Re: [squid-users] Explicitly use direct client IP in acl

2020-07-10 Thread Amos Jeffries
On 11/07/20 4:44 am, Orion Poplawski wrote: > > IIUIC - this mainly gives me: > > http_access deny !localnet !authenticated_users > http_access allow CONNECT Allowed_SSL_Hosts > http_access allow !localnet Allowed_HTTP_Hosts > http_access deny all > > But this will only allow connections to the

Re: [squid-users] Explicitly use direct client IP in acl

2020-07-10 Thread Orion Poplawski
On 7/9/20 10:47 PM, Amos Jeffries wrote: > On 10/07/20 2:10 pm, Orion Poplawski wrote: >> On 7/9/20 6:50 PM, Amos Jeffries wrote: >>> On 10/07/20 9:54 am, Orion Poplawski wrote: Hello -    We're using a setup like this: client -> e2guardian -> squid -> internet e2

Re: [squid-users] Squid 4.11 Howto create SSL Bump certificates with only 3-12 months date of expiry

2020-07-10 Thread Alex Rousskov
On 6/29/20 11:13 AM, i...@schroeffu.ch wrote: > how can I configure Squid to create SSL Bump Certifications with only > 3-12 months date of expiry? See sslproxy_cert_adapt and its setValidAfter/setValidBefore algorithms. You will need to use the corresponding dates in your fake CA. These algorith

Re: [squid-users] Double method of authentication, possible?

2020-07-10 Thread Amos Jeffries
On 10/07/20 10:48 pm, Antonino Gianfranco Sanacori wrote: > Thanks Amos. > > But if i had another Squid istance on different port  to configure one > scheme on instance A and one scheme on instance B? > You would then have two proxies. That is not what you asked for help with. Amos

Re: [squid-users] Double method of authentication, possible?

2020-07-10 Thread Antonino Gianfranco Sanacori
Thanks Amos. But if i had another Squid istance on different port  to configure one scheme on instance A and one scheme on instance B? Il 10/07/2020 02:39, Amos Jeffries ha scritto: On 9/07/20 9:44 pm, Antonino Gianfranco Sanacori wrote: Hi. I normally use a ldap authentication for my user