Re: [squid-users] http request header must use hostname

2015-12-06 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 # Numeric IP's acl acl numeric_IPs dstdom_regex [0-9]+\.[0-9]+\.[0-9]+\.[0-9]+ # Deny access to numeric IP's http_access deny CONNECT numeric_IPs deny_info TCP_RESET numeric_IPs 06.12.15 8:45, xxiao8 пишет: > is it possible to enforce all http r

Re: [squid-users] http request header must use hostname

2015-12-06 Thread Eliezer Croitoru
I would make it a more accurate regex which requires start and end line matching and max size of the number like: acl numeric_IPs dstdom_regex ^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$ It will match more the exact real IP addresses but it will work. Eliezer On 06/12/2015 12:07, Yuri Vo

Re: [squid-users] http request header must use hostname

2015-12-06 Thread Walter H.
On 06.12.2015 11:07, Yuri Voinov wrote: # Numeric IP's acl acl numeric_IPs dstdom_regex [0-9]+\.[0-9]+\.[0-9]+\.[0-9]+ # Deny access to numeric IP's http_access deny CONNECT numeric_IPs deny_info TCP_RESET numeric_IPs and not to forget IPv6 ... acl numeric_IPs_ipv4 dstdom_regex [0-9]+\.[0-9]+

Re: [squid-users] ntlm_auth defaulting to succeed

2015-12-06 Thread Noel Kelly
Thanks for this Francesco. I have been experimenting with the various authenticators without much success. I have compiled squid-3.5.11 from source and ntlm_fake_auth doesn't appear to work. I have scoured the docs and the forums but I can't find anyone saying it doesn't work. I have it se

Re: [squid-users] http request header must use hostname

2015-12-06 Thread Amos Jeffries
On 7/12/2015 7:38 a.m., Walter H. wrote: > On 06.12.2015 11:07, Yuri Voinov wrote: >> # Numeric IP's acl >> acl numeric_IPs dstdom_regex [0-9]+\.[0-9]+\.[0-9]+\.[0-9]+ >> >> # Deny access to numeric IP's >> http_access deny CONNECT numeric_IPs >> deny_info TCP_RESET numeric_IPs >> > and not to forg

Re: [squid-users] ntlm_auth defaulting to succeed

2015-12-06 Thread Amos Jeffries
On 7/12/2015 9:54 a.m., Noel Kelly wrote: > Thanks for this Francesco. I have been experimenting with the various > authenticators without much success. > > I have compiled squid-3.5.11 from source and ntlm_fake_auth doesn't > appear to work. I have scoured the docs and the forums but I can't fi

[squid-users] chrome proxy issue

2015-12-06 Thread Alex Samad
Hi https://code.google.com/p/chromium/issues/detail?id=544255 Not a squid issue, but might stop people wasting time debugging squid A ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] http request header must use hostname

2015-12-06 Thread xxiao8
On 7/12/2015 7:38 a.m., Walter H. wrote: > On 06.12.2015 11:07, Yuri Voinov wrote: >> # Numeric IP's acl >> acl numeric_IPs dstdom_regex [0-9]+\.[0-9]+\.[0-9]+\.[0-9]+ >> >> # Deny access to numeric IP's >> http_access deny CONNECT numeric_IPs >> deny_info TCP_RESET numeric_IPs >> > and not to fo

Re: [squid-users] doubts about the squid3

2015-12-06 Thread Amos Jeffries
Can you please reply to the mailing list. On 7/12/2015 1:56 p.m., Marcio Demetrio Bacci wrote: > Hi Amos, > > What is the best way to authenticate Squid3 in the Samba 4? > That kind of depends on your network environment and definition of "best". Kerberos is most secure and Negotiate/Kerberos

Re: [squid-users] http request header must use hostname

2015-12-06 Thread Walter H.
On 07.12.2015 00:21, Amos Jeffries wrote: Getting complicated... So xxiao8, why does one want to censor these requests anyway? Amos try to connect natively with the IP-Address instead of the hostname ... the SSL certificate of the host itself prevents the connection without message in the use

Re: [squid-users] http request header must use hostname

2015-12-06 Thread Amos Jeffries
On 7/12/2015 5:41 p.m., Walter H. wrote: > On 07.12.2015 00:21, Amos Jeffries wrote: >> Getting complicated... >> >> So xxiao8, why does one want to censor these requests anyway? >> >> Amos > try to connect natively with the IP-Address instead of the hostname ... > the SSL certificate of the host i