[squid-users] ACL matches when it shouldn't

2020-09-29 Thread Vieri
> None of the file entries are anchored regex. So any one of them could match. >> Can anyone please let me know if there's a match, or how to enable debugging  >> to see which record in this ACL is actually triggering the denial? > > To do that we will need to see the complete and exact URL which

Re: [squid-users] measuring latency of squid in different scenarios

2020-09-29 Thread Service MV
Hi Rafal, if you wish I've a manual redacted in SPANISH for build a VM whit Debian 10.5 running SQUID compiled from source, with kerberos and LDAP authentication, plus AD groups authorizations. I haven't had time to translate it into English yet. Let me know if it works for you and I'll share it w

Re: [squid-users] How te deal with proxy authentication bypass

2020-09-29 Thread Service MV
Thank you Amos as always. My current configuration has not changed much, it is as follows: visible_hostname s-px4.mydomain.local http_port 3128 error_directory /opt/squid-503/share/errors/es-ar forwarded_for transparent shutdown_lifetime 0 seconds quick_abort_min 0 KB quick_abort_max 0 KB quick_ab

[squid-users] ACL matches when it shouldn't

2020-09-29 Thread Vieri
Hi, I have a url_regex ACL loaded with this file: https://drive.google.com/file/d/1C5aZqPfMD3qlVP8zvm67c9ZnXUfz-cEW/view?usp=sharing Then I have an access denial like so: http_access deny bad_dst_urls Problem is that I am not expecting to block, eg. https://www.google.com, but I am. I know it

Re: [squid-users] ACL matches when it shouldn't

2020-09-29 Thread Amos Jeffries
On 30/09/20 2:27 am, Vieri wrote: > Hi, > > I have a url_regex ACL loaded with this file: > > https://drive.google.com/file/d/1C5aZqPfMD3qlVP8zvm67c9ZnXUfz-cEW/view?usp=sharing > > Then I have an access denial like so: > > http_access deny bad_dst_urls > > Problem is that I am not expecting to

[squid-users] acl for urls without regex

2020-09-29 Thread Vieri
Hi, Is it possible to create an ACL from a text file containing URLs without treating them as regular expressions? Otherwise, I get errors of this kind:  ERROR: invalid regular expression: 'https://whatever.net/auth_hotmail/?user={email}&email={email}': Invalid content of \{\} Regards, Vieri

Re: [squid-users] How te deal with proxy authentication bypass

2020-09-29 Thread Amos Jeffries
On 29/09/20 3:55 am, Service MV wrote: > In my case I have the domains, for example from webex, which I get from > their official support page. It seems that I am doing something wrong or > I am not understanding well. > I base on this documentation > https://wiki.squid-cache.org/ConfigExamples/Aut