Re: [squid-users] FTP relay with active client is broken?

2017-02-13 Thread Alex
Well, actually it looks like a bug in squid to me. Some points: 1. When client connects with active FTP mode, squid opens a local socket and tries to assign server's IP address to it. So far so good, however this doesn't work (tested in both 'intercept' and 'tproxy' modes): 2017/02/13 14:5

[squid-users] Reverse proxy for HTTPS cloudfront server

2017-02-13 Thread Philip Munaawa
I am trying to reverse proxy a site hosted on cloudfront, using the normal https_port accel. I have the key/cert pair for the origin. The cloudfront uses TLS/SNI to negotiate an SSL connection. However, when I try to connect through the proxy, I get the error below in the logs: Error negotiating S

[squid-users] The header: HTTP_VIA is present with the value:

2017-02-13 Thread --Ahmad--
hi folks I’m checking my proxy in whatismyproxy.comand it says :The header: HTTP_VIA is present with the value:HTTP/1.1 vnnnz01msp2tser1.wnsnet.attws.com.is there anyway that i remove that proxy detection ?___ squid-users mailing list squid-users@lists.sq

Re: [squid-users] The header: HTTP_VIA is present with the value:

2017-02-13 Thread Yuri Voinov
via off 14.02.2017 0:00, --Ahmad-- пишет: > hi folks > I’m checking my proxy in > > whatismyproxy.com > > and it says : > > The header: HTTP_VIA is present with the value:HTTP/1.1 > vnnnz01msp2tser1.wnsnet.attws.com > . > > is

Re: [squid-users] FTP relay with active client is broken?

2017-02-13 Thread Amos Jeffries
On 14/02/2017 1:18 a.m., Alex wrote: > Well, actually it looks like a bug in squid to me. Some points: > > 1. When client connects with active FTP mode, squid opens a local socket and > tries to assign server's IP address to it. So far so good, however this > doesn't work (tested in both 'inte

Re: [squid-users] Reverse proxy for HTTPS cloudfront server

2017-02-13 Thread Amos Jeffries
On 14/02/2017 4:40 a.m., Philip Munaawa wrote: > I am trying to reverse proxy a site hosted on cloudfront, using the normal > https_port accel. I have the key/cert pair for the origin. The cloudfront > uses TLS/SNI to negotiate an SSL connection. However, when I try to connect > through the proxy,

Re: [squid-users] FTP relay with active client is broken?

2017-02-13 Thread Alex
Well, I can try to make a patch for this... Two questions: 1. I should send it to squid-dev, do I? 2. Source code for which version should I use: 4.0 or 3.5? 14.02.2017, 04:59, "Amos Jeffries" : > On 14/02/2017 1:18 a.m., Alex wrote: >>    Well, actually it looks like a bug in squid to me. Some po

[squid-users] Squid on separate box and it can't see packets

2017-02-13 Thread John Pearson
Hi all, I have squid on a separate box on my network with ip address 192.168.1.2 In squid.conf I have: http_port 0.0.0.0:3128 http_port 0.0.0.0:3129 intercept --- On squid box: $ sudo netstat -lnp | grep squid tcp0 0 0.0.0.0:31280.0.0.0:* LISTEN

Re: [squid-users] Squid on separate box and it can't see packets

2017-02-13 Thread Eliezer Croitoru
Hey, There are couple missing pieces(in my eyes) in order to understand the picture. Is this squid box a router or just a proxy? What tcpdump command did you ran? What is the networks that are involved? What is the gateway and dhcp for this network? If the client is a linux box then we need the ou