Re: [squid-users] FTP proxy

2020-12-06 Thread Sticher, Jascha
Hi Andrea, > I see this feature was introduced in 3.5 as an experimental one; at 4.13 > is it still so or is it considered stable and dependable? We are using the squid ftp_port feature for some customers. So far, we have not experienced any issues. The only downside to using frox (from which we

Re: [squid-users] Squid as reverse proxy for two or more webs

2018-08-10 Thread Sticher, Jascha
Hi, > acl ticket_acl dstdomain .MYDOMAIN.lan This matches *.mydomain.lan - php.mydomain.lan as well as ticket.mydomain.lan As the configuration is used top-to-bottom, the first of the cache_peers will be used (as only one parent is used). Use more specific ACLs to mitigate this: acl ticket_acl

Re: [squid-users] Squid returns NONE_ABORTED/000 and high response time but the internet access itself looks okay

2018-08-07 Thread Sticher, Jascha
Hi, most times we encountered this error message it had something to do with IPv4 DNS queries being answered too slowly or not at all (as in: only -records in the reply). If this occurring with some sites only, that could be the case. You could verify this by sniffing your DNS queries from

Re: [squid-users] how debug google status codes in log file

2018-06-19 Thread Sticher, Jascha
Hi Ahmad, every HTTPS connection is TUNNELED through squid, as long as you do not intercept SSL traffic (SSLbump). You can only get either a 200 return code or error codes connected to failure of the connection, e.g. proxy authentication required, deny (by proxy) or network/dns issues. You will

Re: [squid-users] How to configure a "proxy home" page ?

2018-03-26 Thread Sticher, Jascha
Hi everyone, I know this is quite off-topic, but I wanted to clarify a bit. SSH and TLS both provide the same thing, namely a tunnel between a client and a server. While both use asymmetric crypto for authentication and symmetric crypto for data transfer and therefore the same algorithms (that'

Re: [squid-users] Users Guide --- Dead link

2018-03-08 Thread Sticher, Jascha
Hi, you could always try the internet wayback machine at archiv.org: https://web.archive.org/web/20120531141437/http://www.deckle.co.za:80/squid-users-guide/ Kind regards, Jascha > Erleben Sie Industrie 4.0 konkret – auf der HANNOVER MESSE. Vom 23. bis 27. April 2018. www.fujitsu.com/de/micro

Re: [squid-users] Proxy hierarchy and FTP access

2018-02-28 Thread Sticher, Jascha
Hi, > I'm sorry Jascha but the suggestions you got in your thead went kind of over > my head, can I ask you if and how you "do allow the front-end Squid to > re-FTP the traffic to the appropriate server then intercept it independently > into the backend with its own ftp_port accepting the "native

Re: [squid-users] Proxy hierarchy and FTP access

2018-02-28 Thread Sticher, Jascha
Hi, > I'm setting up a new infrastructure for my web proxy and I'm having a > problem with FTP access to the internet; I'm running Squid 3.5 on Debian 9 > machines by the way. > > I used to have a single Squid machine talking freely to the internet from > inside the LAN, with clients connecting on

Re: [squid-users] 3.5.20 run out of my memory.

2018-02-08 Thread Sticher, Jascha
> Von: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] Im > Auftrag von Amos Jeffries > Gesendet: Freitag, 9. Februar 2018 08:37 > > On 09/02/18 20:30, Sticher, Jascha wrote: > > Hi, > > > >> KiB Mem: 4037016 total, 3729152 used, 307864

Re: [squid-users] 3.5.20 run out of my memory.

2018-02-08 Thread Sticher, Jascha
Hi, > KiB Mem: 4037016 total, 3729152 used, 307864 free, 120508 buffers > KiB Swap: 8511484 total,0 used, 8511484 free. 2213580 cached Mem this is normal behaviour in Linux - everything that's once read from disk is cached in RAM, as long as there is free memory. If the RAM is

[squid-users] FTP proxy chain with native ftp

2017-12-12 Thread Sticher, Jascha
Hi, we're currently upgrading our proxy environment to squid 3.5.23 (Debian Stretch) and would like to use the native FTP proxy feature to replace our old FTP proxy solution (frox). Due to some design choices, we have a proxy hierarchy for HTTP as well as FTP traffic. Is there a way (yet) to t