Re: [squid-users] HTTPS site filtering

2017-01-21 Thread roadrage27
Squid Web Proxy Cache] < > ml-node+s1019090n468123...@n4.nabble.com> wrote: > >> On 21/01/2017 7:57 a.m., roadrage27 wrote: >> >> How is that LAN traffic getting to Squid? >> > Squid is sitting on the internal LAN, not an external facing server >> > &g

Re: [squid-users] HTTPS site filtering

2017-01-21 Thread roadrage27
manual browser config On Sat, Jan 21, 2017 at 8:13 PM Amos Jeffries [via Squid Web Proxy Cache] < ml-node+s1019090n468123...@n4.nabble.com> wrote: > On 21/01/2017 7:57 a.m., roadrage27 wrote: > >> How is that LAN traffic getting to Squid? > > Squid is sitting on the inter

Re: [squid-users] HTTPS site filtering

2017-01-20 Thread roadrage27
ht the config back over. I attempted the implicit deny on the new build with the same result. On Fri, Jan 20, 2017 at 12:42 PM Amos Jeffries [via Squid Web Proxy Cache] < ml-node+s1019090n4681230...@n4.nabble.com> wrote: > On 21/01/2017 7:30 a.m., roadrage27 wrote: > >> I see no &#

Re: [squid-users] HTTPS site filtering

2017-01-20 Thread roadrage27
squid started passing traffic > > On Fri, Jan 20, 2017, 11:46 AM Amos Jeffries [via Squid Web Proxy Cache] < > ml-node+s1019090n4681226...@n4.nabble.com> wrote: > > On 21/01/2017 5:52 a.m., roadrage27 wrote: > > > I was able to resolve my issue partially. I burned dow

Re: [squid-users] HTTPS site filtering

2017-01-20 Thread roadrage27
When I add the final deny all then no traffic traverses squid. When I removed it then squid started passing traffic On Fri, Jan 20, 2017, 11:46 AM Amos Jeffries [via Squid Web Proxy Cache] < ml-node+s1019090n4681226...@n4.nabble.com> wrote: > On 21/01/2017 5:52 a.m., roadrage27 wrote

Re: [squid-users] HTTPS site filtering

2017-01-20 Thread roadrage27
URLS that are regex type that need to be allowed so im currently cranking out those. On Fri, Jan 20, 2017 at 8:36 AM roadrage27 [via Squid Web Proxy Cache] < ml-node+s1019090n4681219...@n4.nabble.com> wrote: > >That tells me either you have screwed up the CONNECT ACL definition. Or >

Re: [squid-users] HTTPS site filtering

2017-01-20 Thread roadrage27
>That tells me either you have screwed up the CONNECT ACL definition. Or >the SSL_ports one. Very possible as im pretty green on squid, my current conf file is below. with that conf the SSL sites just sit and spin until the eventually time out. acl site_squid_art url_regex ^http://www.squid-cache

[squid-users] HTTPS site filtering

2017-01-19 Thread roadrage27
I was able to solve my previous issue of no connections and now have a working squid along with http site filtering and regex working nicely. My current issue is the need to allow only certain sites which do include some HTTPS sites. If i leave the line http_access deny CONNECT !SSL_ports withi

Re: [squid-users] TCP 403 Denied on new squid build out

2017-01-12 Thread roadrage27
if i run squid-k parse it shows me the output of the processing of that config file i posted. from the server where squid is running i can browse the internet and have disabled the firewall running on the server as well. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.

Re: [squid-users] TCP 403 Denied on new squid build out

2017-01-12 Thread roadrage27
hierarchy_stoplist cgi-bin ? access_log /var/log/squid3/access.log squid On Thu, Jan 12, 2017 at 9:29 AM Amos Jeffries [via Squid Web Proxy Cache] < ml-node+s1019090n468115...@n4.nabble.com> wrote: On 13/01/2017 3:44 a.m., roadrage27 wrote: > I made the changes suggested and still no

Re: [squid-users] TCP 403 Denied on new squid build out

2017-01-12 Thread roadrage27
I made the changes suggested and still no love from squid for browsing the web using it as a proxy. the error screen reads Access Denied Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect. noth

Re: [squid-users] TCP 403 Denied on new squid build out

2017-01-11 Thread roadrage27
I removed the entry as i do not use those other proxies, parsed the config file, then restarted squid, still the same error. On Wed, Jan 11, 2017 at 2:55 PM Matus UHLAR - fantomas [via Squid Web Proxy Cache] wrote: > On 11.01.17 08:32, roadrage27 wrote: > >never_direct allow all &

Re: [squid-users] TCP 403 Denied on new squid build out

2017-01-11 Thread roadrage27
1484147626.926 3 10.145.68.148 TCP_DENIED/403 3780 GET http://google.com/ - HIER_NONE/- text/html 1484147626.943 0 10.145.68.148 TCP_DENIED/403 3828 GET http://www.squid-cache.org/Artwork/SN.png - HIER_NONE/- text/html -- View this message in context: http://squid-web-proxy-cache.1019

[squid-users] TCP 403 Denied on new squid build out

2017-01-11 Thread roadrage27
Built out Squid 3.5 on ubuntu 14.04 logs showing 403 denied when accessing any resources, any help is appreciated here is my conf file for reference. acl localhost src 127.0.0.1/32 acl to_localhost dst 127.0.0.0/8 acl localnet src 0.0.0.0/8 10.145.68.0/24 acl myip src 10.145.68.148/32 acl t