Re: [squid-users] Issues With 3.1.20 and Windows Update

2019-02-23 Thread Amos Jeffries
On 24/02/19 9:55 am, Hernan Saltiel wrote: > Hi, >     I'm trying to use a Squid 3.1.20 to update several Windows Clientes > (some are Vista, some are 7, some are 10). >     We're using NTLM authentication, and some groups (some users can use > full internet, some can only on some sites) and this i

[squid-users] | Ignoring non-issuer CA from ... while squid -kparse

2019-02-23 Thread eliezer
I am testing intermediate certificates and I have just created a key and certificate files. The http line for ssl bump is: http_port 23128 ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=16MB cert=/etc/squid/ssl_cert/cert.pem key=/etc/squid/ssl_cert/key.pem While running squi

Re: [squid-users] Squid 4.x: cache_peer PROXY_PROTOCOL support with squid parents

2019-02-23 Thread eliezer
What would be the reason to replace haproxy eactly? Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users On Behalf Of David Touzeau Sent: Saturday, February 23, 2019 18:31 To: squid-users@list

Re: [squid-users] squid 4.x: decided: do not cache but share because the entry has been released

2019-02-23 Thread Alex Rousskov
On 2/23/19 10:17 AM, Amos Jeffries wrote: > On 24/02/19 5:33 am, David Touzeau wrote: >> http.cc(982) haveParsedReplyHeaders: decided: do not cache but share >> because the entry has been released; HTTP status 200 >> What “but share because the entry has been released” event means ? > 'do not cac

Re: [squid-users] Issues With 3.1.20 and Windows Update

2019-02-23 Thread eliezer
Just add before the line: http_access deny !auth a localnet allow windows update rule. It should be something like: ## Start of config snippet acl windows_updates dstdomain "/etc/squid3/windows_update" acl src locanet 192.168.42.0/24 http_access allow localnet windows_updates http_access deny

[squid-users] Issues With 3.1.20 and Windows Update

2019-02-23 Thread Hernan Saltiel
Hi, I'm trying to use a Squid 3.1.20 to update several Windows Clientes (some are Vista, some are 7, some are 10). We're using NTLM authentication, and some groups (some users can use full internet, some can only on some sites) and this is working fine. The issue arises when trying to u

Re: [squid-users] Squid for Windows Repeatedly Crashing

2019-02-23 Thread eliezer
The next tool might help you to understand the status of the open connections. If the socket is being closed( I think Windows Server 2016 is a very good OS...). https://www.nirsoft.net/utils/cports.html There is a possibility that some OS TCP limit is being reached and there for the socket closure

Re: [squid-users] Websockets over HTTPS not working in squid 4

2019-02-23 Thread eliezer
I can think of a way to try and "amend" on an error in the next websocket connection automatically. I believe that using an ICAP service or eCAP module that is connected to an external acl helper you can see if specific requests for specific domains are trying to use websockets. Technically the bas

Re: [squid-users] squid 4.x: decided: do not cache but share because the entry has been released

2019-02-23 Thread Amos Jeffries
On 24/02/19 5:33 am, David Touzeau wrote: > Hi > > I’m trying to store in cache an Internet file > > > Run the squid in debug mode says: > > http.cc(982) haveParsedReplyHeaders: decided: do not cache but share > because the entry has been released; HTTP status 200 > > What “but share because t

Re: [squid-users] Squid 4.x: cache_peer PROXY_PROTOCOL support with squid parents

2019-02-23 Thread Amos Jeffries
On 24/02/19 5:30 am, David Touzeau wrote: > > Currently we are working on Kerberos with Active Directory with Ha-proxy > that > sends requests to squid using proxy_protocol. > Everything works great but we want to replace the ha-proxy with a squid. > In fact, we want to the squid client send the

[squid-users] squid 4.x: decided: do not cache but share because the entry has been released

2019-02-23 Thread David Touzeau
Hi I'm trying to store in cache an Internet file Run the squid in debug mode says: http.cc(982) haveParsedReplyHeaders: decided: do not cache but share because the entry has been released; HTTP status 200 What "but share because the entry has been released" event means ?

Re: [squid-users] Squid 4.x: cache_peer PROXY_PROTOCOL support with squid parents

2019-02-23 Thread David Touzeau
Currently we are working on Kerberos with Active Directory with Ha-proxy that sends requests to squid using proxy_protocol. Everything works great but we want to replace the ha-proxy with a squid. In fact, we want to the squid client send the credentials information to a squid parent in order to