[squid-users] Define and use a variable in squid.conf (Was: What happens when duplicate external_acl_type are mentioned)

2018-12-01 Thread Amish
On 02/12/18 9:33 am, Alex Rousskov wrote: To reduce long-term headaches, I think we should be strict and deprecate (and then prohibit) ignoring duplicated external_acl_type declarations. I do not see any good reasons for ignoring this configuration error forever. FWIW, the use case discussed i

Re: [squid-users] What happens when duplicate external_acl_type are mentioned

2018-12-01 Thread Alex Rousskov
On 12/1/18 3:11 AM, Amos Jeffries wrote: > On 1/12/18 6:32 pm, Amish wrote: > >> Effectively squid.conf now has two external_acl_type lines with same >> name. (ipuser) >> >> First one has %ul and other one does not. >> >> From my tests - first one gets the priority and second one is ignored by >> s

[squid-users] squid disable ipv6 outbound traffic

2018-12-01 Thread Dmitri Seletski
Hello Dear Squidies, Situation: I have, IPv4 only tunnel for security. IPv6 enabled ISP. VM with Squid in it, that works over bridge.(so it has both NAT IPv4 IP an IPv6 IP) Problem: When i go to some sites,  Squid instead of pulling traffic over tunnel provider, does it over IPv6 enable

Re: [squid-users] What happens when duplicate external_acl_type are mentioned

2018-12-01 Thread Amish
On 01/12/18 5:24 pm, Amos Jeffries wrote: On 2/12/18 12:15 am, Amish wrote: Thank you for your quick response. So if I pass %ul to external_acl_type, but dont use any auth_param, squid dies with an error. "Can't use proxy auth because no authentication schemes are fully configured" Is it p

Re: [squid-users] What happens when duplicate external_acl_type are mentioned

2018-12-01 Thread Amos Jeffries
On 2/12/18 12:15 am, Amish wrote: > > > On 01/12/18 3:41 pm, Amos Jeffries wrote: >> On 1/12/18 6:32 pm, Amish wrote: >>> QUESTION: >>> -- >>> >>> Effectively squid.conf now has two external_acl_type lines with same >>> name. (ipuser) >>> >>> First one has %ul and other one does not. >>>

Re: [squid-users] What happens when duplicate external_acl_type are mentioned

2018-12-01 Thread Amish
On 01/12/18 3:41 pm, Amos Jeffries wrote: On 1/12/18 6:32 pm, Amish wrote: QUESTION: -- Effectively squid.conf now has two external_acl_type lines with same name. (ipuser) First one has %ul and other one does not. From my tests - first one gets the priority and second one is ignore

Re: [squid-users] Why does Squid4 do socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = -1 EACCES (Permission denied) ?

2018-12-01 Thread Amos Jeffries
On 1/12/18 3:43 am, Ahmad, Sarfaraz wrote: > I think almost every time squid opens a TCP connection, It also tried to > open a raw socket of type AF_NETLINK. Syscall pasted below. > ...> > Any thoughts ? > * To receive NAT intercepted connections Squid needs access to the system NAT table to id

Re: [squid-users] What happens when duplicate external_acl_type are mentioned

2018-12-01 Thread Amos Jeffries
On 1/12/18 6:32 pm, Amish wrote: > QUESTION: > -- > > Effectively squid.conf now has two external_acl_type lines with same > name. (ipuser) > > First one has %ul and other one does not. > > From my tests - first one gets the priority and second one is ignored by > squid. > > So my quest

Re: [squid-users] Squid SSL-bump error Change Cipher Spec

2018-12-01 Thread Amos Jeffries
On 1/12/18 3:26 pm, John Refwe wrote: > Hi, >   > I have an error when going to a site that is set to be ssl-bumped in squid. >   > I have modified my squid config so that I have not specified any ciphers > (I read in another forum post this would be the way to make it closest > to the standard op