Re: [squid-users] Squid traffic paths (Alex Rousskov)

2024-09-03 Thread Scott Bates
Understood. The weird thing is that I have that one android device that is working correctly. IE: The online services are showing it's correct squid proxy. No other android or windows vm will do that. Very odd. ___ squid-users mailing list squid-users@lis

Re: [squid-users] Squid traffic paths (Alex Rousskov)

2024-08-31 Thread Scott Bates
The squid logs show traffic going to the expected destinations. If I look at wireshark on one of the client systems I do see some http entries going to those destinations through the squid server. However most of the traffic (UDP / TCP) doesn't seem to be going through the squid server. I'm not su

Re: [squid-users] Squid traffic paths (Alex Rousskov)

2024-08-28 Thread Scott Bates
> What protocol do those external services use in problematic use cases? Does Squid see the corresponding requests from VMs? Squid can only proxy HTTP and FTP... http and https only The weird thing is I have an android test phone that also goes through squid and that device shows the correct IP o

[squid-users] Squid traffic paths

2024-08-27 Thread Scott Bates
My lab is setup as such: Hypervisor host Squid VM Test VM 1 (windows) Test VM 2 (windows) Test VM 3 (windows) I have my proxies setup in the squid config. On the test vms I have the windows proxy settings pointing to the squid IP and port. If I check the public IP on that vm it shows up as the pro

Re: [squid-users] ACL with a non-contiguous mask - using multiple outgoing addresses

2023-07-17 Thread Scott
> On 7/16/23 08:03, Scott wrote: > > Hi all, > > > > I have four IPv4s that I use for outgoing source addresses to origin > > servers. > > I currently have them used randomly, but this sometimes causes issues for > > certain sites that get conf

[squid-users] ACL with a non-contiguous mask - using multiple outgoing addresses

2023-07-16 Thread Scott
while maintaining consistency per-source? Follow-up: can I do the same for IPv6 clients? Thanks, Scott PS: As an aside, the following ACL generated the following warning: acl tm_src_11 src 0.0.0.3 0.0.0.3 Configuration for squid passes. 2023/07/15 23:38:40| WARNING: (B) '0.0.0.3' is a

Re: [squid-users] Reverse proxying Exchange OWA wembail with SSL offloading

2020-10-30 Thread Scott
On Sat, Oct 31, 2020 at 12:49:16AM +1300, Amos Jeffries wrote: > On 30/10/20 3:27 pm, Scott wrote: > > On Thu, Oct 29, 2020 at 10:08:42PM +1300, Amos Jeffries wrote: > >> On 29/10/20 12:06 pm, Scott wrote: > >>> On Wed, Oct 28, 2020 at 12:00:01PM +, squid-users-

Re: [squid-users] Reverse proxying Exchange OWA wembail with SSL offloading

2020-10-29 Thread Scott
On Thu, Oct 29, 2020 at 10:08:42PM +1300, Amos Jeffries wrote: > On 29/10/20 12:06 pm, Scott wrote: > > On Wed, Oct 28, 2020 at 12:00:01PM +, squid-users-reques wrote: > >> Date: Thu, 29 Oct 2020 00:08:34 +1300 > >> From: Amos Jeffries > >> &

Re: [squid-users] Reverse proxying Exchange OWA wembail with SSL offloading

2020-10-28 Thread Scott
g - not working on IE/Chrome > > On 28/10/20 5:25 pm, Scott wrote: > > > > Here are the logs (first not working, followed by working). > > > > Note this is the login attempt, not the loading of the initial page. You'll > > see in the NOT WORKING sect

Re: [squid-users] Reverse proxying Exchange OWA wembail with SSL offloading - not working on IE/Chrome

2020-10-28 Thread Scott
g - not working on IE/Chrome > > On 28/10/20 5:25 pm, Scott wrote: > > > > Here are the logs (first not working, followed by working). > > > > Note this is the login attempt, not the loading of the initial page. You'll > > see in the NOT WORKING sect

Re: [squid-users] Reverse proxying Exchange OWA wembail with SSL offloading - not working on IE/Chrome

2020-10-27 Thread Scott
On Tue, Oct 27, 2020 at 09:30:16PM +0200, Eliezer Croitor wrote: > Hey Scott, > > Can you attach any example cookie with and without the secure value? > (replace sensitive data) > > Thanks, > Eliezer > > > Eliezer Croitoru > Tech Support > Mobi

[squid-users] Reverse proxying Exchange OWA wembail with SSL offloading - not working on IE/Chrome

2020-10-27 Thread Scott
o get squid to add the "secure" attribute to cookies? At least for testing it clarify what's going on. Thanks, Scott ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] error:invalid-request HTTP/1.1 (iPhone requesting icloud.com)

2020-07-22 Thread Scott
Hi, some iOS requests to gateway.icloud.com via squid (explicit) throw the following error in the logs: 2020-07-23T15:31:08+10:00 00.11.22.68 (squid-1): ABCD::17 (iphoneXs.domain.com) - via -:- - - [23/Jul/2020:15:31:08 +1000] "- error:invalid-request HTTP/1.1" 400 3739 "-" "-" NONE_NONE:HIER

Re: [squid-users] Dumping sslbump'd decrytped http using icap protocol

2020-05-25 Thread Scott
On Mon, May 25, 2020 at 06:34:19PM +1200, Amos Jeffries wrote: > On 25/05/20 12:56 am, Scott wrote: > > Hi, > > > > Can someone recommend an ICAP application that will allow me to dump the > > HTTP > > of a client-server conversation? > > > >

[squid-users] Dumping sslbump'd decrytped http using icap protocol

2020-05-24 Thread Scott
ere a dump option for c-icap? I couldn't find one. Thanks, Scott ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] Dumping sslbump'd decrytped http using icap protocol

2020-05-19 Thread Scott
___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Best way to prevent squid from bumping CONNECTs

2020-05-03 Thread Scott
On Thu, Apr 30, 2020 at 04:05:43PM -0400, Alex Rousskov wrote: > On 4/30/20 12:10 PM, Scott wrote: > > >> * For http_port configured with an ssl-bump flag, HTTP CONNECT tunnels > >> are sent to the SslBump code. > >> > >> * For https_port configured

Re: [squid-users] Best way to prevent squid from bumping CONNECTs

2020-04-30 Thread Scott
> Date: Mon, 27 Apr 2020 15:09:03 -0400 > From: Alex Rousskov > To: squid-users@lists.squid-cache.org > Subject: Re: [squid-users] Best way to prevent squid from bumping CONNECTs > > On 4/27/20 12:21 PM, Scott wrote: > > > my experience with ssl_bump is that it tr

[squid-users] Best way to prevent squid from bumping CONNECTs

2020-04-27 Thread Scott
of bumping? My workaround has been to simply add `!CONNECT' to the `ssl_bump host_acl' statements. Squid will happily bump the SSL sessions and proxy the CONNECT sessions. Thanks, Scott ___ squid-users mailing list squid-users@lists.squid-cac

Re: [squid-users] Invalid URL when trying to access cachemgr

2020-03-02 Thread Scott
> Date: Mon, 2 Mar 2020 01:18:58 +1300 > From: Amos Jeffries > To: squid-users@lists.squid-cache.org > Subject: Re: [squid-users] Invalid URL when trying to access cachemgr > > On 29/02/20 4:11 pm, Scott wrote: > > Hi all, > > > > I have three squid proxi

[squid-users] Invalid URL when trying to access cachemgr

2020-03-01 Thread Scott
uld not be retrieved The following error was encountered while trying to retrieve the URL: cache_object://localhost/info I have tried replacing `localhost' with the visible_hostname to no avail. Does anyone have any clues as to why this may be?

Re: [squid-users] [Feature request] add IP version to logformat format codes

2020-02-16 Thread Scott
> Date: Sun, 16 Feb 2020 01:50:19 +1300 > From: Amos Jeffries > To: squid-users@lists.squid-cache.org > Subject: Re: [squid-users] squid-users Digest, Vol 66, Issue 17 > > On 16/02/20 12:42 am, Scott wrote: > >> Date: Fri, 14 Feb 2020 11:03:50 -0500 > >> From

Re: [squid-users] squid-users Digest, Vol 66, Issue 17

2020-02-15 Thread Scott
> Date: Fri, 14 Feb 2020 11:03:50 -0500 > From: Alex Rousskov > To: squid-users@lists.squid-cache.org > Subject: Re: [squid-users] [Feature request] add IP version to logformat > format codes > > On 2/14/20 10:36 AM, Scott wrote: > > > I know it's derivable b

[squid-users] [Feature request] add IP version to logformat format codes

2020-02-14 Thread Scott
Hi, I know it's derivable by other means, but it would be nice to have a logformat format code that provided the client and server IP version numbers. eg: >v for Client IP version (4 or 6) and http://lists.squid-cache.org/listinfo/squid-users

[squid-users] ssl::server_name matches non-TLS Host: header

2020-02-14 Thread Scott
Hi, I just noticed that ssl::server_name matches against the Host: header of non-TLS connections, which is handy, but it's not documented thusly in http://www.squid-cache.org/Doc/config/acl/ Is that behaviour expected? I'm running 4.9 btw. Tha

Re: [squid-users] A patch for intercepted/WCCP HTTPS and 409 errors

2019-12-11 Thread Scott Aitken
> On 12/12/19 1:49 am, Scott wrote: > >> On 11/12/19 8:51 pm, Scott wrote: > >>> Hi, > >>> > >>> I understand that squid does some security checking that the SNI of an > >>> intercepted/WCCP HTTPS requests matches the reverse DNS

Re: [squid-users] A patch for intercepted/WCCP HTTPS and 409 errors

2019-12-11 Thread Scott
> On 11/12/19 8:51 pm, Scott wrote: > > Hi, > > > > I understand that squid does some security checking that the SNI of an > > intercepted/WCCP HTTPS requests matches the reverse DNS of the IP of the > > connection. Or something like that. > > Not be

[squid-users] A patch for intercepted/WCCP HTTPS and 409 errors

2019-12-10 Thread Scott
Hi, I understand that squid does some security checking that the SNI of an intercepted/WCCP HTTPS requests matches the reverse DNS of the IP of the connection. Or something like that. However with the prevalence of CDNs and badly configured DNSs and geographic DNSs, this breaks lots of connec

Re: [squid-users] splunk 3.5.27-Sec Advisories

2018-08-03 Thread Kumpf, Scott
Greetings, Checking in to see how the new Squid for Windows build is coming along, is there an update? Is there a tentative release date? *Subject is incorrect---ignore 'splunk' Scott Kumpf Sr. Network Engineer-EMS (Contractor) Orlando Utilities Commission Office: (407) 434-4305 /

[squid-users] splunk 3.5.27-Sec Advisories

2018-07-27 Thread Kumpf, Scott
ssing. Any and all feedback, guidance, and assistance is greatly appreciated. Thanks, Scott Scott Kumpf Sr. Network Engineer (Contractor) Orlando Utilities Commission Office: (407) 434-4305 / Cell: (386) 547-2698 Email: sku...@ouc.com DISCLAIMER: Florida