Re: [squid-users] substituing sniproxy for squid

2016-03-24 Thread Amos Jeffries
On 25/03/2016 1:24 a.m., Luis Daniel Lucio Quiroz wrote: > I understand, buggy I really need to take out this sniproxy in favor of > squid. > > I'm planning that this path needs the HTTP violation flag on compile time, > and by default value is off. So when turning on, it won't be an accident. >

Re: [squid-users] substituing sniproxy for squid

2016-03-24 Thread Luis Daniel Lucio Quiroz
I understand, buggy I really need to take out this sniproxy in favor of squid. I'm planning that this path needs the HTTP violation flag on compile time, and by default value is off. So when turning on, it won't be an accident. Host_verify_header would be a good name for this on/off option Le 24

Re: [squid-users] substituing sniproxy for squid

2016-03-24 Thread Amos Jeffries
On 24/03/2016 3:56 p.m., Luis Daniel Lucio Quiroz wrote: > As A side note, I am reading the code seems file > src/client_side_request.cc function > ClientRequestContext::hostHeaderVerify() is responsible for this. > > And to be exact this option: > if (ia != NULL && ia->count > 0) { >/

Re: [squid-users] substituing sniproxy for squid

2016-03-23 Thread Luis Daniel Lucio Quiroz
As A side note, I am reading the code seems file src/client_side_request.cc function ClientRequestContext::hostHeaderVerify() is responsible for this. And to be exact this option: if (ia != NULL && ia->count > 0) { // Is the NAT destination IP in DNS? for (int i = 0; i < ia->coun

Re: [squid-users] substituing sniproxy for squid

2016-03-23 Thread Luis Daniel Lucio Quiroz
Thanks Well, I am now stuck with the Host header forgery detected Which it means that client and squid resolve different IP (in my use case that is what I want). I already have host_verify_strict disabled, but that is not enough. Any

Re: [squid-users] substituing sniproxy for squid

2016-02-01 Thread Amos Jeffries
On 1/02/2016 11:35 a.m., Luis Daniel Lucio Quiroz wrote: > Hello > > Can anyone give some clue, link something to read on how to do the HTTPs > work with SNI, i just want to forward to the correct server based on the > SNI. I want to get rid of SNIproxy in favor of squid. That should be possible

[squid-users] substituing sniproxy for squid

2016-01-31 Thread Luis Daniel Lucio Quiroz
Hello Can anyone give some clue, link something to read on how to do the HTTPs work with SNI, i just want to forward to the correct server based on the SNI. I want to get rid of SNIproxy in favor of squid. -- Luis Daniel Lucio Quiroz CISSP, CISM, CISA Linux, VoIP and much more fun www.okay.com.m