Re: [squid-users] reverse proxy and HTTP redirects

2019-12-03 Thread Vieri Di Paola
On Wed, Dec 4, 2019 at 6:15 AM Amos Jeffries wrote: > > I'm trying to see for myself if this is actually normal/OK - since I > don't know how familiar you are with HTTP accel mode syntax. > > The requests in particular are most interesting, though what responses > are paired with each is also pote

[squid-users] http://www1.ngtech.co.il/ - Down?

2019-12-03 Thread Rudi Kramer
Hello, As far as I can tell, http://www1.ngtech.co.il/ is down at the moment. Any word on how long this will be? Thanks Rudi ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] icap result caching in squid

2019-12-03 Thread Amos Jeffries
On 4/12/19 6:05 am, Darren Breeze wrote: > Hi Amos > > The Icap service is doing redirects based on client permissions (that may > change). What I am doing is just setting the Expires value in the RESP_MOD > response when I return a 307 redirect so I can control how long the caches > (both Squi

Re: [squid-users] reverse proxy and HTTP redirects

2019-12-03 Thread Amos Jeffries
On 4/12/19 3:02 am, Vieri Di Paola wrote: >> Hmm, what version of Squid is this? > > 3.5.27 (yes, I'm aware of the security vulnerability, but I'm unable > to upgrade right now) > >> Can you configure "debug_options 11,2" and see what the HTTP messages >> look like? > > Everything looks OK until

Re: [squid-users] icap result caching in squid

2019-12-03 Thread Darren Breeze
Hi Amos The Icap service is doing redirects based on client permissions (that may change). What I am doing is just setting the Expires value in the RESP_MOD response when I return a 307 redirect so I can control how long the caches (both Squid and the browser) hang on to it. Darren B. O

Re: [squid-users] debug headers between squid --> website

2019-12-03 Thread Alex Rousskov
On 12/2/19 5:22 PM, --Ahmad-- wrote: > You Said  > “” > Yes, you can. Squid logs CONNECT headers and also HTTP headers of > incoming and outgoing decrypted HTTPS requests. Squid does not see (and > cannot log) HTTP headers of encrypted traffic inside CONNECT tunnels > that are not bumped using the

Re: [squid-users] reverse proxy and HTTP redirects

2019-12-03 Thread Vieri Di Paola
> Hmm, what version of Squid is this? 3.5.27 (yes, I'm aware of the security vulnerability, but I'm unable to upgrade right now) > Can you configure "debug_options 11,2" and see what the HTTP messages > look like? Everything looks OK until I get: 2019/12/03 14:52:26.509 kid1| 11,2| http.cc(720)

Re: [squid-users] reverse proxy and HTTP redirects

2019-12-03 Thread Amos Jeffries
On 3/12/19 10:11 pm, Vieri Di Paola wrote: > > Whether I use vport=8080 or not, it still fails because the client > gets an HTTP redirection such as: > > http://squidserver.local:50443/whatever (without vport=) > > http://squidserver.local:8080/whatever (with vport=8080) > > Note the http://. >

Re: [squid-users] reverse proxy and HTTP redirects

2019-12-03 Thread Vieri Di Paola
Hi, On Tue, Dec 3, 2019 at 6:33 AM Amos Jeffries wrote: > > NP: you have not configured any Elliptic Curve to be used, so all those > EC ciphers will not be usable. Also you configured some DES based > ciphers and then disable DES. I'll review that, thanks. > The problem is that the client is t