Re: [squid-users] About SSL peek-n-splice/bump configurations

2018-09-06 Thread Alex Rousskov
On 09/06/2018 10:18 PM, Amos Jeffries wrote: > So... (lets call this config A) > > #step1 does this: > >> ssl_bump peek step1 all > > #step2 does this: > >> ssl_bump peek step2 noBumpSites >> ssl_bump bump > > If the bump at step2 happened, there is no step3. > > #step3 does this: > >> ssl_

Re: [squid-users] About SSL peek-n-splice/bump configurations

2018-09-06 Thread Alex Rousskov
On 09/06/2018 07:48 PM, Julian Perconti wrote: > With this peek-n-splice configuration: > > ssl_bump peek step1 all > ssl_bump peek step2 noBumpSites > ssl_bump splice step3 noBumpSites > ssl_bump bump > > I got this error on spliced sites (a bank site): > (104) Connection reset by peer (TLS co

Re: [squid-users] About SSL peek-n-splice/bump configurations

2018-09-06 Thread Amos Jeffries
On 7/09/18 1:48 PM, Julian Perconti wrote:> > Hi all, > > I have a new strange situation: > > With this peek-n-splice configuration: > > ssl_bump peek step1 all > ssl_bump peek step2 noBumpSites > ssl_bump splice step3 noBumpSites > ssl_bump bump So... (lets call this config A) #step1 does thi

Re: [squid-users] About SSL peek-n-splice/bump configurations

2018-09-06 Thread Julian Perconti
> De: Alex Rousskov > Enviado el: lunes, 13 de agosto de 2018 02:01 > Para: Julian Perconti ; squid-users@lists.squid- > cache.org > Asunto: Re: [squid-users] About SSL peek-n-splice/bump configurations > > On 08/12/2018 06:57 PM, Julian Perconti wrote: > >> De: Alex Rousskov > >> Enviado el: do

Re: [squid-users] Squid and DNS

2018-09-06 Thread Julian Perconti
> > So squid can not use one resolver for a local and public domains/addresses > and other or a second resolver to only public domains/ip? Both recursive > resolvers. > > > > Correct. Thank you for the clarification. > > > Amos > ___ > squid-users ma

Re: [squid-users] Squid and DNS

2018-09-06 Thread Amos Jeffries
On 7/09/18 4:53 AM, Julian Perconti wrote: >> De: squid-users En nombre de >> Amos Jeffries >> Enviado el: jueves, 6 de septiembre de 2018 09:57 >> Para: squid-users@lists.squid-cache.org >> Asunto: Re: [squid-users] Squid and DNS >> >> On 6/09/18 7:22 PM, Matus UHLAR - fantomas wrote: >>> On 06.0

Re: [squid-users] Squid and DNS

2018-09-06 Thread Julian Perconti
> De: squid-users En nombre de > Amos Jeffries > Enviado el: jueves, 6 de septiembre de 2018 09:57 > Para: squid-users@lists.squid-cache.org > Asunto: Re: [squid-users] Squid and DNS > > On 6/09/18 7:22 PM, Matus UHLAR - fantomas wrote: > > On 06.09.18 02:40, Julian Perconti wrote: > > > >> Is ma

Re: [squid-users] content adaptation using squid

2018-09-06 Thread Alex Rousskov
On 09/06/2018 12:06 AM, Yosef Meltser wrote: > Now we would like to make a content adaptation, for example to show an alert > every time the user entered a website. If you have not already, please familiarize yourself with the content adaptation problems. The following FAQ entry is a good startin

Re: [squid-users] content adaptation using squid

2018-09-06 Thread Amos Jeffries
On 6/09/18 6:06 PM, Yosef Meltser wrote: > > Hi, > > We have managed to create a proxy server using a squid in an intercept mode. > > Now we would like to make a content adaptation, for example to show an alert > every time the user entered a website. > > We are not familiar with this domain, s

Re: [squid-users] Squid and DNS

2018-09-06 Thread Amos Jeffries
On 6/09/18 7:22 PM, Matus UHLAR - fantomas wrote: > On 06.09.18 02:40, Julian Perconti wrote: > >> Is mandatory for squid to use only 1 dns/caching nameserver? > > usually, people have multiple DNS servers configured to fail over in case > one of them fails. > in some cases, client can balance th

[squid-users] Squid 3.5.28 for Microsoft Windows 64-bit is available

2018-09-06 Thread Rafael Akchurin
Greetings everyone, Sorry with even a more huge delay we would like to announce the availability of the CygWin based build of Squid proxy for Microsoft Windows version 3.5.28 (amd64 only!). Delay was caused by our inability to code sign the MSI with new "token" requirements. * Original release

Re: [squid-users] Squid and DNS

2018-09-06 Thread Matus UHLAR - fantomas
On 06.09.18 02:40, Julian Perconti wrote: "I discovered" that if I use more than one *local* dns server/resolver, when I use squid HTTPS, there are some problems accesing to the web. I have a squid with TLS support in server "B"; the gateway and resolver of the server "B" is server "A" and the