fwd: [Squid-3.5.20]Squid transparent proxy http/https without client site config

2017-11-29 Thread minh hưng đỗ hoàng
Dear Amos, Sorry for concluded hurriedly. When i do a test with 1 user, it's seem ok, no more Aler from cache.log. But when i test with more users, the Alert log from cache.log happen again. And so i can't access some https page as chatwork.com , facebook.com 2017/11/29 18:06:41 kid1| SECURITY ALE