Re: [squid-users] External ACL undocumented changes?

Okay, thank you. To submit a bug, what logs/logging level would be helpful? Thank you, John -- Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html ___ squid-users mailing list squid-users@lists.squid-cache.org ht

Re: [squid-users] External ACL undocumented changes?

My config is as follows: Squid 3: external_acl_type should_not_ssl_bump ipv4 ttl=10 %DST %>{User-Agent} /etc/should_not_ssl_bump.py acl should_not_ssl external should_not_ssl_bump ssl_bump none should_not_ssl Squid 4: external_acl_type should_not_ssl_bump ipv4 ttl=10 children-startup=1 childre

[squid-users] External ACL undocumented changes?

In squid 3.5, passing a request header into the external ACL was post reqmod (if I added a header in ICAP, it was available in the external ACL). In squid 4, this doesn't seem to be the case. Is that intentional? Further, the logformat codes that the external ACL now supports should allow access t

[squid-users] Annotating transaction from inside ICAP

Hi, I was wondering how / if it was possible to annotate a request (basically, set a note/tag similarly to how the external ACL can) from within an ICAP service. My use-case is that I would like to add a note with information about the request that is then available for use within external helper

[squid-users] Blocking CONNECT

Hi, Squid conf: acl CONNECT method CONNECT acl to_bad_ip dst 55.55.2.3 http_access deny CONNECT to_bad_ip In the above squid config, if I were to try go to https://55.55.2.3:443 I would get an ACCESS DENIED but squid would not block the CONNECT (it would respond to 200) and then block the subsequ

[squid-users] Squid Listening on many ports

Hi, I am wanting to run squid listening on many ports (~100-200). From prior mailing list questions (http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-with-multiple-ips-is-listenting-to-some-ips-with-port-and-not-all-of-ips-td4668784.html), I see how this is possible. But, I was curious abo

Re: [squid-users] Squid 4 pconn_lifetime questions

Alex - thank you for the reply. If in the context of this directive became idle means "done processing the previous request" then how is the pconn_lifetime directive different than the client_idle_pconn_timeout and server_idle_pconn_timeout (other than affecting both at the same time)? If my quest

[squid-users] Squid 4 pconn_lifetime questions

Hi, The configuration directive pconn_lifetime (http://www.squid-cache.org/Doc/config/pconn_lifetime/), seems to give the squid admin control over whether squid closes idle connections or moves them into the 'idle connection pool'... I am curious if in squid3, the connection was automatically term

[squid-users] Logging ICAP headers in access log

Hi, I am attempting to log ICAP headers in the access log. Specifically, I modify my logformat directive to include something like {x-icap-info}icap::>h for a header x-icap-info that is available in the icap request headers. From the logformat documentation (http://www.squid-cache.org/Doc/config

[squid-users] Squid and ICAP using 206 response on reply

Hi, I've attempting to use a RESPMOD ICAP in squid to modify the response headers before they get to my user. I am attempting to use the ICAP 206 code to be able to do this. Everything works fine if the response payload is more than the preview that my ICAP takes. But, if the max size of the pre

Re: [squid-users] Squid 4.4 security_file_certgen helpers crashing

I can open a bug if you think I should/can based on the backtrace here: Core was generated by `(security_file_certgen) -s /usr/local/squid/var/cache/squid/ssl_db -M 4MB'. Program terminated with signal SIGSEGV, Segmentation fault. Dec 28 22:15:20 vagrant-ubuntu-trusty-64 kernel: [ 4314.045153] s

Re: [squid-users] Squid 4.4 security_file_certgen helpers crashing

Thanks for the reply Julian. ziprasidone146939277 wrote > Try comment this line and then see if it fails/crash. > Note that this directive has a default value which is 32/5/1. I tried commenting out this line and saw the same behavior. -- Sent from: http://squid-web-proxy-cache.1019090.n4.n

[squid-users] Squid 4.4 security_file_certgen helpers crashing

Hi, I am having trouble running squid 4.4 on ubuntu 14.04. I have successfully built squid, and it runs fine if I'm not trying to SSL bump, but once I SSL bump traffic, it starts crashing. I've tried various ssl bump configurations with the same net result, so I don't believe the configuration i

Re: [squid-users] Squid SSL-bump error Change Cipher Spec

>What are your squid.conf settings now? http_port 3128 ssl-bump tls_outgoing_options NO_TICKET,ALL,No_SSLv3 min-version=1.0 -- Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html ___ squid-users mailing list squid-