[squid-users] R: Go to intranet server through Squid

2018-05-17 Thread Troiano Alessio
If you do not define any exception all the web requests are forwarded to squid proxy. So, the only thing you have to check is that squid can reach the server 192.168.10.10 (routing and/or firewall policy). Also check that squid uses your local DNS server and resolves the correct IP address. Il

Re: [squid-users] Running Squid fully as root

2018-05-17 Thread Antony Stone
On Thursday 17 May 2018 at 22:24:40, Aaron Hall wrote: > Greetings everyone. > > Does anyone a "proper" way to run squid directly as "root" rather than the > squid user on linux? Why do you want to? There are good reasons not to do this. What is a good reason to want to do this? > Basic inte

[squid-users] Running Squid fully as root

2018-05-17 Thread Aaron Hall
Greetings everyone. Does anyone a "proper" way to run squid directly as "root" rather than the squid user on linux? Basic internet searches don't appear to give much of an answer. OS: Centos 7.x Squid Ver: 3.5.20 Cheers. -- Aaron Hall The Paranoids Network Security aaron.h...@oath.com _

[squid-users] Go to intranet server through Squid

2018-05-17 Thread Roberto Carna
Hi people, I have a Squid 3.1.20 for web browsing. I have a local intranet server called "intranet.com.ar.com" resolving to 192.168.10.10. This resolution is defined in my local DNS servers and in /etc/hosts file from Squid. Is there any way to send the web connections to intranet.company.com thr

Re: [squid-users] kaspersky and ufdbguard

2018-05-17 Thread Marcus Kool
I do not block my Kaspersky AV. Do you want the Kaspersky software contact the servers of Kaspersky ? On 17/05/18 09:30, Vacheslav wrote: Yeah all that I know, The million dollar question is should I continue blocking it? -Original Message- From: squid-users On Behalf Of Marcus Kool

[squid-users] Auth bearer support for forward proxy

2018-05-17 Thread Panagiotis Bariamis
Hello , Only thing I have found concerning the subject is this 4 years old thread : >From: Amos Jeffries >Date: Sun, 08 Jun 2014 14:46:09 +1200 >Message-ID: <5393ce71.5070...@treenet.co.nz> >To: "ietf-http...@w3.org" >I have implemented Bearer authentication support in Squid and have found >a n

Re: [squid-users] Squid with HTTP/2

2018-05-17 Thread Amos Jeffries
On 18/05/18 00:23, Chanaka Lakmal wrote: > Hi, > > Does Squid supports HTTP/2 protocol? If so, what is the version it supports? > No and "sort of". Squid does not yet support it natively. Squid does support h2 tunneled inside TLS (except when SSL-Bumping) in the same way HTTPS has always been su

Re: [squid-users] kaspersky and ufdbguard

2018-05-17 Thread Vacheslav
Yeah all that I know, The million dollar question is should I continue blocking it? -Original Message- From: squid-users On Behalf Of Marcus Kool Sent: Thursday, May 17, 2018 3:22 PM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] kaspersky and ufdbguard 195.122.177.16

[squid-users] Squid with HTTP/2

2018-05-17 Thread Chanaka Lakmal
Hi, Does Squid supports HTTP/2 protocol? If so, what is the version it supports? Regards, Chanaka Lakmal ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] kaspersky and ufdbguard

2018-05-17 Thread Marcus Kool
195.122.177.165 is an IP address of Kaspersky (see whois 195.122.177.165). ufdbguardd blocks this IP address since it is configured to do so which is indicated by 'https-option', most likely because the config has option enforce-https-with-hostname on # default is off. Marcus On 17/05/18 08

Re: [squid-users] kaspersky and ufdbguard

2018-05-17 Thread Vacheslav
I have this: acl { allSystems { ### EDIT THE NEXT LINE FOR LOCAL CONFIGURATION: pass alwaysallow # !always-block !ms-data-collection !adult !security !proxies !malware !warez !gambling !violence !drugs

Re: [squid-users] kaspersky and ufdbguard

2018-05-17 Thread Amos Jeffries
On 17/05/18 17:45, Vacheslav wrote: > Peace, > > When I configured Kaspersky to use proxy, I started getting as an example: > > BLOCK -    10.96.0.104 config https-option  > 195.122.177.165:443 CONNECT > > I have require https hostname. Kaspersky is updating fine. > > Anyone

Re: [squid-users] TCP FIN,ACK after ServerHelloDone with pcmag.com

2018-05-17 Thread Ahmad, Sarfaraz
Guys, Any thoughts ? Regards, Sarfaraz -Original Message- From: Ahmad, Sarfaraz Sent: Wednesday, May 16, 2018 10:36 AM To: 'Marcus Kool' ; squid-users@lists.squid-cache.org Subject: RE: [squid-users] TCP FIN,ACK after ServerHelloDone with pcmag.com I see a message similar to Marcus' i

Re: [squid-users] Very High Response Times to Certain Websites with Squid

2018-05-17 Thread Amos Jeffries
On 17/05/18 16:15, Justin & Roseanne James wrote: > > I'm not doing anything special. Squid is running transparently and I > have iptables rules setup to forward port 80 and 443 traffic > appropriately from my firewall to my squid box. Traffic must be *routed* between machines. The NAT step must