Re: [squid-users] Not all html objects are being cached

2017-01-27 Thread Antony Stone
On Friday 27 January 2017 at 12:58:52, Yuri wrote: > Again. What is the difference? I open it from different workstations, > from different browsers - I see the same thing. The code is identical. I > can is to cache? Yes or no? You're entitled to do whatever you want to, following standards and

Re: [squid-users] Not all html objects are being cached

2017-01-27 Thread Antony Stone
On Friday 27 January 2017 at 13:15:21, Yuri wrote: > 27.01.2017 18:05, Antony Stone пишет: > > > You're entitled to do whatever you want to, following standards and > > recommendations or not - just don't complain when choosing not to follow > > those standa

Re: [squid-users] Strange behavior - reload service failed, but not start....

2017-01-27 Thread Antony Stone
On Friday 27 January 2017 at 14:13:55, erdosain9 wrote: > Ok, thanks. > But something more its wrong look up this: > > [root@squid ips]# squid -k restart > squid: ERROR: Could not send signal 21 to process 8083: (3) No such process > > [root@squid ips]# squid -k shutdown > squid: ERROR: Coul

Re: [squid-users] Strange behavior - reload service failed, but not start.... (solved)

2017-01-27 Thread Antony Stone
On Friday 27 January 2017 at 14:36:01, erdosain9 wrote: > Hi, again. > Now, i do this > > [root@squid ips]# ps aux | grep squid > root 2228 0.0 0.0 130900 344 ?Ss ene24 0:00 > /usr/sbin/squid -sYC ... snip ... > [root@squid ips]# systemctl stop squid > [root@squid ips]# pki

Re: [squid-users] Is it possible to modify cached object?

2017-01-31 Thread Antony Stone
On Tuesday 31 January 2017 at 10:35:30, boruc wrote: > I ran command "sudo apt-get remove --purge squid3" Okay, that will remove the distribution (Debian or Debian-based) package. > then I downloaded squid-3.5.24 in browser What exactly did you download from where? > unpacked it So, presumabl

Re: [squid-users] Is it possible to modify cached object?

2017-01-31 Thread Antony Stone
On Tuesday 31 January 2017 at 17:28:15, boruc wrote: > 1. Ubuntu 12.04.5 LTS > 2. Squid downloaded from > http://www.squid-cache.org/Versions/v3/3.5/squid-3.5.24.tar.gz Okay, so that's an official source tarball, good. > 3. About "sudo auto-apt run ./configure && sudo make && sudo checkinstall",

Re: [squid-users] Is it possible to modify cached object?

2017-01-31 Thread Antony Stone
On Tuesday 31 January 2017 at 18:19:14, boruc wrote: > Antony Stone wrote > > > What do you get from the following: > > /etc/init.d/squid status > > /etc/init.d/squid restart > > literally nothing. I just noticed that there isn't anything with &q

Re: [squid-users] Two dns record fqdn pointing to different squid servers

2017-02-01 Thread Antony Stone
On Wednesday 01 February 2017 at 20:06:22, erdosain9 wrote: > Hi. > I have running two squid servers. > One with ip access and another with users. Sorry, what do you mean by "IP access"? I assume both Squid servers have IP addresses. Do you mean that only one of them has connectivity to the Int

Re: [squid-users] Logs to confirm packets dropped/not forwarded by squid

2017-02-06 Thread Antony Stone
On Monday 06 Feb 2017 at 17:26, Anonymous cross wrote: > Is there any way to find the connections dropped/not forwarded by Squid? I > could see HTTP GET is forwarded to squid but it's not initiating a > connection with webserver Have you looked in access.log for that connection? Antony. -- B

Re: [squid-users] Logs to confirm packets dropped/not forwarded by squid

2017-02-06 Thread Antony Stone
On Monday 06 Feb 2017 at 17:34, Anonymous cross wrote: > I don't find any entry in access.log for that connection. Okay, maybe you should explain a little more about what you mean by "I could see HTTP GET is forwarded to Squid" - does "forwarded" mean you're using intercept mode, and if it does

Re: [squid-users] Proxyfy spice protocol behind nat

2017-02-19 Thread Antony Stone
On Sunday 19 February 2017 at 19:05:57, Oscar Segarra wrote: > Hi, > > In my environment I have deployed two KVM hypervisors. I'd like to deploy > in my DMZ a squid proxy host in order to hide hypervisor IPs and Ports from > the clients. Why? What's the problem with the clients knowing the true

Re: [squid-users] Data usage reported in log files

2017-03-10 Thread Antony Stone
On Friday 10 March 2017 at 20:14:36, Yosi Greenfield wrote: > Hello all, > > I'm analyzing my squid logs with sarg, and I see that the number of > bytes reported as used by any particular user are often nowhere > near the bytes reported by netflow and tcpdump. Which is larger? > I'm trying to t

Re: [squid-users] Data usage reported in log files

2017-03-10 Thread Antony Stone
the opposite result, so that's not what > >> I'm seeing. > >> > >> Any other ideas? > > > > Is there any traffic that is not directed to Squid? > > > > Do you use ssl-bump in bump mode ? > > If not, Squid has no idea how many bytes

Re: [squid-users] Data usage reported in log files

2017-03-10 Thread Antony Stone
ke with like? My "not more than 1%" was for the additional traffic to/from the Squid server, other than HTTP/S. Antony. > 11.03.2017 3:19, Yuri Voinov пишет: > > 11.03.2017 2:57, Antony Stone пишет: > >> On Friday 10 March 2017 at 21:50:19, Yuri Voinov wrote: > &

Re: [squid-users] Data usage reported in log files

2017-03-10 Thread Antony Stone
On Friday 10 March 2017 at 22:33:44, Yuri Voinov wrote: > We have not seen the network topology and the full configuration of > network devices - what are we arguing about and guessing about? Nobody is arguing, and we are guessing so that we might be helpful to Yosi who asked the question. Inci

Re: [squid-users] Squid Transparent/intercept Issues

2017-03-20 Thread Antony Stone
On Monday 20 March 2017 at 16:26:40, christian brendan wrote: > Hello Everyone, > > Squid Cache: Version 3.5.20 > OS: CentOS 7 > > I have used squid for quite some times non transparently and it works, > problem kicks in when: http_port 3128 transparent is enabled. > Access denied error page sho

Re: [squid-users] Squid Transparent/intercept Issues

2017-03-21 Thread Antony Stone
On Tuesday 21 March 2017 at 12:00:05, christian brendan wrote: > > Today's Topics: > >1. Re: Squid Transparent/intercept Issues (Antony Stone) > >2. Re: SMP and AUFS (Matus UHLAR - fantomas) > >3. Re: SMP and AUFS (Alex Rousskov) > >4. Re: sq

Re: [squid-users] squid-users Digest, Vol 31, Issue 61

2017-03-21 Thread Antony Stone
On Tuesday 21 March 2017 at 17:29:36, christian brendan wrote: > Thanks a lot for the information. > I will try this and give feedback. > Best Regards Please note both of the following for when you post your feedback: 1. The request inserted into the email you replied to by the mailing list sys

Re: [squid-users] Squid Transparent/intercept Issues

2017-03-22 Thread Antony Stone
On Wednesday 22 March 2017 at 11:59:14, christian brendan wrote: > One more thing, > Does this implies using two NICs (Network Interface Cards)? No, this is not necessary. > And the squid server has to be in-between clients and the internet? That is the simpler way of doing it (in which case yo

Re: [squid-users] Squid stopped working after cache.log and access.log rotation

2017-03-22 Thread Antony Stone
On Wednesday 22 March 2017 at 16:17:32, Chee M Gui wrote: > Hi All > > We recently installed Squid 3.5.12-1ubuntu7.3 on Ubuntu 16.04.2 LTS. It > ran fine at first but stopped working after a while. telnet server 3128 > still works, i.e., opens a blank window, but Squid is just not accepting >

Re: [squid-users] Squid stopped working after cache.log and access.log rotation

2017-03-23 Thread Antony Stone
On Thursday 23 March 2017 at 17:36:01, Chee M Gui wrote: > Thank you Jason. > > lsof /var/log | grep -i delete does not show anything > Likewise for lsof /var/log/squid | grep -i delete > > Thank you Antony > No, we have a lot of disk space. What does your squid logfile rotation script contai

Re: [squid-users] Using client certificate for all connection

2017-03-30 Thread Antony Stone
On Thursday 30 March 2017 at 18:55:09, Juande wrote: > Hi > > I want to configure squid so every request through the proxy get client > certificate authenticated. > > I need some automatic software audit tools to access to a server that uses > client certificates to access to its contents. Are

Re: [squid-users] squid cache analysis

2017-04-06 Thread Antony Stone
On Thursday 06 April 2017 at 12:27:54, Punyasloka Arya wrote: > squid version:3.3 > OS:centos Which version of CentOS? How was Squid installed? Precisely which version of 3.3 are you using? > The squid cache is not functioning properly You'll have to be more specific than that - what *is* wor

Re: [squid-users] purge cmd and headers ??

2017-04-11 Thread Antony Stone
On Tuesday 11 April 2017 at 20:09:52, joseph wrote: > by using purge command > is there a way just to search for headers that contain specific info > like CF-RAY and purge all ? Why do you feel the need to purge items selectively from your cache? If the objects are requested again, yo

Re: [squid-users] HTTPS woes

2017-04-14 Thread Antony Stone
On Friday 14 April 2017 at 13:52:08, Olly Lennox wrote: > I've tried building it and it seems to have make install -ed correctly but > I'm getting "command not found" when I try to execute squid3. Well, what command are you trying to run (the one which is "not found")? And what do you from "wher

Re: [squid-users] Multiple http_access logic at the same time

2017-04-17 Thread Antony Stone
On Monday 17 April 2017 at 08:35:28, Serhat Koroglu wrote: > Hello, > I'm trying to manage squid users to access the proxy if they logged in and > the site url is allowed in my url list. They are running one by one. If > logged in accesses but not check the url and vice versa. So, are you saying

Re: [squid-users] Squid Proxy with simple iptable rule ...

2017-04-17 Thread Antony Stone
On Monday 17 April 2017 at 14:45:55, Arsalan Hussain wrote: > Dear Sir Amos :) > I had reconfigured Squid 3.5 and it works fine. but i want to protect WAN > interface through IPTABLES > > 1- can you help me chain rule of simple iptable which drop all trafic from > WAN eth0 to secure and

Re: [squid-users] 3.5.25: (71) Protocol error (TLS code: SQUID_ERR_SSL_HANDSHAKE)

2017-04-28 Thread Antony Stone
On Friday 28 April 2017 at 11:14:16, David Touzeau wrote: > I'm fighting to find the correct certificate chain for this website: > https://www.boutique.afnor.org $ openssl s_client -host www.boutique.afnor.org -port 443 -prexit -showcerts CONNECTED(0003) depth=2 C = US, O = "VeriSign, Inc.",

Re: [squid-users] HTTPS support

2017-05-03 Thread Antony Stone
On Wednesday 03 May 2017 at 18:37:36, j m wrote: > I cannot SSH into my home server from an organization that is apparently > blocking SSH connections, for whatever reason, intentional or not. I am, > however, able to use a squid proxy that I run from my home server. So, redirect *external* conn

Re: [squid-users] Squid Cache to Users at Full Bandwidth

2017-05-05 Thread Antony Stone
On Friday 05 May 2017 at 16:18:33, christian brendan wrote: > Squid Version 3.5.20 > Cento 7 > Mikrotik RouterBoard v 6.39.1 > Users IP: 192.168.1.0/24 > Squid ip: 192.168.2.1 > > Traffic to squid is routed > > i would like users to have full LAN bandwidth access to squid server, i > have tried

Re: [squid-users] How to make sslbump'ing more robust? (option to continue?)

2017-05-11 Thread Antony Stone
On Thursday 11 May 2017 at 18:37:49, erdosain9 wrote: > how you do the option 1??? As Alex already said: "For more details and starting points, please see error_directory, sslproxy_cert_error, sslproxy_cert_adapt, and external_acl_type in squid.conf.documented." Antony. -- Salad is what food

Re: [squid-users] Use with Gateway to Gateway VPN

2017-05-14 Thread Antony Stone
On Sunday 14 May 2017 at 23:26:34, J Arthur wrote: > Greetings to all, > > Here's my situation, I have three locations A, B and C connected by > gateway to gateway vpn using cisco rv320's, A has a network of > 192.168.0.0/24, B is 192.168.1.0/24 and C is 192.168.2.0/24 > > I set up squid on netw

Re: [squid-users] WARNING: All 20/20 negotiateauthenticator processes are busy.

2017-05-17 Thread Antony Stone
On Wednesday 17 May 2017 at 20:41:06, erdosain9 wrote: > And if i do this > > http_port 127.0.0.1:3128 > > The i get this > > [root@squid ~]# squidclient -vv mgr:menu > verbosity level set to 2 > Request: > GET cache_object://localhost/menu HTTP/1.0 > Host: localhost > User-Agent: squidclient/3

Re: [squid-users] Two squid server - Would it be useful?

2017-05-23 Thread Antony Stone
On Tuesday 23 May 2017 at 19:19:13, erdosain9 wrote: > Hi. > I have working a squid server. we have 110 pc. > I have two virtualized squids. > One of them is working, and the other i use for testing purpose. So, do you have two Squid instances, or three, in total? > i want to know if i could tak

Re: [squid-users] Two squid server - Would it be useful?

2017-05-23 Thread Antony Stone
On Tuesday 23 May 2017 at 21:05:38, erdosain9 wrote: > thanks and sorry, i have just two. > In one of them (the more "important") i have SSO, and in the other i have > access per ip. > So, i need to have the two squid servers equally or not? You configure the one the clients point to for SSO (I'm

Re: [squid-users] this config is ok? is ok the order?

2017-06-05 Thread Antony Stone
On Monday 05 June 2017 08:24:00 erdosain9 wrote: > mmm... and what you think about this > > dig -x google.com Firstly, I think "what is this supposed to mean?" dig -x is for reverse lookups - you give it an address and it tells you what name has been assigned in a PTR record (as opposed to a f

Re: [squid-users] this config is ok? is ok the order?

2017-06-05 Thread Antony Stone
On Monday 05 June 2017 11:50:42 erdosain9 wrote: > Hi. For what I understood. It is important ttl of dns names. Yes, TTL is important. It tells caching DNS servers how long they may remember the last answer they got from the authoritative server, before they need to ask the authoritative serve

Re: [squid-users] Squid Transparent HTTP Proxy - 2 ETH Links - HTTP Proxy

2017-06-14 Thread Antony Stone
On Wednesday 14 June 2017 16:58:01 Eliezer Croitoru wrote: > It depends on the equipment.. > What you should do is to use the switch to pass all traffic to the squid mac > address and mirror all traffic to the probe node. http://wiki.squid-cache.org/ConfigExamples/#Interception may give you some

Re: [squid-users] RV: squid

2017-06-15 Thread Antony Stone
On Thursday 15 June 2017 16:22:44 javier perez wrote: > I installed squid(3.5.20) on CentOS 7 minimal to perform as an ftp-proxy. > > My configuration file looks like this: ...snip... > acl SSL_ports port 443 21 Er, what? Why are you specifying port 21 as SSL? > ftp_passive off ...snip...

Re: [squid-users] RV: squid

2017-06-15 Thread Antony Stone
On Thursday 15 June 2017 19:58:59 javier perez wrote: > I found this on the oficial documentation: > > ftp://ftp.fu-berlin.de/unix/www/squid/archive/3.5/squid-3.5.0.1-RELEASENOTES > .html > > Section 2.6 Relay FTP > FTP Relay highlights: > 2nd line: > > " Active and passive FTP support on the u

Re: [squid-users] RV: squid

2017-06-15 Thread Antony Stone
On Thursday 15 June 2017 16:22:44 javier perez wrote: > I installed squid(3.5.20) on CentOS 7 minimal to perform as an ftp-proxy. Why? What are you trying to achieve by doing this, instead of simply allowing clients inside to connect to servers outside? Antony. -- I lay awake all night wond

Re: [squid-users] FATAL error while using dstdomain directive

2017-06-20 Thread Antony Stone
On Tuesday 20 June 2017 at 16:25:47, Eric C. Kom wrote: > Sorry for not seen it. > Running fine now: > erickom@proxy:/etc/squid3$ sudo squid3 -z > 2017/06/20 16:30:15| Squid is already running! Process ID 1584 > > But still the block websites are still accessible. Please, either: 1. show us an

Re: [squid-users] When will Squid 3.5.26 be available on Debian?

2017-06-28 Thread Antony Stone
On Wednesday 28 June 2017 at 13:02:19, Enrico Heine wrote: > Hello together, > > anybody knows when Squid 3.5.26 will enter Debian testing nor unstable? Best asked on a Debian list? Alternatively according to the package details, the maintainer is: Luigi Gangitano Antony. -- I don'

Re: [squid-users] No DNS Records Error

2017-07-01 Thread Antony Stone
On Saturday 01 July 2017 at 12:48:49, nima sadeghian wrote: > Hi > a few days ago working properly squid server ( for more than 15 years) Has Squid been upgraded during that time? What version is it running, and on what operating system / version? > suddenly got a ERROR in user sides. > they ca

Re: [squid-users] /var/run/squid gone on every reboot?!

2017-07-07 Thread Antony Stone
On Friday 07 July 2017 at 08:22:29, Heiler Bemerguy wrote: > 3.5. Everytime I must recreate this. What I'm missing? Hm, dunno. Give us a clue... What operating system are you running under, and how did you install squid? How does squid (try to) start at boot time? Antony. -- How I want a

Re: [squid-users] Chaining icap and ecap services - FATAL: Received Segment Violation...dying.

2017-07-12 Thread Antony Stone
On Wednesday 12 July 2017 at 10:55:36, bugreporter wrote: > Thank you Yuri, > > The least I can say is that the conversation at > http://bugs.squid-cache.org/show_bug.cgi?id=4597 makes me laugh a lot. My > opinion is that if you modify the source code of an open source program > without publishin

Re: [squid-users] Squid box for two networks

2017-07-17 Thread Antony Stone
On Monday 17 July 2017 at 21:31:50, Pablo Ruben Maldonado wrote: > Hello, I have a squid box 3.5 working without problems for the lan > 192.168.110.0/24 for several months. Now I want setup to another lan > 192.168.115.0/24 but I cannot. Tcpdump inform me that the packages come to > squid box. But

Re: [squid-users] Squid box for two networks

2017-07-18 Thread Antony Stone
On Tuesday 18 July 2017 at 12:11:58, Matus UHLAR - fantomas wrote: > On 17.07.17 17:31, Pablo Ruben Maldonado wrote: > >Hello, I have a squid box 3.5 working without problems for the lan > >192.168.110.0/24 for several months. Now I want setup to another lan > >192.168.115.0/24 but I cannot. Tcpdu

Re: [squid-users] Squid box for two networks

2017-07-18 Thread Antony Stone
s an intercepting proxy - that sort of thing does make a difference... Maybe you could also answer my questions: On Monday 17 July 2017 at 22:57:13, Antony Stone wrote: > How is that new subnet connected to the Squid box? > > Is it connected on a second network card in the Squid machin

Re: [squid-users] Packets logged as blocked even Firewall (IPtables) accepts them ...

2017-07-18 Thread Antony Stone
On Tuesday 18 July 2017 at 13:29:04, Walter H. wrote: > Hello, > > my Router Box runs a CentOS 6, with the EPEL squid34 RPM package > > this the iptables > Does the output of "iptables -L -nvx" match the ruleset you've quoted here? I'm just wondering whether the rules have got loaded properly

Re: [squid-users] This list generates a forward loop ...

2017-07-18 Thread Antony Stone
On Tuesday 18 July 2017 at 14:42:21, Walter H. wrote: > Hello, > > On every post I get an error mail back What's the difference between the posts which generate an error, and this one which got through? Are you sending all from the same address, through the same mail server? Antony. -- "On

Re: [squid-users] Packets logged as blocked even Firewall (IPtables) accepts them ...

2017-07-19 Thread Antony Stone
On Wednesday 19 July 2017 at 10:16:30, Walter H. wrote: > I added these rules, and will see which packets are caught > > -A INPUT -m state --state INVALID -j LOG --log-prefix "IP[IN(invalid)]: " > --log-level 7 > -A FORWARD -m state --state INVALID -j LOG --log-prefix "IP[FWD(invalid)]: > " --log

Re: [squid-users] Packets logged as blocked even Firewall (IPtables) accepts them ...

2017-07-19 Thread Antony Stone
On Wednesday 19 July 2017 at 10:40:36, Walter H. wrote: > On Wed, July 19, 2017 11:31, Antony Stone wrote: > > On Wednesday 19 July 2017 at 10:16:30, Walter H. wrote: > >> I added these rules, and will see which packets are caught > >> > >> -A INPUT -m state

Re: [squid-users] Squid-5 ETA?

2017-07-19 Thread Antony Stone
On Wednesday 19 July 2017 at 10:52:12, Ralf Hildebrandt wrote: > Is there any ETA for squid5? I can't help but quote one of my mail sigs here: Software development can be quick, high quality, or low cost. The customer gets to pick any two out of three. Note: I am not a Squid de

Re: [squid-users] Squid box for two networks

2017-07-20 Thread Antony Stone
On Thursday 20 July 2017 at 14:08:27, Pablo Ruben Maldonado wrote: > Hi, i add information missing in original post. Thanks for assistance: > > The Squid Box has setup for Intercept Mode. Iptables rules here: > > -A PREROUTING -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128 > -A PREROUTING

Re: [squid-users] Different cache_dir based on object types

2017-08-03 Thread Antony Stone
On Thursday 03 August 2017 at 20:25:59, ♥ NiNJA ♂ wrote: > Hi friends > > I have a server with Dual Xeon cpu , 64GB ram , [2] 256GB SSD and [4] 2TB > HDD Er, congratulations. > Is there anyway to config Squid to store objects in different > cache_dir based on object types ? > > For example sto

Re: [squid-users] How do i implement an ACL for longer duration?

2017-08-04 Thread Antony Stone
On Friday 04 August 2017 at 11:44:10, purvar wrote: > Hello everyone , > > I have to implement an ACL from 10:00 AM of tuesday to 11:00 AM of > thursday. So, how do i make acl rule for such long duartion. Please do the > needful. You can't do this as a single ACL. You'll need one for Tuesday, o

Re: [squid-users] Squid stopped writing the log files... just for a while.

2017-08-22 Thread Antony Stone
On Tuesday 22 August 2017 at 13:19:51, Verónica Ovando wrote: > Hi all. > > Squid has a strange behavior: suddenly, it stops writing the log files > (access.log and cache.log) for about 30 seconds clients cannot access the > cache. Because my proxy is using AD auth, I checked the link between the

Re: [squid-users] Squid stopped writing the log files... just for a while.

2017-08-23 Thread Antony Stone
On Wednesday 23 August 2017 at 15:26:53, Verónica Ovando wrote: > >> Hi all. > >> > >> Squid has a strange behavior: suddenly, it stops writing the log files > >> (access.log and cache.log) for about 30 seconds clients cannot access > >> the cache. > > 10. What does access_log tell you about the

Re: [squid-users] DNS Server Failure

2017-09-04 Thread Antony Stone
On Monday 04 September 2017 at 18:49:08, erdosain9 wrote: > Hi. > There is a way to know what can be happend with this failure? > Thanks to all. Given that the DNS servers are on private IPs, I assume they're internal to your network, so what does the logging on the DNS servers themselves say?

Re: [squid-users] How to setup squid as reverse proxy to intercept Office365 traffic

2017-09-05 Thread Antony Stone
On Tuesday 05 September 2017 at 22:19:03, SShukla wrote: > Hi, > > I am trying to setup squid as reverse proxy to intercept office365 > traffic. Why do you want to set up a *reverse* proxy for Office 365 traffic? Are you running Office 365 servers and want some sort of front-end for them? I t

Re: [squid-users] How to setup squid as reverse proxy to intercept Office365 traffic

2017-09-07 Thread Antony Stone
On Wednesday 06 September 2017 at 19:34:15, SShukla wrote: > * Why do you want to set up a *reverse* proxy for Office 365 traffic? * > > We need to use reverse proxy to direct the traffic going to Office 365 > through an ICAP Server. I still don't understand why you think this needs to be a reve

Re: [squid-users] How to setup squid as reverse proxy to intercept Office365 traffic

2017-09-07 Thread Antony Stone
On Thursday 07 September 2017 at 16:34:02, SShukla wrote: > Thanks for replying Antony > > So one requirement for our solution is that, a user in a group using our > setup would have their traffic always pass through our proxy(Squid proxy + > ICAP), whether they are in their office on the company

Re: [squid-users] urlpath_regex negative assertions

2017-09-18 Thread Antony Stone
On Monday 18 September 2017 at 09:43:12, Vieri wrote: > Hi, > > I'd like to block access to URLs ending in *.dll except for those ending in > mriweb.dll. > > acl denied_filetypes urlpath_regex -i denied.filetypes > > where denied.filetypes contains a list of expressions Are the others working?

Re: [squid-users] very slow squid response

2017-09-19 Thread Antony Stone
On Tuesday 19 September 2017 at 11:18:34, Iraj Norouzi wrote: > hi everybody > i setup squid on ubuntu and centos Why both? > with tproxy and wccp for 6 gb/s traffic What hardware are you using for that sort of traffic flow? > but when i try to test squid with 40 mb/s traffic How are you gene

Re: [squid-users] very slow squid response

2017-09-19 Thread Antony Stone
On Tuesday 19 September 2017 at 11:34:37, Antony Stone wrote: > Is the direct traffic still being routed through the Squid server (you say > you're using tproxy, so I assume this is an intercept machine with the > traffic going through it between client and server)? Apologies - wit

[squid-users] Fwd: Re: very slow squid response

2017-09-19 Thread Antony Stone
: Iraj Norouzi To: Antony Stone > hi Antony thanks for you reply > i setup squid on ubuntu and centos Why both? because of test and because i not get the result > with tproxy and wccp for 6 gb/s traffic What hardware are you using for that sort of traffic flow? i use hp DL360 with

Re: [squid-users] Reading gzip encodec content failed

2017-09-26 Thread Antony Stone
On Tuesday 26 September 2017 at 19:43:28, xpro6000 wrote: > When I use my squid proxy server within my Java program I get the following > error > > "Reading gzip encodec content failed. > java.util.zip.ZipException: Not in GZIP format" > > This does not happen when I use other proxies or if I do

Re: [squid-users] Content injection

2017-10-01 Thread Antony Stone
On Sunday 01 October 2017 at 06:26:01, Jeffrey Merkey wrote: > On 9/30/17, Amos Jeffries wrote: > > > > For the record: > > > > Please be aware that HTTP documents are protected by international > > copyright laws. Altering other peoples content is illegal in all > > countries signatory to the B

Re: [squid-users] http_port intercept: squid 3.1.20 VS 3.5.23.

2017-10-04 Thread Antony Stone
On Wednesday 04 October 2017 at 13:30:52, Thomas Martin wrote: > Hello, > > I'm having trouble to make Squid 3.5.23 work like Squid 3.1.20 does. > > Here is my setup: >|| > > 10.0.0.Y/24| 10.0.0.254/24 <-> 10.100.0.254/24 | 10.100.0.100/24

Re: [squid-users] Pages sometimes load as a mess of random (?) symbols

2017-10-04 Thread Antony Stone
On Wednesday 04 October 2017 at 16:16:10, Yuri wrote: > There where no idea till you show your configs. Thelepathy on vacation. Show us what appears in the access log as well, both for the first load (gibberish) and the reload (good text). Antony. > 04.10.2017 20:13, Grey пишет: > > Hi, > > I'

Re: [squid-users] Private root certificate

2017-10-10 Thread Antony Stone
On Tuesday 10 October 2017 at 17:37:44, B Hirsch wrote: > What are the security vulnerabilities with trusting your own private root > certificate? If *you* created the certificate and *you* control the CA, so you *know* what certificates it has signed, I don't see that there are any vulnerabilit

Re: [squid-users] I need help to compile squid with ssldump

2017-10-13 Thread Antony Stone
On Friday 13 October 2017 at 17:17:34, Darvin Rivera Aguilar wrote: > I need a good tutorial to compile the latest version of squid with ssldump. Surely squid and ssldump are two separate applications which you run on the machine - squid does the proxying and ssldump tells you about the SSL/TLS

Re: [squid-users] Squid regex grammar

2017-10-27 Thread Antony Stone
On Friday 27 October 2017 at 17:06:01, Yuri wrote: > 27.10.2017 20:55, Alex Rousskov пишет: > > > > When a regular expression is using extended features, the basic regular > > expression compiler often (or even always?!) does not fail because it > > views the extended features as ordinary plain c

Re: [squid-users] Squid regex grammar

2017-10-27 Thread Antony Stone
On Friday 27 October 2017 at 17:26:18, Yuri wrote: > 27.10.2017 21:17, Antony Stone пишет: > > On Friday 27 October 2017 at 17:06:01, Yuri wrote: > >> 27.10.2017 20:55, Alex Rousskov пишет: > >>> When a regular expression is using extended features, the basic reg

Re: [squid-users] window media player can not play .wax file via Squid proxy

2017-11-06 Thread Antony Stone
On Monday 06 November 2017 at 12:22:11, Nilesh Gavali wrote: > Hi Team. > We are having squid deployed for users which work well for browsing > internet. Recently we received complaint from some users who access one of > the vendor URL to listen audio recordings. > The procedure they follow as > l

Re: [squid-users] problem squid squidguard with outlook 2016

2017-11-07 Thread Antony Stone
On Tuesday 07 November 2017 at 14:34:36, rmohammed wrote: > I have a problem with outlook 2016 in my office, > > When i activate squid and squidguard, Is the behaviour the same if you use Squid without Squidguard? > outlook stop to receive and send emails, > > can anyone help me plz? Tell us

Re: [squid-users] problem squid squidguard with outlook 2016

2017-11-08 Thread Antony Stone
c entries from your log files here and ask for help. Oh, and by the way, please answer the other two parts of my reply below: - is the behaviour the same if you use Squid without Squidguard? - what is the error message reported by Outlook, if any? > 2017-11-07 20:06 GMT+01:00 Antony St

Re: [squid-users] Slow speedtest results

2017-11-16 Thread Antony Stone
On Thursday 16 November 2017 at 19:18:15, Evan Pierce wrote: > Hi all > > Any idea why when using www.speedtest.net on my squid proxy ( squid > 3.5.27 on Centos 6.9) gives consistently false/bad speeds while doing a > speed test. > A similarly configured squid on smaller hardware and the same se

Re: [squid-users] Squid Behavior to Ping Destination on Registered Ports

2017-11-18 Thread Antony Stone
On Saturday 18 November 2017 at 21:21:38, Kevin Wong wrote: > My firewall (Juniper SRX) caught outbound ICMP flows using vulnerable ports That makes no sense. ICMP doesn't use port numbers. > before initiating outbound HTTP traffic. I am running an updated Squid > Proxy on Ubuntu 16.04. Can a

Re: [squid-users] Squid Behavior to Ping Destination on Registered Ports

2017-11-18 Thread Antony Stone
On Saturday 18 November 2017 at 22:37:20, Kevin Wong wrote: > > Date: Sat, 18 Nov 2017 22:06:31 + > > From: Antony Stone > > To: squid-users@lists.squid-cache.org > > Subject: Re: [squid-users] Squid Behavior to Ping Destination on > > > > Regis

Re: [squid-users] installing squidClamAV - check if blocking viruses

2017-12-03 Thread Antony Stone
On Sunday 03 December 2017 at 19:50:55, robert k Wild wrote: > how do i check if its blocking viruses? Try downloading something containing the EICAR test file. http://www.eicar.org/86-0-Intended-use.html That page itself contains the EICAR string, so in principle it should trigger ClamAV, how

Re: [squid-users] Secure basic authentication on Squid

2017-12-04 Thread Antony Stone
On Monday 04 December 2017 at 16:42:30, Colle Christophe wrote: > Is there a solution to secure the "basic" authentication of squid? (with an > SSL certificate for example). https://wiki.squid-cache.org/ConfigExamples/Authenticate/Ldap section "SSL/TLS_adjustments"? Antony. -- "Linux is goin

Re: [squid-users] Secure basic authentication on Squid

2017-12-04 Thread Antony Stone
On Monday 04 December 2017 at 17:06:03, Amos Jeffries wrote: > On 05/12/17 04:49, Antony Stone wrote: > > On Monday 04 December 2017 at 16:42:30, Colle Christophe wrote: > >> Is there a solution to secure the "basic" authentication of squid? (with > &g

Re: [squid-users] (no subject)

2017-12-07 Thread Antony Stone
On Thursday 07 December 2017 at 20:34:22, Yuri wrote: > In our kilobyte - one thousand twenty-four bytes. :) This has been the definition since the earliest days of computing (or at least, as soon as any computer had 1024 of anything...) This (rather stupid-sounding, in my opinion) kibibyte stu

Re: [squid-users] (no subject)

2017-12-07 Thread Antony Stone
On Thursday 07 December 2017 at 20:43:52, Ing. Pedro Pablo Delgado Martell wrote: > "In our kilobyte - one thousand twenty-four bytes." > > Your kilobyte Ok, let's move on, there is no point. https://en.wikipedia.org/wiki/Kilobyte "In historical usage in some areas of information technolog

Re: [squid-users] (no subject)

2017-12-07 Thread Antony Stone
ss? The question appeared to be asked seriously in the first place. I apologise if it was in fact a joke and I did not realise. Antony. > 08.12.2017 1:48, Antony Stone пишет: > > On Thursday 07 December 2017 at 20:43:52, Ing. Pedro Pablo Delgado > > Martell wrote: > >> "In

Re: [squid-users] Groups and authorizaction SQUID

2017-12-08 Thread Antony Stone
On Friday 08 December 2017 at 22:08:33, Edwin Quijada wrote: > Hi! > I am a newbie using SQUID and I have a question : > > I have 4 different groups in my company each group has access different Please explain what "access different" means. > but I dont know how create an ACL to give access for

Re: [squid-users] Groups and authorization SQUID

2017-12-09 Thread Antony Stone
On Saturday 09 December 2017 at 15:35:51, Edwin Quijada wrote: > > On Friday 08 December 2017 at 22:08:33, Edwin Quijada wrote: > > > > > I have 4 different groups in my company each group has access different > > > > Please explain what "access different" means. > > The first group has accees t

Re: [squid-users] Helper doent authentify

2017-12-11 Thread Antony Stone
On Monday 11 December 2017 at 22:19:53, Edwin Quijada wrote: > Hi! > I am trying to do a helper for use with Squid. I did my helper but it > doesnt authentify > > > $f = fopen("php://stdin", "r"); > while (!(feof($f))) > { > $line = fgets($f); > if ($line) > { > $fields = e

Re: [squid-users] Helper doent authentify

2017-12-11 Thread Antony Stone
On Monday 11 December 2017 at 22:56:16, Edwin Quijada wrote: > From: squid-users on behalf of > Antony Stone Sent: Monday, December > 11, 2017 9:27 PM > To: squid-users@lists.squid-cache.org > Subject: Re: [squid-users] Helper doent authentify > > On Monday 11 December 20

Re: [squid-users] question in :src/cf.data.pre "

2017-12-12 Thread Antony Stone
On Tuesday 12 December 2017 at 14:52:08, --Ahmad-- wrote: > Hello folks . > wanna ask if possible to add some directives to be by default added to the > squid config file and when the squid run after compilation to take effect > even i don’t add them to squid .conf http://lists.squid-cache.org/p

Re: [squid-users] question in :src/cf.data.pre "

2017-12-12 Thread Antony Stone
On Tuesday 12 December 2017 at 16:12:59, --Ahmad-- wrote: > @amos about your question . > > i think “include option “ is ok , but i also need it to be hidden and not > added to squid.conf Who are you trying to hide this from? Antony. -- In Heaven, the beer is Belgian, the chefs are Italian, t

Re: [squid-users] Website bypass with always-direct

2017-12-14 Thread Antony Stone
On Thursday 14 December 2017 at 11:21:52, Jorge Bastos wrote: > Alex, > > > > Ok, so what would be the directive to allow what i want to achieve? > > > > What do you want to achieve? > > > > Earlier, you implied that you do not want to see a request in Squid logs. > > As Amos have said, Squid can

Re: [squid-users] questions setting up transparent proxy

2018-01-03 Thread Antony Stone
On Wednesday 03 January 2018 at 21:06:42, John Ratliff wrote: > When I try to setup squid as a transparent proxy, I never get any > response from Squid. > When I try a wget request from a server that is being redirected How (and more importantly, where) are you doing the redirect? > Both machin

Re: [squid-users] Squid and SSL Bump

2018-01-09 Thread Antony Stone
On Tuesday 09 January 2018 at 21:28:37, Yoinier Hernandez Nieves wrote: > I try configure squid 3.5 on CentOS 7 with sslBump. > > But I have some problems, the first: > > Some HTTPs sites can access, because squid say what I am are not > authenticated. And other sites, yes I can access. Please

Re: [squid-users] want ignore if the ips added to the interface and force running it

2018-01-11 Thread Antony Stone
On Thursday 11 January 2018 at 13:02:43, Matus UHLAR - fantomas wrote: > >> On 11/01/18 21:50, --Ahmad-- wrote: > >>> must the ip be attached on os interface so that squid use it as > >>> outgoing address ? can squid use outgoing address that not being > >>> attached to the interface ? > >> > >>

Re: [squid-users] Problem loading Facebook profiles

2018-01-12 Thread Antony Stone
On Friday 12 January 2018 at 17:39:09, Roberto Carna wrote: > Dear, I have a Squid 3.5.27 proxy server with Squidguard in > transparent mode, for HTTP and HTTPS traffic. Please show us the Squid configuration file (omitting comments and blank lines) - that will show us what you've asked Squid to

Re: [squid-users] Authentification LDAP Exception for IP adresse

2016-02-26 Thread Antony Stone
On Friday 26 February 2016 at 10:07:12, Jérôme Seuniac wrote: > Hi, > > > I’m Jerome and I m a novice with squid. Welcome to the list. > With the documentation and the FAQ, I managed to create a LDAP > authentification. > > Now I want to create an exception for 2 IP addresses. What do you me

[squid-users] Fwd: Re: Authentification LDAP Exception for IP adresse

2016-02-26 Thread Antony Stone
Stone > Hi Antony, Sorry for my squid.conf, want those two IP addresses to be allowed access without authentication. Regards 2016-02-26 10:12 GMT+01:00 Antony Stone : > On Friday 26 February 2016 at 10:07:12, Jérôme Seuniac wrote: > >> Hi, >> >> >> I’m J

<    1   2   3   4   5   6   >