Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-08 Thread Alex Rousskov
On 2024-07-05 20:55, Jonathan Lee wrote: FIXED I think it wanted a new certificate generated mine became to weak I needed one that ECDSA with prime256v sha256 and not RSA anymore that solved my errors Glad you found a solution! And if these errors resurface, you now have a blueprint for the

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-05 Thread Jonathan Lee
FIXED I think it wanted a new certificate generated mine became to weak I needed one that ECDSA with prime256v sha256 and not RSA anymore that solved my errors The error is gone when this cert is used :) > On Jul 5, 2024, at 14:33, Jonathan Lee wrote: > > However even with it marked as no

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-05 Thread Jonathan Lee
However even with it marked as no 05.07.2024 14:30:46 ERROR: failure while accepting a TLS connection on conn4633 local=192.168.1.1:3128 remote=192.168.1.5:49721 FD 30 flags=1: SQUID_TLS_ERR_ACCEPT+TLS_LIB_ERR=A000417+TLS_IO_ERR=1 continues I am going to take a break please if anyone kn

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-05 Thread Jonathan Lee
a certificate from was the non iMac >>>> >>>> The iMac keeps sending change cipher requests and wants TLS1.3 over and >>>> over as soon as a TLS1.2 pops up it works >>>> >>>> That one has the certificate however that system the Toshiba do

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-05 Thread Jonathan Lee
s with this error. I highly suspect that I need to enable TLS1.3 >>> would you agree? >>> >>> -Original Message- >>> From: Alex Rousskov >>> Sent: Friday, July 5, 2024 11:02 AM >>> To: squid-users >>> Cc: Jonathan Lee >&

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-05 Thread Jonathan Lee
as the certificate however that system the Toshiba does not have >> any issues with this error. I highly suspect that I need to enable TLS1.3 >> would you agree? >> >> -Original Message- >> From: Alex Rousskov >> Sent: Friday, July 5, 2024 11:02 AM >>

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-05 Thread Jonathan Lee
> -Original Message- > From: Alex Rousskov > Sent: Friday, July 5, 2024 11:02 AM > To: squid-users > Cc: Jonathan Lee > Subject: Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6 > > On 2024-07-05 12:02, Jonathan Lee wrote: > >>>

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-05 Thread jonathanlee571
I need to enable TLS1.3 would you agree? -Original Message- From: Alex Rousskov Sent: Friday, July 5, 2024 11:02 AM To: squid-users Cc: Jonathan Lee Subject: Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6 On 2024-07-05 12:02, Jonathan Lee wrote: > > Alex: I rec

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-05 Thread Alex Rousskov
On 2024-07-05 12:02, Jonathan Lee wrote: > Alex: I recommend determining what that CA is in these cases (e.g., by capturing raw TLS packets and matching them with connection information from A000417 error messages in cache.log or %err_detail in access.log). I have Wireshark running do I ju

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-05 Thread Jonathan Lee
Side note: I have just found while analyzing Wireshark packets that this A000417 error only occurs with use of the iMac and the Safari browser, this does not occur on Windows 10 with the Edge browser. > On Jul 5, 2024, at 09:02, Jonathan Lee wrote: > > per > > As the next step in triage, I

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-05 Thread Jonathan Lee
per As the next step in triage, I recommend determining what that CA is in these cases (e.g., by capturing raw TLS packets and matching them with connection information from A000417 error messages in cache.log or %err_detail in access.log). I have Wireshark running do I just look for informa

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-05 Thread Jonathan Lee
Thanks for the email and support with this. I will get wireshark running on the client and get the info required. Yes the information prior is from the firewall side outside of the proxy testing from the demilitarized zone area. I wanted to test this first to rule that out as it’s coming in from

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-05 Thread Alex Rousskov
On 2024-07-04 19:12, Jonathan Lee wrote: You also stated .. " my current working theory suggests that we are looking at a (default) signUntrusted use case.” I noticed for Squid documents that default is now set to off .. The http_port option you are looking at now is not the directive I was

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-05 Thread Alex Rousskov
On 2024-07-04 19:02, Jonathan Lee wrote: I do not recommend changing your configuration at this time. I recommend rereading my earlier recommendation and following that instead: "As the next step in triage, I recommend determining what that CA is in these cases (e.g., by capturing raw TLS packe

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-05 Thread Alex Rousskov
On 2024-07-04 18:12, Jonathan Lee wrote: I know before I could use tls_outgoing_options cipher=EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:HIGH:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-04 Thread Jonathan Lee
It does not recognize this directive 2024/07/04 16:16:46| Processing: url_rewrite_children 32 startup=8 idle=4 concurrency=0 2024/07/04 16:16:46| Processing: tls-default-ca on 2024/07/04 16:16:46| /usr/local/etc/squid/squid.conf(235): unrecognized: 'tls-default-ca’ Or with use of = > On Jul 4

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-04 Thread Jonathan Lee
You also stated .. " my current working theory suggests that we are looking at a (default) signUntrusted use case.” I noticed for Squid documents that default is now set to off .. http://www.squid-cache.org/Versions/v5/cfgman/http_port.html http://www.squid-cache.org/Versions/v6/cfgman/http_po

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-04 Thread Jonathan Lee
>>> I do not recommend changing your configuration at this time. I recommend >>> rereading my earlier recommendation and following that instead: "As the >>> next step in triage, I recommend determining what that CA is in these cases >>> (e.g., by capturing raw TLS packets and matching them with

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-04 Thread Jonathan Lee
Sorry tls_outgoing_options cipher=HIGH:MEDIUM:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS tls_outgoing_options options=NO_SSLv3,SINGLE_DH_USE,SINGLE_ECDH_USE Would I add this here? > On Jul 4, 2024, at 15:12, Jonathan Lee wrote: > > I know before I could use > > tls_outgoing_opt

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-04 Thread Jonathan Lee
I know before I could use tls_outgoing_options cipher=EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:HIGH:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS However with the update I am seeing ER

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-04 Thread Alex Rousskov
On 2024-07-04 15:37, Jonathan Lee wrote: in Squid.conf I have nothing with that detective. Sounds good; sslproxy_cert_sign default should work OK in most cases. I mentioned signUntrusted algorithm so that you can discover (from the corresponding sslproxy_cert_sign documentation) which CA/cer

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-04 Thread Jonathan Lee
Maybe adding it like this … sslproxy_cert_sign signTrusted bump_only_mac https_login splice_only_mac NoBumpDNS NoSSLIntercept ssl_bump peek step1 miss_access deny no_miss active_use ssl_bump splice https_login active_use ssl_bump splice splice_only_mac splice_only active_use ssl_bump splice NoBum

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-04 Thread Jonathan Lee
I found it # TAG: sslproxy_cert_sign # #sslproxy_cert_sign acl ... # #The following certificate signing algorithms are supported: # # signTrusted # Sign using the configured CA certificate which is usually # placed in and trusted by end-user

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-04 Thread Alex Rousskov
On 2024-07-04 12:11, Jonathan Lee wrote: failure while accepting a TLS connection on conn5887 local=192.168.1.1:3128 SQUID_TLS_ERR_ACCEPT+TLS_LIB_ERR=A000417 A000417 is an "unknown CA" alert sent by client to Squid while the client is trying to establish a TLS connection to/through Squid. The

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-04 Thread Alex Rousskov
On 2024-07-03 13:56, Jonathan Lee wrote: Hello fellow Squid users does anyone know how to fix this issue? I counted about eight different "issues" in your cache.log sample. Most of them are probably independent. I recommend that you explicitly pick _one_, search mailing list archives for prev

Re: [squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-03 Thread Jonathan Lee
I forgot to mention my certificates I use on squid was generated from this method openssl req -x509 -new -nodes -key myProxykey.key -sha256 -days 365 -out myProxyca.pem Sent from my iPhone > On Jul 3, 2024, at 10:56, Jonathan Lee wrote: > > Hello fellow Squid users does anyone know how to

[squid-users] Squid Cache Issues migration from 5.8 to 6.6

2024-07-03 Thread Jonathan Lee
Hello fellow Squid users does anyone know how to fix this issue? Squid - Cache Logs Date-Time Message 31.12.1969 16:00:00 03.07.2024 10:54:34 kick abandoning conn7853 local=192.168.1.1:3128 remote=192.168.1.5:49710 FD 89 flags=1 31.12.1969 16:00:00 03.07.2024 10:54:29 kick

Re: [squid-users] Squid Cache 6.9 on Ubuntu 22.04.3 LTS. Not caching large files to disk.

2024-04-12 Thread Jonathan Lee
making progress, I just need to understand where I am going wrong with > SSL Bump for https connections. Why it is still tunnelling? If I fix that I > think it will cache/pull from cache the https downloads too. #fingerscrossed > > Any suggestions or decent web blogs/etc on how to con

Re: [squid-users] Squid Cache 6.9 on Ubuntu 22.04.3 LTS. Not caching large files to disk.

2024-04-12 Thread PinPin Poola
uggestions or decent web blogs/etc on how to configure it? Have a great weekend, Many Thanks Pin From: Jonathan Lee Sent: 12 April 2024 15:10 To: PinPin Poola Cc: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Squid Cache 6.9 on Ubuntu 22.04.3 LT

[squid-users] Squid Cache 6.9 on Ubuntu 22.04.3 LTS. Not caching large files to disk.

2024-04-12 Thread PinPin Poola
I have moved on a pace since my first message yesterday - thank you all who helped. I can now happily download files from clients on my isolated network, through my new proxy. #fanfare However, I would really like to cache any file over 1 GB in size to disk, as the same file could get downl

Re: [squid-users] Squid cache questions

2024-04-06 Thread Jonathan Lee
Thanks for the reply I am using the built in StoreID program however it requires the database file so I have it only set to the items in the dynamic cache settings custom refresh areas. The rewrite program should redirect to pull from the cache right? Only for bumped connections and or cab fil

Re: [squid-users] Squid cache questions

2024-04-06 Thread Amos Jeffries
On 6/04/24 11:34, Jonathan Lee wrote: if (empty($settings['sslproxy_compatibility_mode']) || ($settings['sslproxy_compatibility_mode'] == 'modern')) { // Modern cipher suites $sslproxy_cipher = "EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+

Re: [squid-users] Squid cache questions

2024-04-06 Thread Amos Jeffries
On 5/04/24 17:25, Jonathan Lee wrote: ssl_bump splice https_login ssl_bump splice splice_only ssl_bump splice NoSSLIntercept ssl_bump bump bump_only markBumped ssl_bump stare all acl markedBumped note bumped true url_rewrite_access deny markedBumped for good hits should the url_rewirte_access d

Re: [squid-users] Squid cache questions

2024-04-05 Thread Jonathan Lee
if (empty($settings['sslproxy_compatibility_mode']) || ($settings['sslproxy_compatibility_mode'] == 'modern')) { // Modern cipher suites $sslproxy_cipher = "EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECD

Re: [squid-users] Squid cache questions

2024-04-04 Thread Amos Jeffries
On 4/04/24 17:48, Jonathan Lee wrote: Is there any particular order to squid configuration?? Yes. Does this look correct? Best way to find out is to run "squid -k parse", which should be done after upgrades as well to identify and

[squid-users] Squid cache questions

2024-04-03 Thread Jonathan Lee
Is there any particular order to squid configuration?? Does this look correct? I actually get allot of hits and it functions amazing, so I wanted to share this in case I could improve something. Is there any issues with security? I am concerned that an invasive container could become installed

Re: [squid-users] Squid-cache authentication is not working

2023-09-09 Thread Jason Long
Hello, Thanks again. You right, I must move the following lines after the authentication lines: http_access allow localnet http_access allow localhost http_access deny all It worked. On Sunday, September 10, 2023 at 01:57:32 AM GMT+3:30, Alex Rousskov wrote: On 2023-09-09 15:09, Jason Lo

Re: [squid-users] Squid-cache authentication is not working

2023-09-09 Thread Alex Rousskov
On 2023-09-09 18:27, Alex Rousskov wrote: On 2023-09-09 15:09, Jason Long wrote: My Squid-cache server IP is "192.168.1.2". I use Mozilla Firefox and set the proxy to "192.168.1.2:3128". What information do you need to tell you? Do you see Firefox requests/transactions reflected in Squid acce

Re: [squid-users] Squid-cache authentication is not working

2023-09-09 Thread Alex Rousskov
On 2023-09-09 15:09, Jason Long wrote: My Squid-cache server IP is "192.168.1.2". I use Mozilla Firefox and set the proxy to "192.168.1.2:3128". What information do you need to tell you? Do you see Firefox requests/transactions reflected in Squid access.log? Anything in Squid cache.log? Sorr

Re: [squid-users] Squid-cache authentication is not working

2023-09-09 Thread Jason Long
Hi Alex,Thank you so much for your reply.My Squid-cache server IP is "192.168.1.2".I use Mozilla Firefox and set the proxy to "192.168.1.2:3128".What information do you need to tell you? Sent from Yahoo Mail on Android On Sat, Sep 9, 2023 at 5:56 PM, Alex Rousskov wrote: On 2023-09-09 09

Re: [squid-users] Squid-cache authentication is not working

2023-09-09 Thread Alex Rousskov
On 2023-09-09 09:09, Jason Long wrote: Hello, I installed the Squid-cache on Debian 12, then I installed the Apache utils: $ sudo apt install apache2-utils After it, I did the following steps: $ sudo touch /etc/squid/passwd $ sudo chown proxy /etc/squid/passwd Then: $ sudo htpasswd /etc/squi

[squid-users] Squid-cache authentication is not working

2023-09-09 Thread Jason Long
Hello, I installed the Squid-cache on Debian 12, then I installed the Apache utils: $ sudo apt install apache2-utils After it, I did the following steps: $ sudo touch /etc/squid/passwd $ sudo chown proxy /etc/squid/passwd Then: $ sudo htpasswd /etc/squid/passwd jason After it, I opened the "/

[squid-users] Squid-Cache 5.6 RPMs are out

2022-06-14 Thread ngtech1ltd
Hey Everybody, Since 5.6 was recently published (and not all the masters has yet to pick it up) I have built RPM for: CentOS 7,8 Oracle Enterprise Linux 7,8 Amazon Enterprise Linux 2 All of the above includes couple of my personal patches. Feel free to pick the SRPMS and look at the sources.

[squid-users] Squid-Cache Zoom is coming

2022-06-11 Thread Eliezer Croitoru
Hey Everyone, I have been working on a series of zoom meetings on Squid-Cache from 0 to hero. It's sort of a meet up with a basic agenda. I would like to find the right time for these meetings and to put up a list of subjects that I will touch in them. However I would like to make some regis

Re: [squid-users] Squid-Cache VS PHP, put some things in perspective

2022-04-24 Thread Eliezer Croitoru
n any helpers crashes. Eliezer Eliezer Croitoru NgTech, Tech Support Mobile: +972-5-28704261 Email: ngtech1...@gmail.com -Original Message- From: squid-users On Behalf Of Amos Jeffries Sent: Thursday, April 14, 2022 07:18 To: squid-users@lists.squid-cache.org Subject: Re: [squid-users]

Re: [squid-users] Squid-Cache VS PHP, put some things in perspective

2022-04-17 Thread Eliezer Croitoru
hanks, Eliezer Eliezer Croitoru NgTech, Tech Support Mobile: +972-5-28704261 Email: ngtech1...@gmail.com -Original Message- From: squid-users On Behalf Of Amos Jeffries Sent: Thursday, April 14, 2022 07:18 To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Squid-Cache V

Re: [squid-users] Squid-Cache VS PHP, put some things in perspective

2022-04-13 Thread Amos Jeffries
On 13/04/22 10:30, Eliezer Croitoru wrote: I am looking for adventurous Squid Users which wants to help me test if PHP 7.4+ still possess the same old 5.x STDIN bugs. Hi Eliezer, Thanks for taking on a re-investingation. FTR, the old problem was not stdin itself. The issue was that PHP w

[squid-users] Squid-Cache VS PHP, put some things in perspective

2022-04-12 Thread Eliezer Croitoru
Hey Everybody, Since I know Squid-Cache I remember hearing over and over to not use PHP however it's a great language. I had the pleasure of hearing a talk from the creator of PHP and it gave me couple answers to my doubts and I wanted to say couple good words about PHP. First the talk is

Re: [squid-users] squid cache

2021-03-01 Thread Majed Zouhairy
Thanks for, at least, the explanation On 3/1/21 6:12 PM, Alex Rousskov wrote: On 3/1/21 2:07 AM, Majed Zouhairy wrote: i tried this, but neither the https download bandwidth restriction nor caching seems to be working as expected Squid cannot cache HTTP responses without bumping HTTPS traffic

Re: [squid-users] squid cache

2021-03-01 Thread Alex Rousskov
On 3/1/21 2:07 AM, Majed Zouhairy wrote: > i tried this, but neither the https download bandwidth restriction nor > caching seems to be working as expected Squid cannot cache HTTP responses without bumping HTTPS traffic. This is a protocol-level limitation, not a bug. There are known delay pools

Re: [squid-users] squid cache

2021-02-28 Thread Majed Zouhairy
i tried this, but neither the https download bandwidth restriction nor caching seems to be working as expected acl slower src 10.46.10.78 acl localnet src 10.46.10.0/24 acl SSL_ports port 443 acl Safe_ports port 80 # http acl Safe_ports port 8080# http acl Safe_ports port 21

[squid-users] squid cache

2021-02-25 Thread Majed Zouhairy
Health be Upon you, i want to cache certain files, let's say exe, msi... above 20MB and below 300MB, limit the cache directory to 3GB i have no ssl bump not configured version 4.14 how to do that? ___ squid-users mailing list squid-users@lists.squid-

Re: [squid-users] Squid cache with SSL

2020-05-27 Thread Eliezer Croitoru
-28704261Email: ngtech1...@gmail.com From: Amos JeffriesSent: Monday, May 25, 2020 1:02 PMTo: squid-users@lists.squid-cache.orgSubject: Re: [squid-users] Squid cache with SSL On 25/05/20 8:09 pm, Andrey Etush-Koukharenko wrote:> Hello, I'm trying to set up a cache for GCP signed URLs using squid 4.

Re: [squid-users] Squid cache with SSL

2020-05-25 Thread Amos Jeffries
On 25/05/20 8:09 pm, Andrey Etush-Koukharenko wrote: > Hello, I'm trying to set up a cache for GCP signed URLs using squid 4.10 > I've set ssl_bump: > *http_port 3128 ssl-bump cert=/etc/ssl/squid_ca.pem > generate-host-certificates=on dynamic_cert_mem_cache_size=4MB > > sslcrtd_program /usr/lib/sq

[squid-users] Squid cache with SSL

2020-05-25 Thread Andrey Etush-Koukharenko
Hello, I'm trying to set up a cache for GCP signed URLs using squid 4.10 I've set ssl_bump: *http_port 3128 ssl-bump cert=/etc/ssl/squid_ca.pem generate-host-certificates=on dynamic_cert_mem_cache_size=4MBsslcrtd_program /usr/lib/squid/security_file_certgen -s /var/lib/ssl_db -M 4MBacl step1

Re: [squid-users] squid-cache proxy which does it all

2020-01-09 Thread robert k Wild
thanks for this Amos, really appreciate it :) On Thu, 9 Jan 2020 at 19:00, Amos Jeffries wrote: > On 9/01/20 8:34 pm, robert k Wild wrote: > > hi all, > > > > I have made a script for squid that installs the following – > > > > Squid – http proxy server > > Squid ssl-bump – https interception fo

Re: [squid-users] squid-cache proxy which does it all

2020-01-09 Thread Amos Jeffries
On 9/01/20 8:34 pm, robert k Wild wrote: > hi all, > > I have made a script for squid that installs the following – > > Squid – http proxy server > Squid ssl-bump – https interception for squid > C-ICAP – icap server > clamAV – AV engine to detect trojan viruses malware etc > squidclamav – to mak

[squid-users] squid-cache proxy which does it all

2020-01-08 Thread robert k Wild
hi all, I have made a script for squid that installs the following – Squid – http proxy server Squid ssl-bump – https interception for squid C-ICAP – icap server clamAV – AV engine to detect trojan viruses malware etc squidclamav – to make it all integrated with squid what do you think? #!/bin/

Re: [squid-users] Squid Cache Problem

2019-07-25 Thread Devilindisguise
Great, thank you. We'll take a look at the DNS cache and see what we find. -- Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-ca

Re: [squid-users] Squid Cache Problem

2019-07-24 Thread Matus UHLAR - fantomas
On 25.07.19 00:41, Devilindisguise wrote: We have what is probably an easy one. Some Windows servers use a locally installed Squid proxy instance for all outbound traffic. These servers also make use of some F5 GTM (DNS) servers to provide a resilient inter-DC DNS topology. Essentially what shou

[squid-users] Squid Cache Problem

2019-07-24 Thread Devilindisguise
Hello all Let me preface this by stating I am far from being a Squid expert so please bear with me. We have what is probably an easy one. Some Windows servers use a locally installed Squid proxy instance for all outbound traffic. These servers also make use of some F5 GTM (DNS) servers to provide

Re: [squid-users] Squid Cache Server

2018-10-20 Thread Antony Stone
On Saturday 20 October 2018 at 16:53:12, Mujtaba Hassan Madani wrote: > Hi, > > now it works through URL > > http://196.202.134.253:3128/squid-internal-mgr/info instead of > http://proxy.com:3128/squid-internal-mgr/info Yes, that is because proxy,com does not belong to you - it points to someon

Re: [squid-users] Squid Cache Server

2018-10-20 Thread Mujtaba Hassan Madani
-cache.org Subject: Re: [squid-users] Squid Cache Server On Saturday 20 October 2018 at 15:59:36, Mujtaba Hassan Madani wrote: > Hi Antony, > > this is the first IP Connection to 34.194.132.99 failed. That is the address which "proxy,com" resolves to on my machine too. >

Re: [squid-users] Squid Cache Server

2018-10-20 Thread Antony Stone
On Saturday 20 October 2018 at 15:59:36, Mujtaba Hassan Madani wrote: > Hi Antony, > > this is the first IP Connection to 34.194.132.99 failed. That is the address which "proxy,com" resolves to on my machine too. > the IP of my server is 196.202.134.253 So, does this give you any clues as to

Re: [squid-users] Squid Cache Server

2018-10-20 Thread Mujtaba Hassan Madani
.org Subject: Re: [squid-users] Squid Cache Server On Saturday 20 October 2018 at 14:56:33, Mujtaba Hassan Madani wrote: > Hi Amos, > >I get attached message when trying to access cache manger through web > interface below is my full URL > > http://proxy.com:3128/squid-interna

Re: [squid-users] Squid Cache Server

2018-10-20 Thread Antony Stone
On Saturday 20 October 2018 at 14:56:33, Mujtaba Hassan Madani wrote: > Hi Amos, > >I get attached message when trying to access cache manger through web > interface below is my full URL > > http://proxy.com:3128/squid-internal-mgr/info 1. What IP address does "proxy.com" resolve to on your

Re: [squid-users] Squid Cache Server

2018-10-20 Thread Mujtaba Hassan Madani
ries Sent: Saturday, October 13, 2018 7:58:34 AM To: Mujtaba Hassan Madani; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Squid Cache Server On 12/10/18 7:55 AM, Mujtaba Hassan Madani wrote: > Hi Amos, > > I have change my domain name to proxy instead of that long o

Re: [squid-users] Squid Cache Server

2018-10-13 Thread Amos Jeffries
On 12/10/18 7:55 AM, Mujtaba Hassan Madani wrote: > Hi Amos, > >     I have change my domain name to proxy instead of that long one per > your advice i was wondering where to get information about my current > caching files and it's size ? i login to > http://proxy:3128/squid-internal-mgr/info f

Re: [squid-users] Squid Cache Server

2018-10-06 Thread Mujtaba Hassan Madani
? From: squid-users on behalf of Amos Jeffries Sent: Saturday, October 6, 2018 4:41:23 AM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Squid Cache Server On 6/10/18 6:22 AM, Mujtaba Hassan Madani wrote: > Hi, > > I also get the attached error w

Re: [squid-users] Squid Cache Server

2018-10-05 Thread Amos Jeffries
On 6/10/18 6:22 AM, Mujtaba Hassan Madani wrote: > Hi, > >   I also get the attached error while been trying to access through web > interface for private IP address. I managed to add the IP on the bypass > proxy server for the local address but, i cant do for all since I have > many private IP

Re: [squid-users] Squid Cache Server

2018-10-05 Thread Mujtaba Hassan Madani
behalf of Mujtaba Hassan Madani Sent: Wednesday, September 19, 2018 1:46:44 PM To: Amos Jeffries; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Squid Cache Server Hi Amos, thanks for your concern, as I informed you Iam looking to install Squid on Ubuntu Linux server for Caching

Re: [squid-users] Squid Cache Server

2018-09-19 Thread Mujtaba Hassan Madani
: Sunday, September 16, 2018 4:58:37 PM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Squid Cache Server On 15/09/18 12:13 PM, Mujtaba Hassan Madani wrote: > Hi Amos, > >you did not get back to me about my below concern > I responded to your concern about copyrigh

Re: [squid-users] Squid Cache Server

2018-09-16 Thread Amos Jeffries
On 15/09/18 12:13 PM, Mujtaba Hassan Madani wrote: > Hi Amos, > >    you did not get back to me about my below concern  > I responded to your concern about copyright. I do not see anything else in your messages as expressing a concern to be responded to. Amos >

Re: [squid-users] Squid Cache Server

2018-09-14 Thread Mujtaba Hassan Madani
Hi Amos, you did not get back to me about my below concern Regards Mujtaba H, From: Mujtaba Hassan Madani Sent: Thursday, September 13, 2018 5:36:48 PM To: Amos Jeffries; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Squid Cache Server

Re: [squid-users] Squid Cache Server

2018-09-13 Thread Mujtaba Hassan Madani
aba H, From: squid-users on behalf of Amos Jeffries Sent: Wednesday, September 12, 2018 2:54:37 PM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Squid Cache Server On 13/09/18 2:16 AM, Mujtaba Hassan Madani wrote: > Dear Squid Team, > > how does co

Re: [squid-users] Squid Cache Server

2018-09-12 Thread Amos Jeffries
On 13/09/18 2:16 AM, Mujtaba Hassan Madani wrote: > Dear Squid Team, > >      how does content provider prevent it from been cached while passing > through squid proxy it's by a copy right law No. Contents which can be transferred through a proxy are implicitly licensed for re-distribution. Le

Re: [squid-users] Squid Cache Server

2018-09-12 Thread Mujtaba Hassan Madani
jtaba H, From: squid-users on behalf of Antony Stone Sent: Tuesday, September 11, 2018 8:54:05 AM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Squid Cache Server On Tuesday 11 September 2018 at 10:43:13, Mujtaba Hassan Madani wrote: >

Re: [squid-users] Squid Cache Server

2018-09-11 Thread Antony Stone
On Tuesday 11 September 2018 at 10:43:13, Mujtaba Hassan Madani wrote: > Hi Squid team, > > I just want to no if squid can cache software for example windows > update, Java,etc. Squid doesn't care what a file is for - whether it's "software", web pages, images, music, video... Squid wi

[squid-users] Squid Cache Server

2018-09-11 Thread Mujtaba Hassan Madani
Hi Squid team, I just want to no if squid can cache software for example windows update, Java,etc. regards Mujtaba Hassan ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] squid cache takes a break

2017-09-13 Thread Vieri
Thanks for the suggestion. I'm sure ufdbguard works great even though it's not maintained/updated on my distro (Gentoo). I use ready-made helpers/redirectors like squidGuard on other systems. However, on this system I wanted to avoid depending on extra software. I also wanted to make my own help

Re: [squid-users] squid cache takes a break

2017-09-12 Thread Eliezer Croitoru
squid-users@lists.squid-cache.org Subject: Re: [squid-users] squid cache takes a break It is just enough not to reinvent the wheel. What needs op - already exists and is called ufdbguard. And it's works perfectly with shallalist :) 13.09.2017 2:51, Eliezer Croitoru пишет: > I just must ad

Re: [squid-users] squid cache takes a break

2017-09-12 Thread Yuri
oun...@lists.squid-cache.org] On > Behalf Of Amos Jeffries > Sent: Tuesday, September 12, 2017 16:08 > To: squid-users@lists.squid-cache.org > Subject: Re: [squid-users] squid cache takes a break > > On 12/09/17 22:59, Vieri wrote: >> >&g

Re: [squid-users] squid cache takes a break

2017-09-12 Thread Eliezer Croitoru
...@lists.squid-cache.org] On Behalf Of Amos Jeffries Sent: Tuesday, September 12, 2017 16:08 To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] squid cache takes a break On 12/09/17 22:59, Vieri wrote: > > > From: Amos Jeffries >> >>

Re: [squid-users] squid cache takes a break

2017-09-12 Thread Amos Jeffries
On 12/09/17 22:59, Vieri wrote: From: Amos Jeffries That is all it needs to do to begin with; parse off the numeric value from the input line and send it back as prefix on the output line. The helper does not need threading or anything particularly special

Re: [squid-users] squid cache takes a break

2017-09-12 Thread Vieri
From: Amos Jeffries > > That is all it needs to do to begin with; parse off the numeric value > from the input line and send it back as prefix on the output line. The > helper does not need threading or anything particularly special for the > > minimal support

Re: [squid-users] squid cache takes a break

2017-09-11 Thread Amos Jeffries
On 11/09/17 20:49, Vieri wrote: From: Amos Jeffries a) start fewer helpers at a time. b) reduce cache_mem. c) add concurrency support to the helpers. So I decreased the startup, idle, cache_mem values: # egrep 'startup=|idle=' squid.conf external_acl_type

Re: [squid-users] squid cache takes a break

2017-09-11 Thread Vieri
From: Amos Jeffries > > a) start fewer helpers at a time. > > b) reduce cache_mem. > > c) add concurrency support to the helpers. So I decreased the startup, idle, cache_mem values: # egrep 'startup=|idle=' squid.conf external_acl_type bllookup ttl=86400 nega

Re: [squid-users] squid cache takes a break

2017-09-09 Thread Amos Jeffries
On 09/09/17 05:39, Vieri wrote: Hi, Sorry for the title, but I really don't know how to describe what just happened today. It's really odd. I previously posted a few similar issues which were all fixed if I increased certain parameters (ulimits, children-{max,startup,idle}, TTL, etc.). This

[squid-users] squid cache takes a break

2017-09-08 Thread Vieri
Hi, Sorry for the title, but I really don't know how to describe what just happened today. It's really odd. I previously posted a few similar issues which were all fixed if I increased certain parameters (ulimits, children-{max,startup,idle}, TTL, etc.). This time however, after several days t

Re: [squid-users] squid cache peer not rotating over round robin !

2017-09-05 Thread Amos Jeffries
On 05/09/17 07:17, --Ahmad-- wrote: hello folks I’m trying to rotate squid request over several peers my config are below but they are only stuck with 1 peer . acl custNet dstdomain .trustly.com .ing.nl .adyen.com .rabobank.nl .abn.nl .iplocation.net .abnamro.com .abnamro.nl .abnamro.nl cac

[squid-users] squid cache peer not rotating over round robin !

2017-09-04 Thread --Ahmad--
hello folks I’m trying to rotate squid request over several peers my config are below but they are only stuck with 1 peer . acl custNet dstdomain .trustly.com .ing.nl .adyen.com .rabobank.nl .abn.nl .iplocation.net .abnamro.com .abnamro.nl .abnamro.nl cache_peer 66.78.18.1 parent 41311 0 no

[squid-users] squid cache peer based on source ip address rule

2017-08-14 Thread --Ahmad--
Dear squid users folks , i have many different cache peers I’m gonna send traffic to. but the issue is i want to have different cache peer setup based on the source ip address . say the ip address of the user was 1.1.1.1 i want it go to the cache peer with system below ## a

Re: [squid-users] Squid Cache to Users at Full Bandwidth

2017-05-06 Thread joseph
you have to mark packet on mangle the DSCP(tos) = 12 first did you and in squid add qos_flows tos local-hit=0x30 miss=0xFF and in queues pic the marked packet name so it will serve the cached HIT to your clients if you can not do it i help u out -- View this message in context: http:

Re: [squid-users] Squid Cache to Users at Full Bandwidth

2017-05-06 Thread christian brendan
; > > -- > > Message: 1 > Date: Fri, 5 May 2017 16:18:33 +0100 > From: christian brendan > To: squid-users@lists.squid-cache.org, > squid-users-ow...@lists.squid-cache.org > Subject: [squid-us

Re: [squid-users] Squid Cache to Users at Full Bandwidth

2017-05-05 Thread Antony Stone
On Friday 05 May 2017 at 16:18:33, christian brendan wrote: > Squid Version 3.5.20 > Cento 7 > Mikrotik RouterBoard v 6.39.1 > Users IP: 192.168.1.0/24 > Squid ip: 192.168.2.1 > > Traffic to squid is routed > > i would like users to have full LAN bandwidth access to squid server, i > have tried

Re: [squid-users] Squid Cache to Users at Full Bandwidth

2017-05-05 Thread Yuri Voinov
http://wiki.squid-cache.org/ 05.05.2017 21:18, christian brendan пишет: > Squid Version 3.5.20 > Cento 7 > Mikrotik RouterBoard v 6.39.1 > Users IP: 192.168.1.0/24 > Squid ip: 192.168.2.1 > > Traffic to squid is routed > > i would like users to have full LAN bandwidth acce

[squid-users] Squid Cache to Users at Full Bandwidth

2017-05-05 Thread christian brendan
Squid Version 3.5.20 Cento 7 Mikrotik RouterBoard v 6.39.1 Users IP: 192.168.1.0/24 Squid ip: 192.168.2.1 Traffic to squid is routed i would like users to have full LAN bandwidth access to squid server, i have tried simple queue on mikrotik but it seems not to be working. Any guide will be appre

Re: [squid-users] squid cache analysis

2017-04-06 Thread Antony Stone
On Thursday 06 April 2017 at 12:27:54, Punyasloka Arya wrote: > squid version:3.3 > OS:centos Which version of CentOS? How was Squid installed? Precisely which version of 3.3 are you using? > The squid cache is not functioning properly You'll have to be more specific than that - what *is* wor

[squid-users] squid cache analysis

2017-04-06 Thread Punyasloka Arya
squid version:3.3 OS:centos ### The squid cache is not functioning properly ### Please suggest something to analyze or capture the log so that the cache service will improve. Do we need to put some tool which

Re: [squid-users] Squid Cache: Version 3.5.16 and ext_ldap_group_acl

2016-04-12 Thread Thomas Elsäßer
Am 12-04-2016 10:58, schrieb Amos Jeffries: On 12/04/2016 8:36 p.m., Thomas Elsäßer wrote: Dear all, I call from Shell: /usr/local/squid/libexec/ext_ldap_group_acl -d -R -b "OU=UMW,DC=a,DC=b,DC=de" -D "...@a.b.de" -w "XXX" \ -f "(&(objectClass=person)(sAMAccountName=%v)(MemberOf=CN=%g

  1   2   >