[squid-users] Define Squid max connections limit

2023-05-10 Thread Roberto Carna
Dear all, is there any directive to define Squid max connections limit, or do I have to increase the RAM and CPU instead? Thanks a lot, regards! ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-us

[squid-users] Access to internal domains using Squid

2023-02-08 Thread Roberto Carna
Dear all, I have a Squid server in non-transparent mode. All my hosts go to Internet sites using this proxy in the correct way. But now I need the following: When my hosts want to go to the internal URL https://www.example.com, this request reaches Squid and it tells them to go to the internal I

[squid-users] sftp through Squid: sftp error with proxy: command-line line 0 bad protocol 2 host key algorithms +ssh-dss

2022-06-13 Thread Roberto Carna
Dear all, I have an Ubuntu 22.04 with Squid package, and I've configured it in order to let pass ssh protocol to Internet. >From the own proxy, if I execute: $ sftp -v -oConnectTimeout=20 -oPoxyCommand='nc -X connect -x 10.12.1.1:8080 %h %p' -oPort 6 user@x.x.x.x I can login successfully. B

Re: [squid-users] Exclude dstdomain in access.log file

2020-01-03 Thread Roberto Carna
Ok Amos, thanks a lot for your help. I'll try to update my Squid version i order to block the given domains in my access.log file. Greetings !!! El vie., 3 ene. 2020 a las 3:15, Amos Jeffries () escribió: > On 3/01/20 7:09 am, Roberto Carna wrote: > > Dear Amos, I have this log

Re: [squid-users] Exclude dstdomain in access.log file

2020-01-02 Thread Roberto Carna
El jue., 2 ene. 2020 a las 2:55, Amos Jeffries () escribió: > On 2/01/20 10:14 am, Roberto Carna wrote: > > > > Please can you tell me what I can do in order to deny logs from > > hangouts.google.com <http://hangouts.google.com> ??? > > Which of the several F

[squid-users] Exclude dstdomain in access.log file

2020-01-01 Thread Roberto Carna
Hi people, I have Debian 9 + Squid 3.5.23. I'm using squidguard to filter domains and URL's, so in /etc/squid/squid.conf I have: url_rewrite_program /usr/bin/squidGuard -c /etc/squidguard/squidGuard.conf I must exclude "hangouts.google.com" domain in /var/log/squid/access.log file. So firstly I

Re: [squid-users] Squid doesn't execute url_rewrite_program /usr/bin/squidGuard -c /etc/squidguard/squidGuard.conf

2019-02-01 Thread Roberto Carna
more time? Because I have compared squid.conf and squidGuard.conf between this server and the other running OK, and both files are similar. Thanking in advance. Robert El vie., 1 feb. 2019 a las 3:45, Amos Jeffries () escribió: > On 1/02/19 8:48 am, Roberto Carna wrote: > > Dear, I have Squid

[squid-users] Squid doesn't execute url_rewrite_program /usr/bin/squidGuard -c /etc/squidguard/squidGuard.conf

2019-01-31 Thread Roberto Carna
Dear, I have Squid 3.5.23 and I use Squidguard for URL and domain filtering. In squid.conf I have this line: url_rewrite_program /usr/bin/squidGuard -c /etc/squidguard/squidGuard.conf but in this proxy server, the line is not executed by Squid, so Squidguard doesn't work at all. Same configurat

[squid-users] url_rewrite_program doesnt' work after cloning

2018-09-21 Thread Roberto Carna
Dear, I have a Squid 3.5 server working OK. After cloning this server two times, both the new two servers don't execute the following line from /etc/squid/squid.conf: url_rewrite_program /usr/bin/squidGuard -c /etc/squidguard/squidGuard.conf If I execute "/usr/bin/squidGuard -c /etc/squidguard/s

Re: [squid-users] Squid + Squidguard Youtube URL video filtering

2018-08-17 Thread Roberto Carna
m/get_video_info?video_id=VIDEOID >> ytimg.googleusercontent.com/vi/VIDEOID >> and many more. >> >> Marcus >> >> On 16/08/18 11:01, Vacheslav wrote: >> > Wouldn't it be better to try it in ufdbguard? >> > >> > -Original Message

Re: [squid-users] Squid + Squidguard Youtube URL video filtering

2018-08-16 Thread Roberto Carna
0 But I can't see the video yet. Please I need to know if using Squidguard it's just impossible to do this exception, so in this case I forget it. Thanks a lot again!!! 2018-08-16 10:17 GMT-03:00 Amos Jeffries : > On 17/08/18 00:43, Roberto Carna wrote: >> Dear,

[squid-users] Squid + Squidguard Youtube URL video filtering

2018-08-16 Thread Roberto Carna
Dear, I have Squid + Squidguard working OK. Squidguard is filtering the entire www.youtube.com website. But now I have to permit just one video from Youtube: https://www.youtube.com/embed/ff9sDLGtnK8?rel=0&showinfo=0 I have added the below URL as an exception in Squidguard: www.youtube.com/emb

[squid-users] BIND for complementary records for the same authoritative domain

2018-06-15 Thread Roberto Carna
Dear, our company has an internal Windows DNS with the "company.com" authoritative domain. Suppose within it we have the following records: a.company.com b.company.com c.company.com Now we need to have several records maintained by other IT area exclusively, in the same autoritative domain "compa

[squid-users] BIND for complementary records for the same authoritative domain

2018-06-12 Thread Roberto Carna
Dear, our company has an internal Windows DNS with the "company.com" authoritative domain. Suppose within it we have the following records: a.company.com b.company.com c.company.com Now we need to have several records maintained by other IT area exclusively, in the same autoritative domain "compa

[squid-users] Go to intranet server through Squid

2018-05-17 Thread Roberto Carna
Hi people, I have a Squid 3.1.20 for web browsing. I have a local intranet server called "intranet.com.ar.com" resolving to 192.168.10.10. This resolution is defined in my local DNS servers and in /etc/hosts file from Squid. Is there any way to send the web connections to intranet.company.com thr

Re: [squid-users] PID file /var/run/squid.pid not readable AND Supervising process XXX which is not our child

2018-05-10 Thread Roberto Carna
ges combination (squid + dansguardian)... Do you recommend upgrade to Debian testing version packages or just to usetry with Squid + Squidguard ??'? Special thanks !!! Regards. 2018-05-10 13:55 GMT-03:00 Amos Jeffries : > On 11/05/18 00:48, Roberto Carna wrote: >> Dear Amos, thanks fo

Re: [squid-users] PID file /var/run/squid.pid not readable AND Supervising process XXX which is not our child

2018-05-10 Thread Roberto Carna
0 Amos Jeffries : > On 10/05/18 11:53, Roberto Carna wrote: >> Dear, I have Squid/Dansguardian in a Debian 9 server. >> >> My Squid packages is from Debian repo, it is the stable version: >> >> squid 3.5.23-5+deb9u1 > ... >> >&

[squid-users] PID file /var/run/squid.pid not readable AND Supervising process XXX which is not our child

2018-05-09 Thread Roberto Carna
Dear, I have Squid/Dansguardian in a Debian 9 server. My Squid packages is from Debian repo, it is the stable version: squid 3.5.23-5+deb9u1 After execute "squid -k parse" everything is OK: # systemctl status squid ● squid.service - LSB: Squid HTTP Proxy version 3.x

Re: [squid-users] Squid is very slow after moving to production environment

2018-04-10 Thread Roberto Carna
Thanks to everybody... I've reviewed what you tell me. I've executed "squid -k parse" and everything is ok, and I've restarted de Squid entire server. When I use the server with IP#1, it works OK, is fastbut when I change its IP to IP#2 (the IP from the current Squid that I want to replace),

Re: [squid-users] Squid is very slow after moving to production environment

2018-04-09 Thread Roberto Carna
download the content page.about 1 minute to do it. The Dansguardian configuration is te same too. I've past my configuration in the previous mail. Thanks a lot !!! 2018-04-09 16:36 GMT-03:00 Antony Stone : > On Monday 09 April 2018 at 21:00:21, Roberto Carna wrote: > >> Dear, I h

Re: [squid-users] Squid is very slow after moving to production environment

2018-04-09 Thread Roberto Carna
gt; Hi, show the config file please and specs of the machine. > > On Mon, Apr 9, 2018 at 12:00 PM, Roberto Carna > wrote: >> Dear, I have implemented a server with Dansguardian 10.2.1.1 and Squid >> 3.5.23-5. >> >> I've tested it with 5 users for along 2

[squid-users] Squid is very slow after moving to production environment

2018-04-09 Thread Roberto Carna
Dear, I have implemented a server with Dansguardian 10.2.1.1 and Squid 3.5.23-5. I've tested it with 5 users for along 2 months and always it worked OK. But today when a moved it to production environment, it worked but very very slow. I've just changed hostname and IP, in order to match with the

[squid-users] Squid transparent with SSL interception - CA certificate problem

2018-02-06 Thread Roberto Carna
People, I've setup a transparent Squid proxy for WiFi clients. I'm using SSL interception so I had to generate a CA private certificate (generated from pfSense certificate manager tab). But when I add this CA private certificate to several Android an Iphone devices, some of the Android devices don

Re: [squid-users] I can't understand the SSL connectios interception concept in explicit mode

2018-02-02 Thread Roberto Carna
the connection user-remote server. Thanks a lot again !!! 2018-02-02 12:06 GMT-03:00 Matus UHLAR - fantomas : > On 02.02.18 11:42, Roberto Carna wrote: >> >> Dear, I can't understand an important concept: >> >> I know that in transparent proxy mode, I have to interc

[squid-users] I can't understand the SSL connectios interception concept in explicit mode

2018-02-02 Thread Roberto Carna
Dear, I can't understand an important concept: I know that in transparent proxy mode, I have to intercept HTTPS traffic in order to proxy and filter it. But I read in the pfSense's Squid help that in explicit mode there is no need to intercept the HTTPS traffic in order to proxy and filter it

[squid-users] Problem loading Facebook profiles

2018-01-12 Thread Roberto Carna
Dear, I have a Squid 3.5.27 proxy server with Squidguard in transparent mode, for HTTP and HTTPS traffic. Everything is OK, except when I access Facebook and select a profile from any user: in this case, the profile load the name, picture, but doesn't load the other data at all (pictures, friends,

[squid-users] Squid crash: assertion failed: store_swapout.cc:289: "mem->swapout.sio == self"

2018-01-03 Thread Roberto Carna
Dear, I have updated Squid on pfSense to 0.4.42_1 version. But after start the service togeteher with squidGuard, Squid crashes. I try running from CLI in debug mode: # squid -d 10 [2.4.2-RELEASE][ad...@fw-pfsense-guest.g-bapro.net]/var/log: 2018/01/03 12:46:44 kid1| Starting Squid Cache version

[squid-users] Transparent proxy for WiFi users

2018-01-02 Thread Roberto Carna
Dear, I've setup a Squid transparent proxy + Squidgard on pfSEnse 2.4 in order to filter HTTP and HTTPS web content for different types of WiFi clients on my company: - Android (different versions) - Notebooks Windows 7/10 - Iphone - Etc. In some cases, depending on the device Operating System, s

[squid-users] Parameter to define quantity of clients in Proxy Reverse

2016-09-21 Thread Roberto Carna
Dear, just a brief question: I have Squid 3.4.8 on Debian running in reverse proxy mode, and I need to know if there is any parameter in squid.conf that I have to adjust in order to define the quantity of clients I will accept. Or is the same if the squid receives 10 or 1.000.000 petitions at the

[squid-users] Logrotate with postrotate script

2016-09-15 Thread Roberto Carna
Dear, I've installed Squid3 with log rotation by default. I've analyzed the /etc/logrotate.d/squid3 file, and I can see this lines: postrotate test ! -e /var/run/squid3.pid || /usr/sbin/squid3 -k rotate endscript Why is the reason of the "test ! -e /var/run/squid3.pid || /usr/sbi

Re: [squid-users] Squid3 error: CHILD: hello write test failed logrotate

2016-06-22 Thread Roberto Carna
OK Antony thank you!! 2016-06-22 18:28 GMT-03:00 Roberto Carna : > Amos, just a last comment: > > My squid.conf from Squid3 has this line: > > #Default: > # logfile_rotate 0 > > So the parameter you mentiones it's just setup. > > Any other thing relativ

Re: [squid-users] Squid3 error: CHILD: hello write test failed logrotate

2016-06-22 Thread Roberto Carna
Amos, just a last comment: My squid.conf from Squid3 has this line: #Default: # logfile_rotate 0 So the parameter you mentiones it's just setup. Any other thing relative to log problem? 2016-06-22 11:42 GMT-03:00 Amos Jeffries : > On 23/06/2016 1:44 a.m., Roberto Carna wrote: >&g

Re: [squid-users] Squid3 error: CHILD: hello write test failed logrotate

2016-06-22 Thread Roberto Carna
OK, I'll do that. And what about the "nocreate" option in the logrotate file for squid3???Do I have to delete or change for waht option??? Thanks a lot again, this is my last question. 2016-06-22 14:02 GMT-03:00 Amos Jeffries : > On 23/06/2016 4:32 a.m., Roberto Carna wrote:

Re: [squid-users] Squid3 error: CHILD: hello write test failed logrotate

2016-06-22 Thread Roberto Carna
em arrives when several clients access to my reverse proxy??? Because when I test it only from 2 or 3 PC's, everything was OK. Thanks a lot, regards!!! 2016-06-22 11:42 GMT-03:00 Amos Jeffries : > On 23/06/2016 1:44 a.m., Roberto Carna wrote: >> Dear Antony, thanks for your he

Re: [squid-users] Squid3 error: CHILD: hello write test failed logrotate

2016-06-22 Thread Roberto Carna
-22 10:44 GMT-03:00 Roberto Carna : > Dear Antony, thanks for your help..below is the > /etc/logrotate.d/squid3 filebut before I have to say I've seen in > the web that this problem is solved by enabling IPv6, and was reported > by a ticket (https://forum.opnsense.org/index.php?t

Re: [squid-users] Squid3 error: CHILD: hello write test failed logrotate

2016-06-22 Thread Roberto Carna
10:29 GMT-03:00 Antony Stone : > On Wednesday 22 June 2016 at 14:53:23, Roberto Carna wrote: > >> everything was OK until the /var/log/squid3/access.log rotate to >> access.log.1. From this moment, the access.log file is not present, and the >> squid3 daemon doesn'

[squid-users] Squid3 error: CHILD: hello write test failed logrotate

2016-06-22 Thread Roberto Carna
Dear, I've implemented a Squid3 in reverse mode, and when I test it with some web access from my PC, everything was OK. But when I put it in production, there are a lot of web access and everything was OK until the /var/log/squid3/access.log rotate to access.log.1. From this moment, the access.log

[squid-users] Squid reverse proxy: www.site1.com to www.site2.com/foo/

2016-04-29 Thread Roberto Carna
Dear, I'm using Squid in reverse proxy mode. Everything is OK, but now I have to do this: If a user put in the browser: http://www.site1.com Squid reverse has to redirect to: http://www.site2.com/foo/ How can I do this??? Special thanks, Roberto _

Re: [squid-users] Reverse proxy: session expired in 15 minutes

2015-12-15 Thread Roberto Carna
Development team say that a session is conformed by cookies, and the expiration time defined is 3 hours. 2015-12-15 9:32 GMT-03:00 Antony Stone : > On Tuesday 15 Dec 2015 at 11:39, Roberto Carna wrote: > >> Dear, we have a Squid3 as reverse proxy with default configuration. >> &

Re: [squid-users] Reverse proxy: session expired in 15 minutes

2015-12-15 Thread Roberto Carna
I add that the main line in squid3.conf is: cache_peer 10.10.1.10 parent 80 0 no-query originserver login=PASS name=SiteXXX Thanks again. 2015-12-15 8:39 GMT-03:00 Roberto Carna : > Dear, we have a Squid3 as reverse proxy with default configuration. > > We have a domain pointed to a w

[squid-users] Reverse proxy: session expired in 15 minutes

2015-12-15 Thread Roberto Carna
Dear, we have a Squid3 as reverse proxy with default configuration. We have a domain pointed to a web server. In this server the user session expiration is setup in 3 hs, but each 15 minutes the session expires. At this time, we are not sure about the origin of the session expiration. Taking into