Re: [squid-users] Proxy hierarchy and FTP access

Thanks a lot guys, I ended up going back to using FileZilla with my LAN Squid as HTTP proxy and allowing CONNECT requests to unregistered port only for a list of known FTP/SFTP destinations; probably not ideal from a security standpoint but it's the easiest way to manage my users requests. Thanks

Re: [squid-users] Proxy hierarchy and FTP access

Thanks for the replies guys! I'm sorry Jascha but the suggestions you got in your thead went kind of over my head, can I ask you if and how you "do allow the front-end Squid to re-FTP the traffic to the appropriate server then intercept it independently into the backend with its own ftp_port accept

[squid-users] Proxy hierarchy and FTP access

Hi guys, I'm setting up a new infrastructure for my web proxy and I'm having a problem with FTP access to the internet; I'm running Squid 3.5 on Debian 9 machines by the way. I used to have a single Squid machine talking freely to the internet from inside the LAN, with clients connecting on port 3

Re: [squid-users] Pages sometimes load as a mess of random (?) symbols

First of all thanks a lot for the heads up on authentication and the config "review", I've found everything really helpful. I'll keep it all in mind moving forward. About the problem I was having, looks like you responded while I was editing my original message... so I'll quote it here: I feel stu

Re: [squid-users] Pages sometimes load as a mess of random (?) symbols

Firstly, thanks a lot for taking the time to check my configuration and provide such detailed suggestions; I think I've followed all of them and fixed the problems you pointed out. We have a Windows domain and all those "all" directives where inherited from our old proxy server (running Squid verso

Re: [squid-users] Pages sometimes load as a mess of random (?) symbols

Sorry for not including enough informatio nin the first place. 1. Here's my config, keep in mind it's a test server that will eventually replace the one (not updated) we're using right now so the configuration is kinda bare-bones: ### TESTSQUID1 ### http_port 3128 dns_v4_first on pinger_enable o

[squid-users] Pages sometimes load as a mess of random (?) symbols

Hi, I'm running Squid version 3.5.23 with caching disabled. Sometimes when accessing various websites (the sites that cause this problem are always the same, such as www.tomshardware.com for example) the page doesn't load correctly until after a page refresh, after which it shows without error. Whe

Re: [squid-users] Kerberos access denied and reauthentication

Looks like since posting the log the problem has disappeared for all 5 of my test users; since nothing has been changed on the network, could it have been caused by a Firefox and Chrome bug that has been recently fixed (I don't recall ever seeing the problem on IE)? Does anyone know of the existenc

Re: [squid-users] Kerberos access denied and reauthentication

I've just had the problem happen again (usually it happens after a long period of inactivity, e.g. when trying to load the first web page in the morning). Here's the log: https://pastebin.com/fFTJNiKf I'm looking into getting the output from squidclient but I have to try and reproduce the probl

Re: [squid-users] Kerberos access denied and reauthentication

Shoul I wait for the error to appear and post the section relevant to the time when it occurs? -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Kerberos-access-denied-and-reauthentication-tp4683224p4683232.html Sent from the Squid - Users mailing list archive

[squid-users] Kerberos access denied and reauthentication

Hi, I'm trying to setup a proxy server using Squid 3.5.23 on Debian 9; I've successfully setup Kerberos authentication generating the keytab file with ktutil and manually setting the required SPN on my Windows domain controller. The problem I'm encountering is that sometimes (right now I'm the only