Re: [squid-users] Any suggestions or comments about my configuration? squid 3.5.20

2018-09-20 Thread Amos Jeffries
On 20/09/18 8:52 AM, Service MV wrote: > Dear Ones, the more I use Squid the more I realize how powerful it is. > And like all powerful software it can be complex at first. > I would like to share my settings and if possible listen (read actually) > your comments and suggestions. > My goals of usin

Re: [squid-users] Help: squid restarts and squidGuard die

2018-09-20 Thread Matus UHLAR - fantomas
On 19.09.18 20:47, Donald Muller wrote: So instead of using squidguard are you saying you should use something like the following? acl ads dstdomain -i "/etc/squid/squid-ads.acl" acl adult dstdomain -i "/etc/squid/squid-adult.acl" http_access deny ads http_access deny adult Do the lists need

Re: [squid-users] Help: squid restarts and squidGuard die

2018-09-20 Thread Amos Jeffries
On 19/09/18 11:49 PM, Marcus Kool wrote: > > On 18/09/18 23:03, Amos Jeffries wrote: >> On 19/09/18 1:54 AM, neok wrote: >>> Thank you very much Amos for putting me in the right direction. >>> I successfully carried out the modifications you indicated to me. >>> Regarding ufdbGuard, if I understoo

Re: [squid-users] Help: squid restarts and squidGuard die

2018-09-20 Thread Flashdown
I'm saying the purpose of the url_rewrite_* API in Squid is to tell Squid whether the URL (only) needs some mangling in order for the server/origin to understand it. It can re-write transparently with all the problems that causes to security scopes and URL sync between the endpoints. Or redirect

Re: [squid-users] Help: squid restarts and squidGuard die

2018-09-20 Thread Donald Muller
> -Original Message- > From: squid-users On Behalf > Of Matus UHLAR - fantomas > Sent: Thursday, September 20, 2018 7:16 AM > To: squid-users@lists.squid-cache.org > Subject: Re: [squid-users] Help: squid restarts and squidGuard die > > On 19.09.18 20:47, Donald Muller wrote: > >So inst

Re: [squid-users] Help: squid restarts and squidGuard die

2018-09-20 Thread Marcus Kool
On 20/09/18 08:46, Amos Jeffries wrote: On 19/09/18 11:49 PM, Marcus Kool wrote: On 18/09/18 23:03, Amos Jeffries wrote: On 19/09/18 1:54 AM, neok wrote: Thank you very much Amos for putting me in the right direction. I successfully carried out the modifications you indicated to me. Regardi

[squid-users] Is there any way to cache or forward https requests to an http proxy using Squid?

2018-09-20 Thread Brett
I currently have squid setup to use a self-signed certificate for MITM to cache HTTPS requests. This works. If an item is not in the cache I want to request from an online proxy like Crawlera. Unfortunately Crawlera only offer an http endpoint. When I try to forward to this endpoint, everything wor

Re: [squid-users] Is there any way to cache or forward https requests to an http proxy using Squid?

2018-09-20 Thread Alex Rousskov
On 09/20/2018 12:36 PM, Brett wrote: > I currently have squid setup to use a self-signed certificate for MITM to > cache HTTPS requests. This works. [...] > Is there a way I can configure squid so I can specify > it as a proxy for an https request and then have it act as a cache or > forward to an

Re: [squid-users] Help: squid restarts and squidGuard die

2018-09-20 Thread Amos Jeffries
On 21/09/18 3:46 AM, Donald Muller wrote: > >> -Original Message- >> From: Matus UHLAR - fantomas >> Sent: Thursday, September 20, 2018 7:16 AM >> >> On 19.09.18 20:47, Donald Muller wrote: >>> So instead of using squidguard are you saying you should use something >> like the following? >

Re: [squid-users] Help: squid restarts and squidGuard die

2018-09-20 Thread Amos Jeffries
On 21/09/18 3:46 AM, Marcus Kool wrote: > > On 20/09/18 08:46, Amos Jeffries wrote: >> On 19/09/18 11:49 PM, Marcus Kool wrote: >>> >>> On 18/09/18 23:03, Amos Jeffries wrote: On 19/09/18 1:54 AM, neok wrote: > Thank you very much Amos for putting me in the right direction. > I succes

Re: [squid-users] About SSL peek-n-splice/bump configurations

2018-09-20 Thread Amos Jeffries
On 20/09/18 9:35 AM, Donald Muller wrote: > Amos, > > So instead of using squidguard are you saying you should use something like > the following? > > acl ads dstdomain -i "/etc/squid/squid-ads.acl" > acl adult dstdomain -i "/etc/squid/squid-adult.acl" > *If* those lists contain dstdomain for

Re: [squid-users] Is there any way to cache or forward https requests to an http proxy using Squid?

2018-09-20 Thread Brett Anderson
Thank you! I reverted back to: ssl_bump peek step1 ssl_bump bump all And then based on that first link you sent me I rebuilt my Squid instance from https://github.com/measurement-factory/squid/tree/SQUID-360-peering-for-SslBump Then tested and I think it's working now? >From my access log: # t

Re: [squid-users] Help: squid restarts and squidGuard die

2018-09-20 Thread Alex Rousskov
On 09/20/2018 01:50 PM, Amos Jeffries wrote: > On 21/09/18 3:46 AM, Donald Muller wrote: >> Does Squid monitor dstdomain files for changes and reload them or does a '-k >> reconfigure' need to be issued? > Not currently. I'm looking for a nice portable way to do file watching. > Patches and/o

Re: [squid-users] Help: squid restarts and squidGuard die

2018-09-20 Thread Alex Rousskov
On 09/20/2018 02:41 PM, Amos Jeffries wrote: > Squid does not close or break any client connections when reconfigured. IIRC, this statement is inaccurate (unfortunately): Reconfiguring Squid may break client connections that Squid has not started processing yet. The connections already being proc