[squid-users] deny_info redirect with URL placeholder

2019-12-08 Thread Vieri Di Paola
Hi, Is there a way to add a URL variable name to a deny_info 302 configuration directive? Suppose I have the following: external_acl_type location_rewriter ttl=86400 negative_ttl=86400 children-max=80 children-startup=10 children-idle=3 concurrency=8 %http://lists.squid-cache.org/listinfo/squid-

Re: [squid-users] Squid Proxy SSL Bump can not retrieve SSL session back to the client?

2019-12-08 Thread Amos Jeffries
On 9/12/19 10:41 am, GeorgeShen wrote: > Hi Amos, > > i downloaded the 4.9 latest, and compiled with "./configure > --with-default-user=proxy --with-openssl --enable-ssl-crtd", not redo the > openssl and proxy certificate part, start squid with 4.9, still seeing > failure. Have not debugged in det

Re: [squid-users] Squid Proxy SSL Bump can not retrieve SSL session back to the client?

2019-12-08 Thread GeorgeShen
the version 4.9 has the same behavior, can not finish negotiate with the client. I have setup two different client machines, one is macOS, the other alpine linux. I finally got the macOS wget https to work through the squid 4.9 proxy with ssl-bump. So the squid config is ok. The alpine linux, us

Re: [squid-users] Squid Proxy SSL Bump can not retrieve SSL session back to the client?

2019-12-08 Thread GeorgeShen
Hi Amos, i downloaded the 4.9 latest, and compiled with "./configure --with-default-user=proxy --with-openssl --enable-ssl-crtd", not redo the openssl and proxy certificate part, start squid with 4.9, still seeing failure. Have not debugged in detail. Quick question, when compile for the bump usa

Re: [squid-users] Squid Proxy SSL Bump can not retrieve SSL session back to the client?

2019-12-08 Thread GeorgeShen
Hi Amos, thanks for the comments. I'll first try the later version as you pointed out 4.9 and see if I get the issues. Will report back. thanks. - George -- Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html ___

Re: [squid-users] Squid Proxy SSL Bump can not retrieve SSL session back to the client?

2019-12-08 Thread Amos Jeffries
On 8/12/19 7:53 pm, George Sheng wrote: > > Hi, > > I’m new to this group. I just setup a squid ver 4.5 on my ubuntu When using SSL-Bump one does need to use the latest release. Which is 4.9 now. Since this is a custom build (4.5 has never been a release in Ubuntu) you may find Squid-5 has even

Re: [squid-users] Https inception gives 503 error

2019-12-08 Thread Amos Jeffries
On 9/12/19 12:38 am, mandev wrote: > Thank you for reply. Long time i have been using squidguard. Maybe it is time > to change or start writing a new one with comminity. Thank for the help. > There is ufdbguard. But the fundamental thing is that you cannot respond to a TCP SYN packet or TLS cl

Re: [squid-users] Https inception gives 503 error

2019-12-08 Thread mandev
Thank you for reply. Long time i have been using squidguard. Maybe it is time to change or start writing a new one with comminity. Thank for the help. -- Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html ___ squi

Re: [squid-users] Https inception gives 503 error

2019-12-08 Thread Amos Jeffries
On 8/12/19 8:35 pm, mandev wrote: > Hi, > > I am using pfsense with squid and squidguard for web filtering without > client side certificate installation. I did manage to block pages and mostly > error free internet traffic. But for the last thing i cannot work it. I want > to redirect users to a

Re: [squid-users] Https inspection gives 503 error

2019-12-08 Thread mandev
Thank you for the reply. Is it not possible with squid or technicly because fortigate can do this. If you look logs that i write at first message. It's looks like there is an error in redirects. It trys to redirect 'http' address there is no address like 'http'. -- Sent from: http://squid-web-p

Re: [squid-users] Https inspection gives 503 error

2019-12-08 Thread reinerotto
You can _not_ present a block page for https-block. Already quite a few discussions about it here on forum. Pls, use search function. -- Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html ___ squid-users mailing l