[squid-users] Squid as Transparent Proxy

2017-10-10 Thread davide.motti
Hi to everybody, Last week I've set up Squid as transparent Proxy and everything seems to work fine, it cache HTTP and HTTPS connections without any problem. The only think that "worries" me is that if I put the "intercept" flag on the http_port and on the https port I'm not able to connect to an

Re: [squid-users] Squid as Transparent Proxy

2017-10-10 Thread Amos Jeffries
On 10/10/17 21:19, davide.motti wrote: Hi to everybody, Last week I've set up Squid as transparent Proxy and everything seems to work fine, it cache HTTP and HTTPS connections without any problem. The only think that "worries" me is that if I put the "intercept" flag on the http_port and on the

Re: [squid-users] Ipv6 error

2017-10-10 Thread Amos Jeffries
On 10/10/17 05:46, erdosain9 wrote: this is weird. This just happend to me with that web... i mean, with https://wiki.squid-cache.org/ (not with google, not with facebook). But the weird is that if i go trough a authenticate machine for ip, i receive that ipv6. but if i go throug a authenticate

Re: [squid-users] Ipv6 error

2017-10-10 Thread erdosain9
Ok, thats a error from chrome. Another thing with just that web, that if i disable dns_ipv4_first. I get this: -- The following error was encount

Re: [squid-users] Ipv6 error

2017-10-10 Thread erdosain9
Sorry, but, the problem with the certificate is a problem from the web?? i mean, is not a problem of "my squid". So better i exclude that web... but, so strange, squid webpage wiki with problem in certificate??? -- Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f10190

[squid-users] Private root certificate

2017-10-10 Thread B Hirsch
What are the security vulnerabilities with trusting your own private root certificate? ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Is your kerberos ticket expired?

2017-10-10 Thread erdosain9
Hi. I follow this guide https://wiki.squid-cache.org/ConfigExamples/Authenticate/WindowsActiveDirectory But, i dont know where put this Add the following configuration to /etc/default/squid3 KRB5_KTNAME=/etc/squid3/PROXY.keytab export KRB5_KTNAME i dont have that file /etc/default/squid3 Squi

Re: [squid-users] Private root certificate

2017-10-10 Thread Antony Stone
On Tuesday 10 October 2017 at 17:37:44, B Hirsch wrote: > What are the security vulnerabilities with trusting your own private root > certificate? If *you* created the certificate and *you* control the CA, so you *know* what certificates it has signed, I don't see that there are any vulnerabilit

Re: [squid-users] Is your kerberos ticket expired?

2017-10-10 Thread erdosain9
Sorry, i found where /etc/sysconfig/squid And was good, already have that config, so i dont know why is failing. -- Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html ___ squid-users mailing list squid-users@lis

[squid-users] TCP_REFRESH_UNMODIFIEDs are really MISSes

2017-10-10 Thread Victor Sudakov
Dear Colleagues, When updating several almost identical FreeBSD hosts via a squid-3.5.27 proxy, I expect to see lots of HITs, because the patches on the update server should be identical too. However, I see lots of TCP_REFRESH_UNMODIFIED lines, and only occasional HIT statuses. Please see the log

Re: [squid-users] TCP_REFRESH_UNMODIFIEDs are really MISSes

2017-10-10 Thread Alex Rousskov
On 10/10/2017 07:50 PM, Victor Sudakov wrote: > When updating several almost identical FreeBSD hosts via a > squid-3.5.27 proxy, I expect to see lots of HITs, because the patches > on the update server should be identical too. > > However, I see lots of TCP_REFRESH_UNMODIFIED lines, and only > oc

Re: [squid-users] Ipv6 error

2017-10-10 Thread Amos Jeffries
On 11/10/17 02:26, erdosain9 wrote: Sorry, but, the problem with the certificate is a problem from the web?? i mean, is not a problem of "my squid". So better i exclude that web... but, so strange, squid webpage wiki with problem in certificate??? It is either your browser or the LetsEncrypt s