Re: [squid-users] ICAP: how to get port of X-Client-IP

2014-12-16 Thread Alexander Bubnov
Hello Amos! Glad to get your answer! 1. I have tried to use %>p specifier for adaptation_meta directive. But it seems does not work that way I used it. I specified it in squid.conf: adaptation_meta X-CLIENT-SRCPORT %>p I found that specifier ony in logformat. May be you mixed it up? 2. About

[squid-users] 'cache' config option and rewrite

2014-12-16 Thread James Harper
I have a rewrite rule so that any request for a list of apt repositories (acl dstdomain) are rewritten to instead go to my apt-cacher server, and then a "cache deny" rule to make sure squid doesn't cache files from these repositories. This seemed to be working fine but my latest attempt at a deb

Re: [squid-users] 'cache' config option and rewrite

2014-12-16 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 16/12/2014 11:01 p.m., James Harper wrote: > I have a rewrite rule so that any request for a list of apt > repositories (acl dstdomain) are rewritten to instead go to my > apt-cacher server, and then a "cache deny" rule to make sure squid > doesn't

Re: [squid-users] ICAP: how to get port of X-Client-IP

2014-12-16 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 16/12/2014 9:49 p.m., Alexander Bubnov wrote: > > Hello Amos! Glad to get your answer! > > > 1. I have tried to use %>p specifier for adaptation_meta directive. > But it seems does not work that way I used it. I specified it in > squid.conf: > >

Re: [squid-users] Problem with digest authentification and credential backend

2014-12-16 Thread FredB
> > Ok, thanks, > > > > Tested with both nonce_count and nonce_max_duration, no problem. Do > > you known if it works with squid 3.5 ? > > > > > > No sorry I don't know, but if the patch can be applied I guess that > yes it can works. > Except if there are some changes in DIGEST between 3.4 an

[squid-users] squid rotating between many ips

2014-12-16 Thread Ahmed Allzaeem
Hello Guys , im gonna configure squid with many ips with many outside outgoing addresses. But my goal this time is . I need rotating ips. As an example , I connect to ip:port , and then I need my ips be rotated between many outgoing ips How can squid help me with that ? ___

Re: [squid-users] Splicing a connection if server cert cannot be verified

2014-12-16 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 16/12/2014 10:20 a.m., Soren Madsen (DREIJER) wrote: > Thanks for the quick reply, Amos. > >> Offering SSLv3 from a server is suicide these days. Those sites >> should be on the fast decline, or at very least shunned like >> plague victims. Lookup

Re: [squid-users] squid rotating between many ips

2014-12-16 Thread Eliezer Croitoru
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/17/2014 02:03 AM, Ahmed Allzaeem wrote: > Hello Guys , im gonna configure squid with many ips with many > outside outgoing addresses. > > > > But my goal this time is . > > I need rotating ips. > > > > As an example , I connect to ip:port

Re: [squid-users] Problem with digest authentification and credential backend

2014-12-16 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/12/2014 3:03 a.m., FredB wrote: > >>> Ok, thanks, >>> >>> Tested with both nonce_count and nonce_max_duration, no >>> problem. Do you known if it works with squid 3.5 ? >>> >>> >> >> No sorry I don't know, but if the patch can be applied I g

Re: [squid-users] squid rotating between many ips

2014-12-16 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/12/2014 1:03 p.m., Ahmed Allzaeem wrote: > Hello Guys , im gonna configure squid with many ips with many > outside outgoing addresses. > > > > But my goal this time is . > > I need rotating ips. > > > > As an example , I connect to ip:port

Re: [squid-users] Problem with digest authentification and credential backend

2014-12-16 Thread FredB
> Should be called auth/digest/Config.cc now. Contents should not be > much different, just the filename. > > Amos Hello, Thnaks Amos, Ok, so I will provide a patch in bug report this week Fred ___ squid-users mailing list squid-users@lists.squid-

[squid-users] Strange entries in access.log

2014-12-16 Thread Dr. Lars Hanke
Hi, in my access.log I find entries like: 1418752070.702 0 172.16.1.66 NONE/400 3636 %C0%0E%C0%0F%C0%07%C0%09%C0 - NONE/- text/html 1418752082.987 0 172.16.1.66 NONE/400 3636 %C0%0E%C0%0F%C0%07%C0%09%C0 - NONE/- text/html 1418752083.490 0 172.16.1.66 NONE/400 3636 %C0%0E%C0%0F%

[squid-users] citrix receiver not authenticating with squid

2014-12-16 Thread Natxo Asenjo
hi, we have 2 centos 6 hosts providing a load-balanced squid service (behind keepalived and haproxy; haproxy sends requests to both squids) and authenticating users against an Active Directory environment. This is working really nice. Our users log in their desktops and using the negotiate authen

Re: [squid-users] citrix receiver not authenticating with squid

2014-12-16 Thread Brendan Kearney
On Tue, 2014-12-16 at 19:40 +0100, Natxo Asenjo wrote: > hi, > > we have 2 centos 6 hosts providing a load-balanced squid service > (behind keepalived and haproxy; haproxy sends requests to both squids) > and authenticating users against an Active Directory environment. This > is working really ni

Re: [squid-users] squid rotating between many ips

2014-12-16 Thread Brett Lymn
On Wed, Dec 17, 2014 at 03:32:57AM +1300, Amos Jeffries wrote: > > Yes, by combining these: > http://wiki.squid-cache.org/ConfigExamples/Strange/RotatingIPs > http://wiki.squid-cache.org/Features/AclRandom > > ... but what are you trying to do it for? > Probably so he can enjoy the pain of dea