Re: [squid-users] Ubuntu 22.04 LTS repository for Squid 6.5 (rebuilt from sources in Debian unstable)

Excelent news. Thank you very much El dom, 12 de nov de 2023, 04:34, Rafael Akchurin < rafael.akchu...@diladele.com> escribió: > Hello everyone, > > > > Online repository with latest Squid 6.5 (rebuilt from sources in Debian > unstable) for Ubuntu 22.04 LTS 64-bit is available at > https://squid

[squid-users] How to upgrade correctly?

Hello everyone. I have currently installed SQUID 5.8 compiled from source on Debian 10.5. I want to upgrade to the latest stable version, 6.2. What is the recommended way to upgrade to a new version? Should I uninstall the old version first? Or do I compile the new one and it overwrites the old one

Re: [squid-users] PROXY client not permited by ACLs...

Thanks Alex, with this information I was able to solve the problem. Best regards. El jue, 4 de may de 2023, 17:31, Alex Rousskov < rouss...@measurement-factory.com> escribió: > On 5/4/23 13:57, Service MV wrote: > > > I'm monitoring by SNMP my SQUID nodes using Zabb

[squid-users] PROXY client not permited by ACLs...

Hello everyone. I'm monitoring by SNMP my SQUID nodes using Zabbix 5.2 without problems. The monitoring is working fine. I clarify that in front of my proxies I have a HAproxy with proxy protocol enabled. However in cache.log I have many messages like the following: PROXY client not permitted by AC

Re: [squid-users] Is samba required for kerberos authentication

Hi, I think that is not necessary the service but yes the packages. In the past I setup a squid with kerberos support very well and for compilation I installed this packages (on debian 10.5): binutils logrotate acl attr autoconf bison nettle-dev build-essential libacl1-dev libaio-dev libattr1-dev

Re: [squid-users] Exclude transaction from being logged

Unfortunately, the log that I whant to avoid is being still logged. El vie., 26 feb. 2021 17:14, Alex Rousskov escribió: > On 2/26/21 2:58 PM, Service MV wrote: > > Ok, but whit this two lines disabled completely access logs. I've no > > more access_log directives config

Re: [squid-users] Exclude transaction from being logged

Ok, but whit this two lines disabled completely access logs. I've no more access_log directives configured. I need disabled only zabbix_proxy IP logs. Thanks in advance Gabriel El vie., 26 feb. 2021 16:21, Alex Rousskov escribió: > On 2/26/21 12:36 PM, Service MV wrote: > > >

[squid-users] Exclude transaction from being logged

Hi, I recently compiled SQUID 4.14 with SNMP support. I use Zabbix to monitor SQUID by SNMP and it really works fine. One thing I see is that because Zabbix checks status of SQUID port then SQUID generates a lot of logs like this: NONE/000 0 NONE error:transaction-end-before-headers - HIER_NONE/- -

[squid-users] Help with with delay pools

Hello everyone, I don't know if anyone can help me with this configuration. acl Domain_Users note group AQUAAAUV7TIfbORUj8PLQv4YAQIAAA== delay_pools 1 delay_class 1 1 delay_parameters 1 250/250 delay_access 1 allow Domain_User What I am looking for is to limit each individual user

Re: [squid-users] measuring latency of squid in different scenarios

send you/the list a copy of the debianized and english > version.. > > Big thanks for sharing this ! > > > Greetz, > Louis > > > ---------- > *Van:* squid-users [mailto:squid-users-boun...@lists.squid-cache.org] *Namens > *Service MV > *Ver

Re: [squid-users] measuring latency of squid in different scenarios

d translation. So if > you would be so kind and share the manual with me, I'd appreciate it very > much! > > Rafal > > On Tue, 29 Sep 2020 at 23:07, Service MV wrote: > >> Hi Rafal, if you wish I've a manual redacted in SPANISH for build a VM >> whit Debia

Re: [squid-users] measuring latency of squid in different scenarios

Hi Rafal, if you wish I've a manual redacted in SPANISH for build a VM whit Debian 10.5 running SQUID compiled from source, with kerberos and LDAP authentication, plus AD groups authorizations. I haven't had time to translate it into English yet. Let me know if it works for you and I'll share it w

Re: [squid-users] How te deal with proxy authentication bypass

others acl authenticated proxy_auth REQUIRED http_access allow authenticated http_access deny all Thank you very much in advance for your valuable help. Best regards Gabriel El mar., 29 de sep. de 2020 a la(s) 07:46, Amos Jeffries ( squ...@treenet.co.nz) escribió: > On 29/09/20 3:55 am, Service

Re: [squid-users] How te deal with proxy authentication bypass

solution except to look at your access.log file (in > /var/log/squid), see the other domains Google is making a request to, and > then add to your ACLs also. > > > Thanks, > Adrian > On Friday, September 25, 2020, 5:28:36 PM CDT, Service MV < > service...@gmail.com> wrote:

[squid-users] How te deal with proxy authentication bypass

Hello everyone, I am trying to deal unsuccessfully with proxy authentication bypass. Even looking at the documentation I can't get it right. The point is that certain programs such as being a cisco webex client or the google earth pro client do not know how to speak well with SQUID's kerberos authe

Re: [squid-users] compilation error

Exactly this: wget http://www.squid-cache.org/Versions/v5/squid-5.0.4.tar.gz El lun., 14 sep. 2020 18:04, Service MV escribió: > Fresh download of source code in a fresh server. > > > El lun., 14 sep. 2020 18:02, Amos Jeffries > escribió: > >> On 15/09/20 6:34 am, S

Re: [squid-users] compilation error

Fresh download of source code in a fresh server. El lun., 14 sep. 2020 18:02, Amos Jeffries escribió: > On 15/09/20 6:34 am, Service MV wrote: > > Hi everyone, I don't know if you can help me with this. I´m trying to > > compile SQUID beta 5.0.4 on Debian 10 but I get an er

[squid-users] compilation error

Hi everyone, I don't know if you can help me with this. I´m trying to compile SQUID beta 5.0.4 on Debian 10 but I get an error: cp ../../src/tests/stub_debug.cc tests/stub_debug.cc cp: cannot create regular file 'tests/stub_debug.cc': No such file or directory make[3]: *** [Makefile:1518: tests/st

Re: [squid-users] Limit large downloads to autenticated users

uot; which is exactly the problem I was having. HTTP traffic is correctly limited in my tests. For the time being I will see if I can limit it in another way until I can fix it. Best regards Gabriel El mar., 28 de jul. de 2020 a la(s) 10:26, Amos Jeffries ( squ...@treenet.co.nz) escribió: > On

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

Hi everybody! I am just writing to thank you all for the excellent comments, you have been very helpful. I also take this opportunity to mention which operating model I decided to use, which is working well so far. DNS A and PTR record "balancer.mydomain.local" pointing to keepalived virtual IP o

[squid-users] Limit large downloads to autenticated users

Hi everybody! I read in the squid mailing lists that delay_pools doesn't work in v4.x, but in the documentation I don't see anything about it. I would like to know if in my SQUID 4.11 configuration with Kerberos + LDAP authentication I can setup a delay_pools to limit large downloads of any authent

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

d (eg inet.mydomain.local) is to match exactly the SPN for that user account, which at this point is a service account. Thanks again Gabriel El vie., 24 de jul. de 2020 a la(s) 00:10, Amos Jeffries ( squ...@treenet.co.nz) escribió: > On 24/07/20 5:09 am, Service MV wrote: > > Hi Klaus, > &g

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

Thanks, Brett, for the answer. I did exactly the same thing and it's working for me now. I only have to decrypt how to see the client's IP in SQUID's logs. I will follow your instructions to try to achieve it. Best regards, Gabriel El jue., 23 de jul. de 2020 a la(s) 21:23, Brett Lymn ( brett.l

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

Hi Klaus, I think something similar. But I understand that you can use the Kerberos delegation in AD. That's partly why I'm not convinced by the documentation I read, which tells me to create a user account in Active Directory. And I don't understand what a user account has to do here. Maybe the do

[squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

Hi, everybody. I have a SQUID 4.11 compiled on Debian 9.8 with kerberos integration authenticating and browsing without problems: cache.log squid_kerb_auth: User some.user authenticated access.log 10.10.10.203 TCP_TUNNEL/200 5264 CONNECT update.googleapis.com:443 some.user HIER_DIRECT/172.217.162.3

[squid-users] Allowing a port only to certain IP/host

Hello everyone, I need to enable port 22 in squid but only to a certain server (host.domain.com) in particular, so that the rest of the world cannot be accessed via SSH. I would like to know this is the right way to do it: # SFTP policy acl SSH_port port 22 acl SFTP_policy dst 1.2.3.4 http_access

Re: [squid-users] HAProxy + Squid

Thank you, Amos. Taking into account your and Rafael's recommendations, I configured HAProxy and Squid to use the PROXY protocol instead of reformatting the messages. At the moment I disabled authentication, due to internal requirements. I had a hard time dealing with the HAProxy health checks, but

Re: [squid-users] acl src question

Thanks Amos. The indication was useful. Best regards Gabriel El vie., 9 ago. 2019 03:19, Amos Jeffries escribió: > On 9/08/19 1:57 am, Service MV wrote: > > Hello everyone! > > > > I have a network 192.168.10.0/22 > > I want to let the IP ranges 192.168.12.1 t

[squid-users] acl src question

Hello everyone! I have a network 192.168.10.0/22 I want to let the IP ranges 192.168.12.1 to 192.168.13.254 through my proxy, but not the ranges 192.168.10.1 to 192.168.11.254. If I don't misunderstand the documentation , the correct way to d

Re: [squid-users] Unable to limit bandwidth (squid 4.7.2 )

LAN Thank you very much for your help. El mar., 30 de jul. de 2019 a la(s) 09:57, Service MV (service...@gmail.com) escribió: > Thanks for patience. > > I modify the line: > # All net setting >

Re: [squid-users] Unable to limit bandwidth (squid 4.7.2 )

ctly. Any comments on that? El lun., 29 de jul. de 2019 a la(s) 16:58, Service MV (service...@gmail.com) escribió: > Hello everyone! > I have a 100/100 Mbit/s internet link and I am trying unsuccessfully to > limit downloads to a maximum of 15Mb/s of any IP on my network. Some > downloads c

[squid-users] Unable to limit bandwidth (squid 4.7.2 )

Hello everyone! I have a 100/100 Mbit/s internet link and I am trying unsuccessfully to limit downloads to a maximum of 15Mb/s of any IP on my network. Some downloads consume the entire link. I copy my settings to help me see where I'm going wrong. Thank you very much! Gabriel PS.: squid -v '--ena

[squid-users] HAProxy + Squid

Hello everyone, I would like to know if the configuration I want to do is viable: 1 Load Balancer HAProxy configured in TCP mode. 2 Squid servers 4.7.2 with negotiate kerberos authentication and LDAP group authorizations. The idea is that the web clients of my lan point to the IP/Name of the Load B

Re: [squid-users] Chrome 69

Excellent Amos! I have to admit that I was approaching that conclusion. I did exactly as you told me and problem solved. I will consider your recommendations when I need to add more rules. Best regards! Gabriel El lun., 1 de oct. de 2018 a la(s) 18:04, Amos Jeffries ( squ...@treenet.co.nz) escrib

[squid-users] Any suggestions or comments about my configuration? squid 3.5.20

Dear Ones, the more I use Squid the more I realize how powerful it is. And like all powerful software it can be complex at first. I would like to share my settings and if possible listen (read actually) your comments and suggestions. My goals of using squid: - Transparent authentication of my AD us

[squid-users] Help: squid restarts and squidGuard die

Dear Ones, I draw on your experience in seeking help to determine whether or not it is possible to achieve the configuration I am looking for, due to a strange error I am having. Before commenting on the bug I describe my testing environment: - A VM CentOS 7 Core over VirtualBox 5.2, 1 NIC. - My V