Re: [squid-users] New Squid prefers IPv4

2024-02-05 Thread Antony Stone
On Monday 05 February 2024 at 17:32:51, Rob van der Putten wrote: > Hi there > > On 05/02/2024 17:16, Dieter Bloms wrote: > > On Mon, Feb 05, Rob van der Putten wrote: > >> After upgrading Squid from 3 to 5 the percentage of IPv6 reduced from > >> 61% to less then 1%. > >> Any ideas? > > > > yes

Re: [squid-users] New Squid prefers IPv4

2024-02-06 Thread Antony Stone
On Tuesday 06 February 2024 at 16:16:24, Rob van der Putten wrote: > Hi there > > On 05/02/2024 18:32, Antony Stone wrote: > > > > I believe ping (ICMP) timings are irrelevant. The client (squid in this > > case) does a DNS lookup for the hostname's A and r

Re: [squid-users] Error Question

2024-06-11 Thread Antony Stone
On Tuesday 11 June 2024 at 19:24:43, Jonathan Lee wrote: > FATAL: Received Segment Violation...dying. connection: conn749025 > local=192.168.1.1:3128 remote=192.168.1.5:59502 flags=1 > > Does any know how to fix this?? Can you give any more information such as: 1. Which version of Squid is this

Re: [squid-users] Simulate connections for tuning squid?

2024-06-16 Thread Antony Stone
On Sunday 16 June 2024 at 12:27:03, David Touzeau wrote: > Hi > > We have made such a tool for us. > Available free of charge with no restrictions I think it would be a good idea to publish a tool like this explicitly under a well-known licence. It makes life considerably simpler for people w

Re: [squid-users] Unable to access internal resources via hostname

2024-09-16 Thread Antony Stone
On Monday 16 September 2024 at 20:06:41, Piana, Josh wrote: > How I understand the rules are as follows: > > http_access deny !localnet > > This denies HTTP traffic to what I defined as "localnet". No; firstly the "localnet" ACL is defined by *source* address, therefore "localnet" matches traff

Re: [squid-users] try and reslove domain via local DNS and not squid

2020-06-24 Thread Antony Stone
On Wednesday 24 June 2020 at 17:36:34, robert k Wild wrote: > hi all, > > i want squid not to try and resolve our domain name ie so it resolves > internally on our local DNS server and not go out squid to try and resolve What is in /etc/resolv.conf on your squid server? Antony. -- Never write

Re: [squid-users] Squid and multipart form decode

2020-07-23 Thread Antony Stone
On Thursday 23 July 2020 at 15:22:56, Ryan Le wrote: > I have been trying to configure squid to decode and send multipart form > data to another service. What do you mean by "decode"? > Is there an acl or build parameter needed for multipart form data support? No; Squid sends on what it gets fr

Re: [squid-users] Squid and multipart form decode

2020-07-23 Thread Antony Stone
On Thursday 23 July 2020 at 15:33:01, Ryan Le wrote: > sorry not decode, just parse to send headers to icap as well. Aha, icap - sorry, I can't help you there, but I'm pretty sure there are others here who have used it. > On Thu, Jul 23, 2020 at 9:27 AM Antony Stone wrote: &g

Re: [squid-users] Need squid latest version 4.12 RPM packaged files for centos7 and x86_64 architecture

2020-08-20 Thread Antony Stone
On Thursday 20 August 2020 at 12:25:04, rahul.n...@orange.com wrote: > Hi Team, > > I am looking for a urgent support on squid latest version 4.12 RPM files > based on CentOS7 and x86_64 architecture. "Urgent" is all very well, but we can't help until you tell us what the problem is. > Also, I

Re: [squid-users] Can squid proxy pass the SMTP port 587

2020-08-20 Thread Antony Stone
On Thursday 20 August 2020 at 21:41:20, santosh panchal wrote: > Hi Team > > How to configure squid to pass my smtp traffic on port 587 Install sendmail, exim, postfix or any other MTA of your choice and configure it to relay your outbound email. Squid is not an MTA. Antony. -- The truth

Re: [squid-users] Strange Squid SSL Interception Behavior

2020-08-24 Thread Antony Stone
On Tuesday 25 August 2020 at 00:21:31, Mathew Brown wrote: > I set up the necessary iptables forwarding ports Please show us what those iptables rules are. Antony. -- "It wouldn't be a good idea to talk about him behind his back in front of him." - murble

Re: [squid-users] How to select parent proxy based on user password

2020-09-22 Thread Antony Stone
On Tuesday 22 September 2020 at 22:35:36, Ajb B wrote: > how can you map the user password to a parent proxy? > > so that > > testuser1:qvmgPUJ5xW-121@18.234.74.214:3292 > testuser1:qvmgPUJ5xW-122@18.234.74.214:3292 > testuser1:qvmgPUJ5xW-123@18.234.74.214:3292 > map to a different parent proxy?

Re: [squid-users] Is there a worker option in the source build?

2020-10-14 Thread Antony Stone
On Wednesday 14 October 2020 at 11:19:54, m k wrote: > hi all, > > I have installed squid 4.13. How? Package? Compiled from source? What O/S have you installed it on? > When I set workers, Give us a clue how you're doing that? > squid doesn't work. In what way? Doesn't start? Gives an e

Re: [squid-users] Is there a worker option in the source build?

2020-10-14 Thread Antony Stone
On Wednesday 14 October 2020 at 11:29:58, m k wrote: > hi Antony, > > 4.13 is a compiler from source. Show us the command you use to compile it. > workers just write in squid.conf. I don't think you understood what I meant by "details" - show us exactly what you have put into the config file

Re: [squid-users] FTP proxy

2020-12-06 Thread Antony Stone
On Sunday 06 December 2020 at 16:26:26, Andrea Venturoli wrote: > Hello. > > I'm trying to evaulate FTP proxying with squid and I have a couple of > questions. > To be clear, I'm not talking about FTP through HTTP, but about the > ftp_port option. > I've used frox (http://frox.sourceforge.net/) i

Re: [squid-users] FTP proxy

2020-12-06 Thread Antony Stone
On Sunday 06 December 2020 at 16:56:10, Andrea Venturoli wrote: > On 12/6/20 4:44 PM, Antony Stone wrote: > > Where is the firewall, compared to your Squid proxy, in the network? > > Squid runs on the firewall itself. > > > I'm just wondering how you plan to u

Re: [squid-users] Sqlite3 with Squid

2020-12-10 Thread Antony Stone
On Thursday 10 December 2020 at 12:49:48, Eliezer Croitor wrote: > Hey, > > I am wondering what can I use Sqlite3 with squid? > > I was thinking about holding some of the config dynamic parts inside sqlite > db (in a specific setup) Can you give some examples of such "config dynamic parts"? >

Re: [squid-users] Squid with more than 128 ports?

2020-12-10 Thread Antony Stone
On Thursday 10 December 2020 at 13:02:19, roee klinger wrote: > Hello, > > We have a few Squid proxy servers with a total of around 400 ports What do you mean by that? What are you using 400 ports for? > We have decided that we want to add a cloud instance in the middle of the > connections, t

Re: [squid-users] authorized by pcname

2020-12-12 Thread Antony Stone
On Saturday 12 December 2020 at 14:03:23, sampe...@tiscali.it wrote: > What Squid mechanism do you suggest me to identify the “computer name” ? > What solution/corretion can I make to my environment to apply my idea? A few suggestions: 1. Why not get your DHCP server to allocate IP addresses acc

Re: [squid-users] squid writes to /var/log/messages

2020-12-24 Thread Antony Stone
On Thursday 24 December 2020 at 18:44:21, Song & Movie wrote: > Can any one help me to create http proxy ? 1. Please do not hijack an unrelated thread on the list. Please start a new thread by posting to squid-users@lists.squid-cache.org with an appropriate subject. 2. Please give us at least

Re: [squid-users] Setting up a transparent http and https proxy server using squid 4.6

2020-12-31 Thread Antony Stone
On Thursday 31 December 2020 at 10:10:11, jean francois hasson wrote: > If I set up on a device connected to the access point a proxy manually > ie 10.3.141.1 on port 8080, I can access the internet. If I put the > following rules for iptables to use in files rules.v4 : > > *nat > -A PREROUTING -

Re: [squid-users] Protecting squid

2021-03-11 Thread Antony Stone
On Thursday 11 March 2021 at 14:41:11, Ben Goz wrote: > I tried to open squid with some special port other than the default 3128 > port. Obscurity is not equivalent to security. > But after a while I saw that my squid was being abused by unknown IP > addresses I'm assuming this means your Squid

Re: [squid-users] How to automatically Restart Squid on Ubuntu?

2021-03-22 Thread Antony Stone
On Monday 22 March 2021 at 15:59:37, Angelo Wang wrote: > Hi, > > I have a /22 subnet on a server and sometimes Squid crashes when there are > too many connections. Can someone help me create a script/command to > automatically restart squid if this happens? I would use http://manpages.ubuntu.co

Re: [squid-users] squid ftp list files problem

2021-03-25 Thread Antony Stone
On Thursday 25 March 2021 at 12:53:09, maurizio wrote: > Hello > I have a squid 4.14 version installed recently. I have a problem when we use > that like ftp proxy(via port 21): when a client use that and try to use the > ftp command ls(list) in a directory with a lot files (in my test 250 files)

Re: [squid-users] (possibly dynamic?) multiple port forwarding in the same internal Network ...

2021-05-25 Thread Antony Stone
On Tuesday 25 May 2021 at 07:51:21, Albretch Mueller wrote: > As part of a teaching and learning (TaL)/school software, I need squid: > > a) to detect one of the connected computers in an internal network > comprising wirelessly connected and wired computers as the "master" > (operated by the t

Re: [squid-users] (possibly dynamic?) multiple port forwarding in the same internal Network ...

2021-05-25 Thread Antony Stone
On Tuesday 25 May 2021 at 14:36:09, Albretch Mueller wrote: > On 5/25/21, Antony Stone wrote: > > On Tuesday 25 May 2021 at 07:51:21, Albretch Mueller wrote: > >> As part of a teaching and learning (TaL)/school software, I need squid: > >> > >> a) to dete

Re: [squid-users] (possibly dynamic?) multiple port forwarding in the same internal Network ...

2021-05-25 Thread Antony Stone
On Tuesday 25 May 2021 at 07:51:21, Albretch Mueller wrote: > As part of a teaching and learning (TaL)/school software, I need squid: > > a) to detect one of the connected computers in an internal network > comprising wirelessly connected and wired computers as the "master" > (operated by the t

Re: [squid-users] manual proxy configuration ...

2021-05-29 Thread Antony Stone
On Saturday 29 May 2021 at 11:45:07, Albretch Mueller wrote: > cat "/etc/squid/squid.conf" | grep http_port | grep --invert-match "^#" > http_port 3128 That could more briefly be done as "grep ^http_port /etc/squid/squid.conf" > The value 3128 you enter on your network browser settings > > what

Re: [squid-users] Testing eCap module

2021-06-06 Thread Antony Stone
On Sunday 06 June 2021 at 16:09:24, Ben Goz wrote: > I have an eCap module code that should block traffic on certain cases > and passthru traffic on other cases. > What is the most easy and efficient way to test that module's code is > working as expected? 1a. Test some of the cases where traffic

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Antony Stone
On Tuesday 22 June 2021 at 21:32:10, Arctic5824 wrote: > Hello, Recently I setup my first squid proxy, > > I want it when users try to acces a website via https, they get redirected > to the http version 1. What makes you believe that sites *have* an HTTP version? 2. What do you think should ha

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Antony Stone
On Tuesday 22 June 2021 at 22:37:16, Alex Rousskov wrote: > On 6/22/21 4:28 PM, Arctic5824 wrote: > > > > Hey! thanks for the info, I just tried that but it seems https is still > > being allowed, and I can see it in the logs as well "TCP_TUNNEL/200 717 > > CONNECT s.youtube.com:443 -" > > my con

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Antony Stone
On Tuesday 22 June 2021 at 22:54:42, Arctic5824 wrote: > On Tuesday, June 22nd, 2021 at 1:44 PM, Antony Stone wrote: > > > > #http_access deny !Safe_ports > > > > Has that been consciously and deliberately commented-out? > > > > #http_access allow localn

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Antony Stone
On Tuesday 22 June 2021 at 22:53:08, Arctic5824 wrote: > Hey, yes this is actually the case, for testing instead of > > > http_access allow localhost > > im running with > > > http_access allow all Please do not test and report problems with one configuration, and then tell us you have a diff

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Antony Stone
On Tuesday 22 June 2021 at 23:05:20, Arctic5824 wrote: > On Tuesday, June 22nd, 2021 at 1:56 PM, Antony Stone wrote: > > > > Please do not test and report problems with one configuration, and then > > tell us you have a different one. > > Sorry, I shouldnt have don

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Antony Stone
On Tuesday 22 June 2021 at 23:13:19, Antony Stone wrote: > On Tuesday 22 June 2021 at 23:05:20, Arctic5824 wrote: > > On Tuesday, June 22nd, 2021 at 1:56 PM, Antony Stone wrote: > > > Please do not test and report problems with one configuration, and then > > > tell

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Antony Stone
On Wednesday 23 June 2021 at 00:06:21, Coenraad Loubser wrote: > I'm sure there are many other ways to do this too... again, what's your > real use case here? My _guess_ now that I know Arctic 5824 is deliberately running an open web proxy on the Internet (with co-operation from the hosting prov

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Antony Stone
ent of websites as they pass through their systems. Anyway, just for the sake of technical discussion, let me repeat my original questions: On Tuesday 22 June 2021 at 21:41:22, Antony Stone wrote: > On Tuesday 22 June 2021 at 21:32:10, Arctic5824 wrote: > > Hello, Recently I setup my

Re: [squid-users] TPROXY Error

2021-06-30 Thread Antony Stone
On Wednesday 30 June 2021 at 14:16:09, Ben Goz wrote: > I'm trying to configure squid as a transparent proxy using TPROXY. > The machine I'm using has 2 NICs, one for input and the other one for > output traffic. > The TPROXY iptables rules are configured on the input NIC. 1. Which version of Squ

Re: [squid-users] issues with old version of TLS/SSL certificate

2021-07-12 Thread Antony Stone
On Monday 12 July 2021 at 18:58:43, Alex Irmel Oviedo Solis wrote: > Hello all, I'm trying to download a file from > https://prodcont.seace.gob.pe > SSLLabs review shows that server supports only TLS 1.0 > Any solution please? If you're trying to download a specific file from a specific server,

Re: [squid-users] Problems with HTTPS on Squid

2021-07-12 Thread Antony Stone
On Monday 12 July 2021 at 20:12:03, Marcio B. wrote: > I have the following problem on my Squid 4.6 on Debian 10. > > Squid does not redirect the user to the error page when blocking an HTTPS > url. On HTTP it works correctly. Short answer - it can't. Longer answer - browser requests https://th

Re: [squid-users] Proxy Authentication optional

2021-07-24 Thread Antony Stone
On Saturday 24 July 2021 at 09:23:52, Dieter Bloms wrote: > Hello, > > I want to implement user authentication (kerberos) on an already existing > proxysystem without user authenticaion. But I know that there are clients, > which can't do any authentication. Can you identify these clients in som

Re: [squid-users] about logformat

2021-08-15 Thread Antony Stone
On Monday 16 August 2021 at 00:25:45, Pavel Serrat wrote: > I'm trying to customize my squid log format and I have the following > question: See http://www.squid-cache.org/Doc/config/logformat/ % [encoding] [-] [[0]width] [{arg}] formatcode [{arg}] width minimum and/or maximum field w

Re: [squid-users] Squid is active but not working

2021-08-16 Thread Antony Stone
On Monday 16 August 2021 at 17:03:57, Peter Thesing wrote: > Hi, > > If there is a a need for additional information please let me know?! Some additional information would be good, and a lot less HTML would be good too :) Just a comment "I got the expected content" is sufficient... > I am usi

Re: [squid-users] Squid is active but not working

2021-08-16 Thread Antony Stone
On Monday 16 August 2021 at 18:09:12, Peter Thesing wrote: > Hi, > > English is not my native tongue so I am sorry for any mistakes that I've > made or will make in the future. That's not problem - I just wanted to make sure I understood your meaning (which I did). > Both apache and squid are

Re: [squid-users] Squid is active but not working

2021-08-16 Thread Antony Stone
On Monday 16 August 2021 at 19:28:55, Peter Thesing wrote: > Because I have a multi port modem/router > a fritz.box 7581 I have a Fritz.Box 6360, not so different. > My ISP does not support samba on their network > > Samba can be used for remote printer support among others Yes, I am familiar

Re: [squid-users] Squid is active but not working

2021-08-18 Thread Antony Stone
On Wednesday 18 August 2021 at 16:50:20, Peter Thesing wrote: > Because I have a multi port modem/router that connects to the internet. Sorry, I'm not sure I follow which question that is an answer to. But anyway, why don't you just plug your two machines (the "client" and the "server") each in

Re: [squid-users] MITM the MITM

2022-01-03 Thread Antony Stone
On Tuesday 04 January 2022 at 01:19:28, Will BMD wrote: > Hey all, > > I currently have the following network topology, it's emulating a real > world environment. The proxy is running ssl_bump. > > LAN <-> Squid Proxy <-> Firewall <-> Internet > > From the Firewall's perspective all client conn

Re: [squid-users] RES: Squid 4.13 does not access Facebook

2022-01-07 Thread Antony Stone
On Friday 07 January 2022 at 22:39:41, Graminsta wrote: > Now I have to change the pw of about 200 VPSs, hell. I have to question the wisdom of using the same root PW on multiple servers, even when that PW has not been posted on a public mailing list. Antony. -- I bought a book on memory tec

Re: [squid-users] transparent or intercept keyword stops the service

2022-01-12 Thread Antony Stone
On Wednesday 12 January 2022 at 11:29:15, Daniel Sanchidrian wrote: > First of all I'm and new to squid, recently installed it to use in my > company network. I want to configure it as a transparent proxy. Out of interest - why? What is your objective here - what are you trying to achieve by set

Re: [squid-users] SQUID refuses to listen on any TCP Port

2022-03-14 Thread Antony Stone
On Monday 14 March 2022 at 05:42:35, ben wrote: > Hi Eliezer, > > SQUID started listening only after I run "ip6tables -P INPUT ACCEPT". Without seeing the rest of your iptables rules, it's not clear whether this really does apply to every interface and every protocol, or whether there are exce

Re: [squid-users] acl question

2022-05-05 Thread Antony Stone
On Thursday 05 May 2022 at 11:28:13, Frank Urban wrote: > Hi, > > We created an acl list with workstation names instead of IP addresses. > > e.g. acl our_networks src workstaion1. > > This works as long as the hostname is resolvable over DNS. If it is > not, the restart of squid fails. > > Is

Re: [squid-users] Logrotate question

2022-06-16 Thread Antony Stone
On Thursday 16 June 2022 at 09:27:32, robert k Wild wrote: > Thanks Eliezer > > I have centos 7 and I want it to rotate every 3 months as we need to keep > logs for every 3 months. Do you really mean you "need to keep logs for every 3 months"? Or do you mean that you need to keep "the most rece

Re: [squid-users] Logrotate question

2022-06-16 Thread Antony Stone
On Thursday 16 June 2022 at 09:53:02, robert k Wild wrote: > Hi Antony, > > All I know is I need to keep a record of up to 3 months, worth of logs, due > to gdpr, how would you say I go about this Here's the standard logrotate file for Squid3 which is installed on Debian (I doubt that CentOS sh

Re: [squid-users] Logrotate question

2022-06-16 Thread Antony Stone
On Thursday 16 June 2022 at 11:26:37, robert k Wild wrote: > Cool, so I will rotate daily and delete after 91 days, thanks guys Why did you change the recommended 92 days into 91? Consider June, July and August: June has 30 days July has 31 days August has 31 days So, o

Re: [squid-users] fool windows into thinking it has internet access

2022-07-20 Thread Antony Stone
On Wednesday 20 July 2022 at 19:19:22, robert k Wild wrote: > ok i have realised something, my client cant resolve this address > > C:\Users\rkw>ping dns.msftncsi.com > Ping request could not find host dns.msftncsi.com. Please check the name > and try again. > > is there anyway i can enable ICMP

Re: [squid-users] pros/cons squid vs next generation firewall

2022-07-25 Thread Antony Stone
On Monday 25 July 2022 at 13:22:23, Dieter Bloms wrote: > Hello, > > I run some Squid proxy servers in conjunction with ICAP virus scanners > and I'm very happy with them. Our company now wants to replace them with > a checkpoint next generation firewall. Do you have some arguments that > speak f

Re: [squid-users] regex for normal websites

2022-07-27 Thread Antony Stone
On Wednesday 27 July 2022 at 19:25:46, robert k Wild wrote: > nice one thanks Amos > > i dont understand as in regex the terms > > ^ - start of line > . - any single character > * - repetition of character before Correction: zero or more instances of the character before > $ - end of line > >

Re: [squid-users] regex for normal websites

2022-08-02 Thread Antony Stone
On Tuesday 02 August 2022 at 14:14:58, robert k Wild wrote: > ok i have tested and this works > > adobe\.com$ > > i found it weird this didnt work > > \.adobe\.com > > just curious thats all Please define "works" and "didn't work" - I've pretty much lost track of exactly what you want to mat

Re: [squid-users] regex for normal websites

2022-08-02 Thread Antony Stone
On Tuesday 02 August 2022 at 17:23:51, robert k Wild wrote: > mmm... so i just want to know and really sorry for the dumb question, so > > adobe\.com$ > > works but then again if a website was eg > > hackadobe\.com$ > > that would work as well probably, so i want to do something like this > >

Re: [squid-users] ACL based DNS server list

2022-11-02 Thread Antony Stone
On Wednesday 26 October 2022 at 03:27:01, Sneaker Space LTD wrote: > Hello, > > Is there a way to use specific DNS servers based on the user or connecting > IP address that is making the connection by using acls or any other method? > If so, can someone send an example. What problem are you tryi

Re: [squid-users] Squid proxy errors - support

2023-04-07 Thread Antony Stone
On Friday 07 April 2023 at 13:00:09, Alessio Ballarini (External) wrote: > Hi Squid Support, > we are facing a problem with Squid proxy Which version of Squid, and running on which version of which operating system? Antony. -- Normal people think "If it ain't broke, don't fix it". Engineers

Re: [squid-users] Is there any squid 4.x tested with Delay pools to work and limit well ?

2023-04-17 Thread Antony Stone
On Monday 17 April 2023 at 20:52:41, Dr.X wrote: > Could you please explain why the developers are upgrading Squid from > version 4 to 5 and 6, while ignoring a critical built-in feature like > Delay Pools that has been reported as a bug since Squid 4.x? I am not a Squid developer, and I do not e

Re: [squid-users] Disable IPV6 for certain destinations only?

2023-04-18 Thread Antony Stone
On Tuesday 18 April 2023 at 14:53:31, Alex Rousskov wrote: > On 4/18/23 03:38, Ralf Hildebrandt wrote: > > We're using squid-6, currently v4 only. The use case for us is mostly > > our users using our proxy to retrieve full text publications of > > several thousand medical journals... via IPv4. >

Re: [squid-users] Getting ping to work via proxy

2023-07-01 Thread Antony Stone
On Saturday 01 July 2023 at 22:59:43, robert k Wild wrote: > Hi all, > > Is there a way to get ping to work via the proxy. There is no such thing as an ICMP proxy. Antony. -- "Can you keep a secret?" "Well, I shouldn't really tell you this, but... no."

Re: [squid-users] Getting ping to work via proxy

2023-07-01 Thread Antony Stone
vers, and whether the replies are routed back to the clients. This routing could be quite different from the routing of HTTP/S requests, which is what Squid is (mostly) used for, > On Sat, 1 Jul 2023, 23:10 Antony Stone wrote: > > > On Saturday 01 July 2023 at 22:59:43, robert k Wild wro

Re: [squid-users] acl follow_x_forwarded_for

2023-07-03 Thread Antony Stone
On Monday 03 July 2023 at 11:46:20, robert k Wild wrote: > hi all, > > im reading this acl > > http://www.squid-cache.org/Doc/config/follow_x_forwarded_for/ > > is this to fool the dst server to think its coming from the client pc > instead of squid proxy No; it tells Squid to accept connectio

Re: [squid-users] Help with squid Proxy

2023-07-12 Thread Antony Stone
On Wednesday 12 July 2023 at 18:11:08, Andrés Leandro Regalado wrote: > I implemented squid proxy in a small office to filter the internet and now it > blocks the communication of the mail client with the mail server, I need to > know how I can allow outlook or thunderbird to work through squid.

Re: [squid-users] compile error in squid v6.1

2023-07-31 Thread Antony Stone
On Monday 31 July 2023 at 17:26:38, botp wrote: > Hi All, > > ' been compiling It might help to tell us what sort of system you're compiling it on: - operating system - version - compiler name - compiler version Antony. -- "I estimate there's a world market for about five computers."

Re: [squid-users] Vey slow navigation

2023-10-12 Thread Antony Stone
On Thursday 12 October 2023 at 13:42:41, Andre Bolinhas wrote: > Hi > > I'm using Squid and sometimes my users are unable to access to internet > or the internet access is very slow. Have you tried accessing the same sites (preferably at the same time) from a machine which does not use Squid?

Re: [squid-users] Squid: blocking all requests to plain ip addresses

2023-11-06 Thread Antony Stone
On Monday 06 November 2023 at 12:35:33, Francesco Chemolli wrote: > Hi Christian, > What you're aiming to do should be easily doable via an url_regex ACL https://wiki.squid-cache.org/ConfigExamples/Chat/Skype contains an example of a regex to match IP addresses which may also point you in a he

Re: [squid-users] squid random outgoing address

2018-01-21 Thread Antony Stone
On Sunday 21 January 2018 at 21:53:42, --Ahmad-- wrote: > Hello Folks > > I’m looking for random squid function in outgoing address. Squid is not the right tool for this job. > i want to setup small rule in squid that like below : > > tcp _outgoing_address 10.20.30.x > as 1 line and that X be

Re: [squid-users] a host can not access web browsing

2018-01-26 Thread Antony Stone
On Friday 26 January 2018 at 21:54:48, Bladimir Almeida wrote: > Hi, I'm a network administrator of my company, I wonder how you react to emails from your users which contain so little specific information as I see below. > I've been dealing with a computer that can access all the services for

Re: [squid-users] Time acl not working

2018-02-07 Thread Antony Stone
On Wednesday 07 February 2018 at 12:12:47, Danilo V wrote: > Hello all, time acl is not working for dynamic HTTPS pages such as social > networks. > > I set it to release any content during lunch time. In this period > everything works, but when the interval expires, the already open network > me

Re: [squid-users] log external ip address in squid logs

2018-02-12 Thread Antony Stone
On Monday 12 February 2018 at 16:36:58, --Ahmad-- wrote: > Hello folks > > i had a look on > http://www.squid-cache.org/Doc/config/logformat/ > but i cant see the external ip address that used on squid > i had a look on > http://www.squid-cache.org/Doc/config/logformat/ > and did find that optio

Re: [squid-users] VPN ON PROXY

2018-03-07 Thread Antony Stone
On Thursday 08 March 2018 at 00:56:45, abel...@cklass.com.mx wrote: > Hello squidUsers, > > I have a bit of a problem. Im currently on a network where there is a vpn > already configured and running. What is the VPN connecting? I mean, what is defined as the "local" network and what is defined

Re: [squid-users] unsubscribe

2018-03-21 Thread Antony Stone
On Wednesday 21 March 2018 at 20:15:37, Jason Zions wrote: > unsubscribe No, that's not how things work. Please see the footers from every posting on this list, as shown below: > ___ > squid-users mailing list > squid-users@lists.squid-cache.org > htt

Re: [squid-users] Different topic - was: How to configure a "proxy home" page ?

2018-03-26 Thread Antony Stone
On Monday 26 March 2018 at 20:56:09, Carlos wrote: > Hi, i want configure two squid... Squid son transparent and squid father > the autentication.. How can i do that Ing. Carlos Please do not hijack threads (especially ones as long and tedious as this one has become). Start a new thread an

Re: [squid-users] Squid is very slow after moving to production environment

2018-04-09 Thread Antony Stone
On Monday 09 April 2018 at 21:00:21, Roberto Carna wrote: > Dear, I have implemented a server with Dansguardian 10.2.1.1 and Squid > 3.5.23-5. > > I've tested it with 5 users for along 2 months and always it worked OK. > > But today when a moved it to production environment, it worked but > very

Re: [squid-users] Squid is very slow after moving to production environment

2018-04-09 Thread Antony Stone
On Monday 09 April 2018 at 21:58:52, Roberto Carna wrote: > Dear Antony, both proxies are virtual machines in the same DMZthey > use the same DNS, the same firewall, the same Internet link, the same > IP but different MAC Address. So, what is different between "test" and "production"? Anton

Re: [squid-users] Squid is very slow after moving to production environment

2018-04-09 Thread Antony Stone
On Monday 09 April 2018 at 21:53:26, Roberto Carna wrote: > I've just changed the new proxy to test environment and it works very > well againI get lost. What does that change involve? I'm trying to understand what is different between your "test" environment and your "production" environme

Re: [squid-users] SSL intercept in explicit mode

2018-04-14 Thread Antony Stone
On Saturday 14 April 2018 at 13:22:32, MK2018 wrote: > I had used squid effectively and perfectly for more than a year before I > could understand (on my own) how to craft an 'allow' or 'deny' line that > contains all of: source acl, dst acl, connection method, HTTP command, TCP > port, excluded d

Re: [squid-users] Running Squid fully as root

2018-05-17 Thread Antony Stone
On Thursday 17 May 2018 at 22:24:40, Aaron Hall wrote: > Greetings everyone. > > Does anyone a "proper" way to run squid directly as "root" rather than the > squid user on linux? Why do you want to? There are good reasons not to do this. What is a good reason to want to do this? > Basic inte

Re: [squid-users] Squid on Vlan

2018-05-28 Thread Antony Stone
On Monday 28 May 2018 at 09:17:25, Tamil S wrote: > Hi, > Hello everyone,I have been trying to run the squid in transparent mode > along with Vlan.But i have achieved the Transparent mode in few days from > start but the *Squid Running on Vlan* is Nightmare for me. Even i have > been stopped in a

Re: [squid-users] HTTPS cache for Java application - only getting TCP_MISS

2018-06-13 Thread Antony Stone
On Wednesday 13 June 2018 at 21:28:27, baretomas wrote: > Hello, > > I'm setting up a Squid proxy as a cache for a number (as many as possible) > of identical JAVA applications to run their web calls through. > The problem is that none of the calls get cached: All rows in the > access.log hava a

Re: [squid-users] HTTPS cache for Java application - only getting TCP_MISS

2018-06-13 Thread Antony Stone
On Wednesday 13 June 2018 at 21:28:27, baretomas wrote: > The calls from the application is done using ssl / https by telling java to > use Squid as a proxy (-Dhttps.proxyHost and -Dhttp.proxyHost). Okay, but... > http_port 3128 ssl-bump generate-host-certificates=on > dynamic_cert_mem_cache_siz

Re: [squid-users] HTTPS cache for Java application - only getting TCP_MISS

2018-06-14 Thread Antony Stone
On Thursday 14 June 2018 at 09:09:05, Tomas Finnøy wrote: > > Surely all this peeking and bumping is only needed if you're running > > Squid in interception mode, whereas you've said that you've configured > > your Java application to explicitly use Squid as a proxy? > > I found some "how-to's" a

Re: [squid-users] BIND for complementary records for the same authoritative domain

2018-06-15 Thread Antony Stone
On Friday 15 June 2018 at 14:39:16, Roberto Carna wrote: > Dear, our company has an internal Windows DNS with the "company.com" > authoritative domain. > Is it possible to ... tell Windows DNS server something like this: > > "Search the record x.company.com within company.com, if it is not > the

Re: [squid-users] iptables setup for tcp_outgoing_address

2018-06-15 Thread Antony Stone
On Saturday 16 June 2018 at 00:42:57, davidjesse...@aol.com wrote: > I have two network interfaces on my machine. I'm trying to setup incoming > through the enp1s0's IP address and if the connection comes from port > 11000 then I want squid to use wlx74da388c32c7's IP address. > IPs on my machine

Re: [squid-users] Wpad problem (DNS)

2018-07-26 Thread Antony Stone
On Thursday 26 July 2018 at 17:06:20, erdosain9 wrote: > Hi to all. > Im trying to put proxy trough DNS. Im working on a Windows Server 2012 r2. > I follow a lot of tutorial... and cant do it. > The best i have is this (and is strange). > When the pc start i see in log of squid the ip of that pc.

Re: [squid-users] compiler Error

2018-08-01 Thread Antony Stone
On Wednesday 01 August 2018 at 23:34:28, joseph wrote: > hi after i upgrade my debian i got gcc 8 So, maybe this is a Debian or a GCC problem, rather than a Squid problem? > and warnings being treated as errors Have you tried compiling anything other than Squid to see whether the problem is wi

Re: [squid-users] want to ask about DNS resolution in firefox as an example

2018-08-06 Thread Antony Stone
On Monday 06 August 2018 at 13:20:37, --Ahmad-- wrote: > Hello Folks , > > i want to ask > > now i squid proxy in USA . > > im in France and i have french ip address So, unless you've done something pretty complicated with your networking, you will have configured your browser to explicitly

Re: [squid-users] want to ask about DNS resolution in firefox as an example

2018-08-06 Thread Antony Stone
On Monday 06 August 2018 at 13:32:32, --Ahmad-- wrote: > can you explain please ? > > im in FR and access my site from US proxy but visits show location as FR > not US Give us an example - what exactly do you mean by "visits show location"? > what could be the reason ? Cookies on your computer

Re: [squid-users] Squid as reverse proxy for two or more webs

2018-08-10 Thread Antony Stone
On Friday 10 August 2018 at 15:54:01, erdosain9 wrote: > Ok, thanks. I change that. 1. Changed what? 2. Show us your current DNS entries, and tell us which steps you followed from https://wiki.squid-cache.org/ConfigExamples/Reverse/MultipleWebservers > Now, if i go to reverse.mydomain.lan i ge

Re: [squid-users] Squid as reverse proxy for two or more webs

2018-08-10 Thread Antony Stone
On Friday 10 August 2018 at 16:26:31, erdosain9 wrote: > > php.mydomain.lan 192.168.1.223 > > ticket.mydomain.lan 192.168.1.246 > > > >.. and clients never connect to the above directly. So these domains are > >never to be accessed by users/clients. > > The client can connect directly from the do

Re: [squid-users] Squid as reverse proxy for two or more webs

2018-08-10 Thread Antony Stone
On Friday 10 August 2018 at 20:13:06, erdosain9 wrote: > Thanks to all!! > Now is working fine. > > Just, one question to know... i make this accessible from the internet... > so, i create some acl 0.0.0.0/0 and it's working. > But.. this is a security issue??? or it's ok declare that ACL. If yo

Re: [squid-users] Squid as reverse proxy for two or more webs

2018-08-11 Thread Antony Stone
On Saturday 11 August 2018 at 15:26:40, Amos Jeffries wrote: > On 11/08/18 09:43, Antony Stone wrote: > > On Friday 10 August 2018 at 20:13:06, erdosain9 wrote: > >> Thanks to all!! > >> Now is working fine. > >> > >> Just, one question to know...

Re: [squid-users] microsoft list

2018-08-14 Thread Antony Stone
On Tuesday 14 August 2018 at 13:08:25, Vacheslav wrote: > Well since you asked and are actually interested, I am going to reveal the > secret just like Vanunu and Rabin. The program is called disable win > track! So, this is https://github.com/10se1ucgo/DisableWinTracking/releases ? > But what

Re: [squid-users] Do I need to be technical to use squid proxy?

2018-08-15 Thread Antony Stone
On Wednesday 15 August 2018 at 18:26:16, Oldman wrote: > I found a script and automatically created squid proxy in a centos vps > then set up the proxy in my pc and am using it > I am good in learning but not very technical . while trying to figure out > all those tcp denied and other logs I reali

Re: [squid-users] Do I need to be technical to use squid proxy?

2018-08-15 Thread Antony Stone
On Wednesday 15 August 2018 at 19:27:07, Oldman wrote: > What do you think about my squid configuration? here ? I can't see any > cache logs > cache_log /dev/null You do understand what "/dev/null" means, do you? > acl SSL_ports port 1-65535 > acl Safe_ports port 1-65535 This suggests to me t

Re: [squid-users] Do I need to be technical to use squid proxy?

2018-08-15 Thread Antony Stone
On Wednesday 15 August 2018 at 20:34:26, Oldman wrote: > No sir I do not understand Okay, "/dev/null" means "discard the output". That is why: cache_log /dev/null produces no cache log file. > that is why I am here trying to just come up with some configuration that > helps me keep th

  1   2   3   4   5   6   >