[squid-users] Squid 5 does not send ICAP request

2021-03-11 Thread 橋本紘希
I made squid and ICAP system using docker-compose. Squid 4 started sending ICAP requests 1 minute after boot. However, squid 5 sends no ICAP request even 10 minutes after boot. Squid continued to mark the ICAP service down. How can I make squid 5 to start ICAP conversation? * squid version 5.0.

Re: [squid-users] Protecting squid

2021-03-11 Thread Amos Jeffries
On 12/03/21 3:56 am, Ben Goz wrote: On 11/03/2021 16:44, Amos Jeffries wrote: On 12/03/21 3:37 am, Ben Goz wrote: On 11/03/2021 15:50, Antony Stone wrote: On Thursday 11 March 2021 at 14:41:11, Ben Goz wrote: Tell about your network setup and what you are trying to achieve - we might be a

Re: [squid-users] Protecting squid

2021-03-11 Thread Alex Rousskov
On 3/11/21 9:37 AM, Ben Goz wrote: > End users machine using some client application while their system proxy > points to the above squid proxy server. Client certificate-based authentication may be the best option if their system proxy supports it and you do not need to bump user traffic with Ssl

Re: [squid-users] Squid Logs - TAG_NONE/503 errors

2021-03-11 Thread Alex Rousskov
On 3/11/21 5:33 AM, Arjun K wrote: > So can you assist me to include the custom log format which will provide > further details. If you still want to add these details after reading Amos response, then please see logformat and access_log directives in squid.conf.documented: * logformat descripti

Re: [squid-users] Protecting squid

2021-03-11 Thread Ben Goz
On 11/03/2021 16:44, Amos Jeffries wrote: On 12/03/21 3:37 am, Ben Goz wrote: On 11/03/2021 15:50, Antony Stone wrote: On Thursday 11 March 2021 at 14:41:11, Ben Goz wrote: Tell about your network setup and what you are trying to achieve - we might be able to suggest solutions. End users

Re: [squid-users] Protecting squid

2021-03-11 Thread Amos Jeffries
On 12/03/21 3:37 am, Ben Goz wrote: On 11/03/2021 15:50, Antony Stone wrote: On Thursday 11 March 2021 at 14:41:11, Ben Goz wrote: Tell about your network setup and what you are trying to achieve - we might be able to suggest solutions. End users machine using some client application while

Re: [squid-users] a specific host generates a 503 ...

2021-03-11 Thread Amos Jeffries
On 12/03/21 1:14 am, Eliezer Croitoru wrote: Hey Walter, It's sitting behind: DDoS protection by Cloudflare So it makes sense that you would not be able to download it using wget. The only option probably is using a web browser. I would suggest contacting clamav.net web/system admins to verify

Re: [squid-users] Protecting squid

2021-03-11 Thread Ben Goz
On 11/03/2021 15:50, Antony Stone wrote: On Thursday 11 March 2021 at 14:41:11, Ben Goz wrote: I tried to open squid with some special port other than the default 3128 port. Obscurity is not equivalent to security. But after a while I saw that my squid was being abused by unknown IP address

Re: [squid-users] websocket with sslbump

2021-03-11 Thread Amos Jeffries
On 10/03/21 8:41 pm, Niels Hofmans wrote: Hi Alex, Thank you for your response. I’ll be opening up a Bugzilla ticket for opaque messages through ICAP if it doesn’t exist already. Related to the squid 5.x, I’ve reached out to the debian package maintainer last week for a binary install in the r

Re: [squid-users] Squid Logs - TAG_NONE/503 errors

2021-03-11 Thread Arjun K
Hi Alex/Team The end user are receiving an error in the browser stating : "The site can't be reached"and " took long time to respond ". So can you assist me to include the custom log format which will provide further details. [Thu Mar 11 11:02:15 2021].001 119629 10.197.10.140 TAG_NONE/503 0 CO

Re: [squid-users] How to completely blacklist a domain + subdomains, including HTTPS?

2021-03-11 Thread Amos Jeffries
On 11/03/21 1:28 am, roee klinger wrote: Thanks, Amos. I tried implementing the configuration you suggested but I am getting an error message: FATAL: Invalid ACL type 'ssl::server_name' FATAL: Bungled /etc/squid/squid.conf line 36: acl server_blacklist ssl::server_name "/etc/squid

Re: [squid-users] Squid Logs - TAG_NONE/503 errors

2021-03-11 Thread Amos Jeffries
On 11/03/21 11:33 pm, Arjun K wrote: Hi Alex/Team The end user are receiving an error in the browser stating : "The site can't be reached"and " took long time to respond ". So can you assist me to include the custom log format which will provide further details. [Thu Mar 11 11:02:15 2021].0

Re: [squid-users] Protecting squid

2021-03-11 Thread Antony Stone
On Thursday 11 March 2021 at 14:41:11, Ben Goz wrote: > I tried to open squid with some special port other than the default 3128 > port. Obscurity is not equivalent to security. > But after a while I saw that my squid was being abused by unknown IP > addresses I'm assuming this means your Squid

[squid-users] Protecting squid

2021-03-11 Thread Ben Goz
By the help of God. Hi, I tried to open squid with some special port other than the default 3128 port. But after a while I saw that my squid was being abused by unknown IP addresses so I decided to password protect my squid so that only authorized users could use it. But it's pretty annoying for t

Re: [squid-users] a specific host generates a 503 ...

2021-03-11 Thread Eliezer Croitoru
Hey Walter, It's sitting behind: DDoS protection by Cloudflare So it makes sense that you would not be able to download it using wget. The only option probably is using a web browser. I would suggest contacting clamav.net web/system admins to verify what are the options. All The Bests, Eliezer

Re: [squid-users] websocket with sslbump

2021-03-11 Thread Eliezer Croitoru
Hey Niels, I can help you with this if you need. I have a pre-compiled version and while it’s not a Debian packaged ie .deb file it’s a matter of unpacking the files into the FS. Also take a peek at the docker build: https://github.com/elico/squid-docker-build-nodes Let me know if you n