Re: [squid-users] subnet forward

On Wednesday 07 September 2016 at 15:05:25, Pol Hallen wrote: > I've a small lan: > > dsl<-WAN_NIC0_192.168.5.0/30->lan1_192.168.10.0/24 (NIC1)<-->switch+AP >lan2_192.168.1.0/24 (NIC2)<--->switch+AP > > I've squid server v.3.1.20 on 192.168.1.20 > > from 192.168.

Re: [squid-users] ssl bump certificate question

On Wednesday 07 September 2016 at 22:55:06, Yuri Voinov wrote: > 08.09.2016 2:25, erdosain9 пишет: > > Hi. > > A query. Sslbump is possible without installing the certificate, > > machine by machine ??? > > Bump impossible. Splice - possible. > > > Is there any way that this certificate Squid SU

Re: [squid-users] ssl bump certificate question

On Thursday 08 September 2016 at 00:06:02, Marcus Kool wrote: > slightly off topic: what is the easiest way to install a cert on a > smartphone? I looked for an app but did not find one. On my Android 4.2.2 device: Settings -> Security -> Trusted credentials: "Display trusted CA certificates" S

Re: [squid-users] Transparent Proxy

On Thursday 08 September 2016 at 10:12:48, John Sayce wrote: > For testing purposes I've reduced it to the following: > > http_port 3128 intercept > #dns_v4_first on > dns_nameservers 10.8.2.3 194.168.4.100 10.8.2.2 8.8.8.8 > acl wifi src 10.8.14.0/24 > acl all src all > http_access allow all > m

Re: [squid-users] Transparent Proxy

d of policy routing. Regards, Antony. > -Original Message- > From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On > Behalf Of Antony Stone Sent: 08 September 2016 09:36 > To: squid-users@lists.squid-cache.org > Subject: Re: [squid-users] Transparent Proxy >

Re: [squid-users] TProxy and client_dst_passthru

On Thursday 08 September 2016 at 12:27:42, Omid Kosari wrote: > Hi Fred, > > Same problem here . Do you found any solution or workaround ? Please clarify which message you are reply / referring to. Thanks, Antony. -- Archaeologists have found a previously-unknown dinosaur which seems to hav

Re: [squid-users] (71) Protocol error (TLS code: X509_V_ERR_CERT_HAS_EXPIRED)

On Thursday 15 Sep 2016 at 19:44, erdosain9 wrote: > Hi. > I have this problem with some webs > > example: > https://www.dalemacartney.com/2012/07/06/squid-proxy-integration-with-activ > e-directory-the-quick-and-simple-way/ > (71) Protocol error (TLS code: X509_V_ERR_CERT_HAS_EXPIRED) > SSL

Re: [squid-users] Parameter to define quantity of clients in Proxy Reverse

On Wednesday 21 Sep 2016 at 17:03, Roberto Carna wrote: > Dear, just a brief question: > > I have Squid 3.4.8 on Debian running in reverse proxy mode, and I need > to know if there is any parameter in squid.conf that I have to adjust > in order to define the quantity of clients I will accept. No

Re: [squid-users] multiple instances with different outgoing addresses and 2x external nics

On Thursday 22 Sep 2016 at 06:47, Drikus Brits wrote: > HI Experts, > > I'm struggling to get squid to work the way i need it to. > > My setup : > > 1x Server : Ubuntu 14 > 3x Interfaces : 1x Inside ( 192.168.100.10 ) 2x Outside connected to DSL > (1st = 10.0.0.2, 2nd 10.0.1.2) > 2x default rou

Re: [squid-users] Question about the url rewrite before proxy out

On Thursday 22 Sep 2016 at 06:04, squid-us...@filter.luko.org wrote: > > i am looking for a proxy which can "bounce" the request, which is not a > > classic proxy. > > > > I want it works in this way. > > > > e.g. a proxy is running a 192.168.1.1 > > and when i want to open http://www.yahoo.com,

Re: [squid-users] The Squid “Persona”- Squid 3.5.21+4.0.14 Release

On Wednesday 28 September 2016 at 13:39:04, Eliezer Croitoru wrote: > Take a look at the page source to get the full article: > http://www1.ngtech.co.il/wpe/?p=345 If this is to be used as publicity material or a news item associated with the Squid project, I humbly recommend that a native Engli

Re: [squid-users] Kerberos Ne

On Wednesday 28 September 2016 at 16:02:42, erdosain9 wrote: > Hi. > Sorry for my ignorance, but, i have squid authentication with kerberos... > > all is working fine... > > but i have some behavior in cache.log that... i dont know if this is the > expected, or there is some problem > > bec

Re: [squid-users] connections from particular users sometimes get stuck

On Wednesday 28 September 2016 at 17:37:58, Alex Rousskov wrote: > AFAICT, Squid did not receive a request for www.ru: > > $ egrep -c '.ru|217.112.35.75' cache.log.debug > > 0 > > > > $ tshark -V -r squid-stuck-reference-client.pcap | egrep -c > > '.ru|217.112.35.75' 0 Is that a direct c

Re: [squid-users] Large text ACL lists

On Thursday 29 September 2016 at 11:44:28, Darren wrote: > Hi All > > I have been tinkering with Squidguard for a while, using it to manage ACL > lists and time limits etc. > > While it works OK, it's not in active development and has its issues. Have you considered https://www.urlfilterdb.com/

Re: [squid-users] problem in configuring squid

On Monday 03 October 2016 at 17:03:13, Shark wrote: > I want to config squid to make "open proxy" for both http & https > I want make anonymous proxy, without decrypting traffic or etc, just change > ip address, like this: > > i find lot of ip port in internet for example: 173.161.0.227 > when i

Re: [squid-users] Problem with Squid3 Caches

On Monday 03 October 2016 at 20:55:07, Jason Alexander wrote: > Greetings - > > I’m trying to install squid on an Ubuntu workstation in a VM. I install > squid but unable to initialize caches. I get the following error: > > FATAL: Bungled /etc/squid/squid.conf line 3467: cache_dir rock /ssd3 .

Re: [squid-users] Squid - AD kerberos auth and Linux Server proxy access not working

On Tuesday 04 October 2016 at 12:08:27, Nilesh Gavali wrote: > All; > > we have Squid proxy configured with Windows SSO with Kerberos which work > fine for WIndows AD users. > we have new requirement where one Linux application server need to access > Internet via squid proxy, we allowed Linux ho

Re: [squid-users] Squid - AD kerberos auth and Linux Server proxy access not working

On Tuesday 04 October 2016 at 12:28:44, Nilesh Gavali wrote: > Hello Antony; > I have double checked the current working configuration of my squid.conf > and it has same settings which I posted earlier. somehow it is working for > us. I'm not saying the whole thing won't work; I'm saying there is

Re: [squid-users] problem in configuring squid

On Tuesday 04 October 2016 at 14:51:13, Mehdi Yeganeh wrote: > Thanks for quick replay, > I need to use my server, i configure my ip address in some software like > antivirus and ... ... and what? I do not understand what antivirus software has to do with our discussion. Please give details, d

Re: [squid-users] Problem with Squid3 Caches

On Tuesday 04 October 2016 at 17:00:24, KR wrote: > Hello Anthony, Yuri, > > It seems every line is commented out in the config? Impossible - otherwise it couldn't generate the error message "FATAL: Bungled /etc/squid/squid.conf line 3467: cache_dir rock /ssd3 ..." Thta is telling you that lin

Re: [squid-users] Problem with Squid3 Caches

On Tuesday 04 October 2016 at 19:43:21, KR wrote: > > On Oct 4, 2016, at 11:45 AM, Antony Stone wrote: > > > > On Tuesday 04 October 2016 at 17:00:24, KR wrote: > >> Hello Anthony, Yuri, > >> > >> It seems every line is commented out in the config

Re: [squid-users] Caching http google deb files

On Wednesday 05 October 2016 at 20:40:46, Hardik Dangar wrote: > Hey Jok, > > Thanks for the suggetion but the big issue with that is i have to download > whole repository about ( 80-120 GB ) first and then each week i need to > download 20 to 25 GB. This is not true for apt-cacher-ng. You inst

Re: [squid-users] ERROR: Cannot connect to 127.0.0.1:3128

On Tuesday 11 October 2016 at 12:31:03, Jorgeley Junior wrote: > I think it could be the sequence of the rules, do this command and post the > results: > grep . /etc/squid-your-version/squid.conf | > grep -v "#" This can be collapsed down to: grep "^[^#]" /etc/squid-

Re: [squid-users] Squid 2.7 to Squid 3.5

On Sunday 16 October 2016 at 15:20:39, Johnny Lam wrote: > Dear All, > > I've encountered a issue during upgrade from 2.7 to 3.5, please find my > config below. Seems everything changed in version 3.5. No config to be found :( Please: - post your squid.conf without comments or blank lines -

Re: [squid-users] Caching Google Chrome googlechromestandaloneenterprise64.msi

Disclaimer: I am not a Squid developer. On Saturday 22 October 2016 at 14:43:55, gar...@comnet.uz wrote: > IMO: > > The only reason I believe [explains] why core developers of Squid tend to > move HTTP violating settings from average users is to prevent possible > abuse/misuse. I believe the re

Re: [squid-users] possible to intercept https traffic in TCP_TUNNEL CONNECT method ?

On Saturday 22 October 2016 at 15:42:23, --Ahmad-- wrote: > Hi guys > say that i have squid proxy sever > and i was running capturing traffic on that server . You mean using ICAP or ECAP service? > say that all users were using ip:port —> ((tcp_connect tunnel))) mode of > squid I'm not sure w

Re: [squid-users] Slowness in Squid

On Sunday 23 October 2016 at 05:36:22, Krishna Kulkarni wrote: > I am new to squid.. I have installed squid 3.5 on CentOS 6.7. As a > configuration part, I have kept most of the things default. Please advice > on how to allocate cache memory of 20 GB to squid. Do you mean cache memory, or disk ca

Re: [squid-users] Slowness in Squid [squid-users Digest, Vol 26, Issue 82]

On Sunday 23 October 2016 at 14:42:02, Krishna Kulkarni wrote: > Hi Antony, > Thanks for the reply. I have made changes in squid.conf as per your > suggestion and have allocated 20 GB of Hard disk space. Have you made any measurements at all (either before making the disk cache bigger, or since)

Re: [squid-users] squid-users Digest, Vol 26, Issue 82

On Sunday 23 October 2016 at 15:26:54, Yuri Voinov wrote: > You can have slow DNS. Consider to use local caching DNS recursor as > source for proxy & users. Why would that result in requests via Squid being slower than direct? @Krishna: You *have* confirmed that Squid requests are slower than di

Re: [squid-users] Issue when connecting to apple APN

On Monday 24 October 2016 at 11:27:17, Alaa Hassan Barqawi wrote: > Dears, > I am facing issue in connecting with apple APN gateway.push.apple.com : > 2195 The name cannot be resolved although I am using google DNS servers > and it throws an error Unable to determine IP address from host name > ga

Re: [squid-users] Issue when connecting to apple APN

On Monday 24 October 2016 at 11:36:34, Antony Stone wrote: > On Monday 24 October 2016 at 11:27:17, Alaa Hassan Barqawi wrote: > > Dears, > > I am facing issue in connecting with apple APN gateway.push.apple.com : > > 2195 The name cannot be resolved although I am using googl

Re: [squid-users] Transparent and non Transparent at the same time

On Thursday 27 October 2016 at 19:51:22, Yuri Voinov wrote: > You absolutely sure, Eliezier? :) Yes - you do not use DNAT. You do use REDIRECT on the machine Squid is running on. Antony. > 27.10.2016 23:46, Eliezer Croitoru пишет: > > You need routing policy not DNAT. > > > > Eliezer > > >

Re: [squid-users] Transparent and non Transparent at the same time

On Thursday 27 October 2016 at 20:57:04, Yuri Voinov wrote: > You know method to do this without NAT? ;) I know how to do it without DNAT, which is what Eliezer recommended and you challenged. Antony. -- "The tofu battle I saw last weekend was quite brutal." - Marija Danute Brigita Kuncaiti

Re: [squid-users] Transparent and non Transparent at the same time

On Thursday 27 October 2016 at 21:04:18, Yuri Voinov wrote: > (facepalm) > > rdr(REDIRECT) is NAT functionality? Yes or no? Yes, DNAT is one NAT functionality. There are several others. On Thursday 27 October 2016 at 19:46:53, Eliezer Croitoru wrote: > You need routing policy not DNAT. DNAT

Re: [squid-users] Transparent and non Transparent at the same time

On Thursday 27 October 2016 at 21:04:18, Yuri Voinov wrote: > (facepalm) > > rdr(REDIRECT) is NAT functionality? Yes or no? Apologies - I could have answered this better: Yes, REDIRECT is one NAT functionality. There are several others. On Thursday 27 October 2016 at 19:46:53, Eliezer Croitor

Re: [squid-users] Transparent and non Transparent at the same time

On Thursday 27 October 2016 at 21:09:44, Yuri Voinov wrote: > OP originally wrote - "I have no IPtables and so on." > He needs specific guidance, not word games. Agreed. Antony. -- There's no such thing as bad weather - only the wrong clothes. - Billy Connolly

Re: [squid-users] Squid Problem

On Wednesday 02 November 2016 at 11:39:22, Bilal Mohamed wrote: > Please find the disk space status. > /dev/mapper/AG--HO--PRXY-root > 12189696 12189695 1 100% / And there's your problem - your root file system is full. Antony. -- I have an excellent memory. I can

Re: [squid-users] Squid Problem

to resolve this problem. Antony. > On Wed, Nov 2, 2016 at 2:02 PM, Antony Stone wrote: > > On Wednesday 02 November 2016 at 11:58:31, Bilal Mohamed wrote: > > > How do I clear it? > > > > Erm, delete stuff you don't need, or given that it's an LVM logical

Re: [squid-users] Squid Problem

che (see also point 1 above) Antony. > On Wed, Nov 2, 2016 at 2:16 PM, Antony Stone wrote: > > On Wednesday 02 November 2016 at 12:10:46, Bilal Mohamed wrote: > > > This is where the files are pointing to... can i delete the files dm-0 > > > and dm-1 ? > > >

Re: [squid-users] Is something wrong with the squid list?

On Saturday 05 November 2016 at 16:07:09, Stanford Prescott wrote: > I've received no messages at all on this mail list for several days. Is the > list still "working"? Yes. http://lists.squid-cache.org/pipermail/squid-users/2016-November/date.html Antony. -- Bill Gates has personally assured

Re: [squid-users] Squid Problem - Google

On Monday 07 November 2016 at 10:53:14, Bilal Mohamed wrote: > Hi, > > I am getting following error while accessing google. Rest all websites are > ok. There is no ACL to block google.com Is your machine properly configured for IPv6? Try the following: ping www.google.com ping

Re: [squid-users] Squid Problem

On Tuesday 08 November 2016 at 13:47:25, Jose Joaquin Ruiz Silva wrote: > Good morning I am Cuban I have mounted squid 2.7 on debian wheezy Why? Debian Wheezy contains version 3.1.20 and Wheezy-backports contains the version 3.4.8 Installing 2.7 in 2016 (that version is 8 years old and has not

Re: [squid-users] TCP Outgoing Address ACL Problem

On Friday 11 November 2016 at 17:51:04, jarrett+squid-us...@jarrettgraham.com wrote: > I'm trying to use ACLs to direct incoming traffic on assigned ports to > assigned outgoing addresses. But, squid uses the first IP address > assigned to the interface not listed in the config instead. See htt

Re: [squid-users] FQDN assigned to loopback

On Tuesday 05 May 2015 at 17:41, markme wrote: > I have a FQDN assigned to a loopback address for development purposes but > unfortunately every time I enter in that URL into my browser it goes > through Squid and is trying to access the loopback address on the squid > server and not on the client

Re: [squid-users] Geolocation Vs Squid

On Wednesday 06 May 2015 at 13:41, Rodrigo Lopes Mauricio wrote: > Hi everybody. > > Is the any know issue with squid and geolocation cookies? I'm not familiar with geolocation services using cookies - mainly because a cookie is something sent to your computer by the server, so the server would

Re: [squid-users] about squid trouble

On Monday 18 May 2015 at 21:05:35 (EU time), Amaury Viera Hernández wrote: > I work at the University of Computer Sciences at Havana, Cuba (6000 > users aproximately). We surf using squid, but in many ocassions when we > are surfing I get an error page of exceed quota telling me that the > cuota o

Re: [squid-users] (no subject)

On Monday 25 May 2015 at 21:20:16 (EU time), S Sarath kumar wrote: > hi i have been using squid3 on ubuntu 14.04. > i want to block the stream content in my lan. > hence i written a acl like below. > this acl at the top. Please post the entire squid.conf (excluding blank lines / comments). That

Re: [squid-users] (no subject)

On Monday 25 May 2015 at 21:50:12 (EU time), S Sarath kumar wrote: > Hi, > > below mentioned rules only applied > > acl Streaming rep_mime_type video/flv video/x-flv > acl mynetwork src 10.108.20.0/24 > > http_reply_access deny mynetwork Streaming > http_access allow mynetwork 1. Please reply

Re: [squid-users] It is possible using squid to cache YouTube ?

On Friday 29 May 2015 at 09:44:51 (EU time), Ibrahim Lubis wrote: > Hi, > > My freind asked why dont we cache youtube? In 2014 i read a website page > about how to caching youtube using squid lusca, and later in comment > section the author said the method not work anymore so I wonder it is > pos

Re: [squid-users] Squid doesn't write logs via rsyslog

On Monday 08 June 2015 at 12:53:00 (EU time), Robert Lasota wrote: > the problem is it still writes logs to files /var/log/access.log or > /opt/var/log/access.log (depends what I set in conf) but never to rsyslog. > > I mean, I have set rsyslog to it send logs to remote central server, and > from

Re: [squid-users] reverse proxies and Host request header

On Friday 12 June 2015 at 16:08:59 (EU time), Julianne Bielski wrote: > reverse proxies are always "transparent" from the perspective of > the client and the Host header is often used by the proxy > to map to the correct back end origin server. > > I also think they usually pass the Host header a

Re: [squid-users] reverse proxies and Host request header

On Friday 12 June 2015 at 17:49:38 (EU time), Julianne Bielski wrote: > With virtual hosting, the client is asking for a virtual origin server's > host and DNS enables the ip address for the physical host to respond. The > virtual host still sees "its" hostname in the host header, not the physical

Re: [squid-users] Suggested refresh_pattern for debian repos?

On Saturday 13 June 2015 at 16:23:59 (EU time), TarotApprentice wrote: > I updated 3 machines by doing apt-get update, apt-get upgrade on each in > turn. I have a 10proxy file in the apt.conf.d directory that has an > "acquire::http:proxy" statement. Its pointing to Squid 3.5.5. > > It gave appro

Re: [squid-users] confused about ICAP and who's downloading what

On Sunday 21 June 2015 at 00:31:45 (EU time), Jason Haar wrote: > When a web page is requested by a client, what component does what? Does > squid do the download, pass the content to ICAP, or does it (like with > parent proxies), just tell the ICAP software to do the download itself? The former

Re: [squid-users] Logging of 'indirect' requests, e.g. involving NAT or VPN

On Friday 26 Jun 2015 at 09:51, Henry S. Thompson wrote: > > logs will show the IP address that reached squid, ie. the source > > address of the connection. If that was NATted, squid will never know > > (and thus is not able to log) the original address before the NAT. > > That's what I assum

Re: [squid-users] Logging of 'indirect' requests, e.g. involving NAT or VPN

On Friday 26 Jun 2015 at 10:42, Henry S. Thompson wrote: > Antony Stone writes: > > > > It's entirely plausible (I'd even say common) for VPN clients to get > > 192.168 addresses; also if there's a NATting router in the path > > and Squid is logging

Re: [squid-users] Strange warning - squid 3.0

On Monday 29 Jun 2015 at 09:55, Fiorenza Meini wrote: > Hi, > I see this error when I restart squid service: > > please, what does it mean: > WARNING: because of this '192.168.100.164' is ignored to keep splay tree > searching predictable ? It means that squid is going to ignore the address 192.

Re: [squid-users] TCP_MISS/504 in cache_peer

On Tuesday 30 Jun 2015 at 08:24, Stakres wrote: > Here, it seems the parent (sibling mode) tries to do the request itself but > faces an error (504 gateway timeout), it should answer to the kid it does > not have the object (TCP_MISS) then the parent should download the object > from internet. Su

Re: [squid-users] TCP_MISS/504 in cache_peer

On Tuesday 30 Jun 2015 at 08:45, Stakres wrote: > There are 2 squid, sibling each of them. > Squid1 (10.1.1.1): > cache_peer 10.1.1.2 sibling 8182 8183 proxy-only no-tproxy > Squid2 (10.1.1.2): > cache_peer 10.1.1.1 sibling 8182 8183 proxy-only no-tproxy > if you need more details, feel free to a

Re: [squid-users] squid version 3.5.5

On Wednesday 01 July 2015 at 13:49:00 (EU time), Paul Martin wrote: > Hello, > > I am using 2 machines with 2 squid versions, same squid.conf and both with > 700 Http requests/sec. > > -squid version 3.3.8: I have 40k squid cache objects > > -squid version 3.5.5: I have 2k squid cache objects >

Re: [squid-users] Squid mikrotik public IP

On Sunday 05 July 2015 at 13:27:00 (EU time), san2roy wrote: > ng> > > This is my setup which need to work. as i am very new in squid need your > help. my setup are following > > Squid 3.5.5 > centos 6.6 > Mikrotik Rou

Re: [squid-users] How to get the correct size of a denied object ?

On Monday 20 Jul 2015 at 16:27, Stakres wrote: > As you know, when an object is denied by an ACl or other, the size of the > object in the log file is the size of the ERR_* page. > Is there a way to get the correct/real size of the blocked object ? > > Because here we don't care the size of the E

Re: [squid-users] log source port from squid server?

On Friday 24 Jul 2015 at 13:43, Kevin Kretz wrote: > From the documentation and reading back through this list's archive, I > don't see a format code for squid server source port. Has there ever been > interest in this? Does http://www.squid-cache.org/Doc/config/logformat/ help? Antony. -- P

Re: [squid-users] random forward proxy authentication pop-up

On Monday 27 Jul 2015 at 16:53, Berkes, David wrote: > I have squid configured as a forward proxy with basic authentication. All > traffic flows as expected, but periodically I get an authentication pop-up > indicating an origin server is requiring credentials. I check the URL via > non-proxy br

Re: [squid-users] random forward proxy authentication pop-up

On Monday 27 Jul 2015 at 17:21, Berkes, David wrote: > Here is the information requested. From the log, everything looks to be > normal. The log example is from the cdn0.vox-cdn.com traffic. > > ORIGIN URL's > pixel.adsafeprotected.com > cdn0.vox-cdn.com > sb.scorecardresearch.com > > ***

Re: [squid-users] useragent.log

On Monday 27 Jul 2015 at 18:45, HackXBack wrote: > how i can use useragent log in 3.5.6 > while no user agent log in access.log like it mentioned in > http://wiki.squid-cache.org/SquidFaq/SquidLogs As the page says "this log has become one of the default access.log formats and is always availabl

Re: [squid-users] Detecting clients flooding squid with failed request

On Monday 03 August 2015 at 08:06:35 (EU time), Dan Charlesworth wrote: > Probably a lot of forward proxy users here have encountered applications > which, if they can’t get their web requests through the proxy (because of > 407 Proxy Auth Required or whatever), just start aggressively, endlessly

Re: [squid-users] Deny Caching of Video and Audio

On Tuesday 04 August 2015 at 00:13:32, markme wrote: > Is there a simple way to deny caching of video and audio? My manager > doesn't want these to be cached due to the large amount of space they > might take up. Just set the maximum cache object size - then it doesn't matter whether it's audio,

Re: [squid-users] Deny Caching of Video and Audio

ve to set this up for all the domains you think you might get overly-large content from, and once you have, it's prevents caching of anything from those domains, including the acceptably small stuff. > 2015-08-03 19:29 GMT-03:00 Antony Stone wrote: > > On Tuesday 04 August 20

Re: [squid-users] Deny Caching of Video and Audio

On Tuesday 04 August 2015 at 10:28:32, Antony Stone wrote: > On Tuesday 04 August 2015 at 01:39:38, Jorgeley Junior wrote: > > create an acl: > > acl youtube dstdomain .youtube.com > > use the directive: cache deny youtube > > That will prevent caching for all content

Re: [squid-users] Caching requests to a non standard http port help please.

On Saturday 08 August 2015 at 16:20:24, 1508 wrote: > Hello, > > I would like to configure squid-cache to cache http requests to port 10050 > on a certain server such as http://www.example.com:10050/picture.png So long as 10050 isn't listed as an unsafe port in your Squid config, it'll do this

Re: [squid-users] Configuring squid reverse proxy

On Wednesday 12 August 2015 at 14:38:55, joseph jose wrote: > Hi, > > I have set up squid in reverse proxy mode to cache an apache webserver > hosted in linux vm. > > IP of my squid reverse proxy is 10.0.0.1 and 10.0.0.2 is the ip of > webserver which is also a linux vm Your squid server has on

Re: [squid-users] Presenting an internal virtual host externally as domain root folder (Amos Jeffries)

On Friday 14 August 2015 at 10:57:52, Arjen van der Meer wrote: > Good morning Amos, > > And thanks for your reply. But I think this is what I already have > configured, unless you notice errors in the following configuration: > acl wordpress urlpath_regex ^/wordpress The above matches any URL

Re: [squid-users] Presenting an internal virtual host externally as domain root folder (Amos Jeffries)

On Friday 14 August 2015 at 12:37:49, Antony Stone wrote: > On Friday 14 August 2015 at 10:57:52, Arjen van der Meer wrote: > > Good morning Amos, > > > > And thanks for your reply. But I think this is what I already have > > configured, unless you notice errors in

Re: [squid-users] Presenting an internal virtual host externally as domain root folder

On Friday 14 August 2015 at 14:10:54, Arjen van der Meer wrote: > Dear Antony (and Amos), > > Thanks again for your replies. This answers my question, however I had > hoped for a solution that would make /wordpress invisible from the > outside. In that case remove the ^/wordpress ACL from your s

Re: [squid-users] Cache Permission Errors

On Monday 24 August 2015 at 23:41:49, kuntal_ba...@bnz.co.nz wrote: > Could you please un-subscribe me ? I've sent you an unsubscribe request confirmation. Reply to it and you'll be removed from the list. > Senior Infrastructure Architecture and Design Specialist > Infrastructure Architecture a

Re: [squid-users] completely transparent Squid

On Thursday 27 Aug 2015 at 17:21, Arkantos wrote: > the community is now wanting a caching server. > > i have zeroed in on CentOS+Squid+Webmin > but we are unable to configure it as a "completely transparent cache" If your community of users wants a caching proxy server, why make it transparent

Re: [squid-users] completely transparent Squid

On Saturday 29 Aug 2015 at 16:32, Arkantos wrote: > user authentication is done from Unify MSC by matching user/pass/IP/MAC > using strict method - this is the reason we need completely transparent > proxy. MAC address? Really? You won't get user MAC addresses to pass through routers, or throug

Re: [squid-users] Software caused connection abort

On Monday 31 Aug 2015 at 14:08, Corbo, Nelson wrote: > I'm getting failure messages in squid 3.57 for Windows, I > don't know the reason. I'll appreciate your support with this issue. We'd appreciate in return some information about: - what was the request which got aborted? - w

Re: [squid-users] Splash page ?

On Monday 31 Aug 2015 at 17:38, adricustodio wrote: > Well... now its appearing the following when i try to access... > > Internal Error: Missing Template /etc/squid/splash.html > > Ideas ? Well, sorry to be a bit obvious about this, but did you create that file when you added this line to squ

Re: [squid-users] acl rep_header and icap respmod

On Saturday 05 September 2015 at 15:29:28, Alfredo Rezinovsky wrote: > I'm trying to adapt response for all text/html responses. > > icap_service service_respmod respmod_precache > icap://127.0.0.1:1344/response > > acl html rep_header -i Content-Type text\/html > adaptation_access service_respm

Re: [squid-users] acl rep_header and icap respmod

On Saturday 05 September 2015 at 15:32:09, Antony Stone wrote: > On Saturday 05 September 2015 at 15:29:28, Alfredo Rezinovsky wrote: > > I'm trying to adapt response for all text/html responses. > > > > icap_service service_respmod respmod_precache > >

Re: [squid-users] Is it possible to send the connection, starting with the CONNECT, to cache-peer?

On Tuesday 15 September 2015 at 19:45:05, Yuri Voinov wrote: > I want to get the answer the people who did it. And not those that > suggest that they could do it. I have a suggestion which I hope may help - show us a configuration you have tried, following the documentation, and tell us in what

Re: [squid-users] after changed from 3.4.13 to 3.5.8 sslbump doesn't work for the site https://banking.postbank.de/

On Wednesday 16 September 2015 at 15:39:35, Dieter Bloms wrote: > I did an upgrade of my squid from 3.4.13 to 3.5.8 and most sites are > accessible via HTTPS and sslbump enable. > But I can't get any access to the destination > https://banking.postbank.de, which is accessible with 3.4.13. > I use

Re: [squid-users] Optimezed???

On Wednesday 16 September 2015 at 22:00:27, Jorgeley Junior wrote: > I think my squid is not optimezed due the percentage of hits, see the graph > bellow: I agree with you. Regards, Antony. -- +++ Divide By Cucumber Error. Please Reinstall Universe And Reboot +++

Re: [squid-users] Optimezed???

On Friday 18 September 2015 at 13:13:27, Jorgeley Junior wrote: > hey guys, forgot-me? :( Surely you can see for yourself how many connections you've had of different types? Here are the most common (all those over 100 instances) from your list of 5240 results > > 290 TAG_NONE/503 > >

Re: [squid-users] Optimezed???

(27%), plus anything where the remote server had nothing to provide (13%), and requests where the user's browser already had a cached copy and didn't to request an update (4%). That throws out 80% of your current statistics, so you concentrate on the data about connections Squid *c

Re: [squid-users] Squid not following 302

On Monday 21 September 2015 at 11:20:56, Ashish Mukherjee wrote: > Squid does not follow 302 and sends back the 302 header to the client. I am > aware it is so as it would be bad to hide the ultimate url from the client > and for reasons of cache poisoning etc. > > However, I have a scenario wher

Re: [squid-users] Is it possible to send the connection, starting with the CONNECT, to cache-peer?

On Monday 21 September 2015 at 21:20:19, Yuri Voinov wrote: > 22.09.15 1:15, Amos Jeffries пишет: > > > HSTS is opt-out. Strip the *response* header on the first contact and it > > disappears. > > I can't. Because first connection can't occur during ISP ban by IP. > First contact is never occurs.

Re: [squid-users] Redirect URL's to another cache

On Tuesday 22 September 2015 at 14:57:26, Jasper Van Der Westhuizen wrote: > I have a cloud based cache peer that I use to authenticate users and filter > etc. I have a new requirement to redirect a set list of domains to another > cache peer. The list is defined in a file and only these domains s

Re: [squid-users] Sanitised websites

Please don't reply to entire digest posts - trim them to contain only the part you are replying to. Also please change the subject line to be more relevant. On Tuesday 22 September 2015 at 11:38:26, Mumin Coder wrote: > I need database to store sanitized websites (cleaned from javascript > mali

Re: [squid-users] after changed from 3.4.13 to 3.5.8 sslbump doesn't work for the site https://banking.postbank.de/

On Tuesday 29 September 2015 at 23:50:15, HackXBack wrote: > i dont say that we want to bump pinned connection , > why squid not automatically bypass pinned connection with out decryption ?? How can Squid know that the client is using pinning? Antony. -- BASIC is to computer languages what Rom

Re: [squid-users] squid cache

On Wednesday 30 September 2015 at 21:35:32, Magic Link wrote: > Hi,i configure squid to use cache. It seems to work because when i did a > try with a software's download, the second download is TCP_HIT in the > access.log. Congratulations. > The question i have is : why the majority of requests

Re: [squid-users] Site not Working through SQUID

On Tuesday 06 October 2015 at 17:40:11, Cristiano Nunes wrote: > I have a Squid Version 3.9.Stable13 which is working perfect. > > Today I received a complanint of a users which is not able to browse a > brazilian site. > > Squid log shows no DENY at all but the site only shows a white screen wi

Re: [squid-users] Site not Working through SQUID

On Wednesday 07 October 2015 at 14:04:18, Cristiano Nunes wrote: > I thought that there were something broken is the workstation like old > Java or missing flash... A part of been tested in more than one > workstation, I NATed one of the workstation, by passing Squid, and it > worked flawless,

Re: [squid-users] SQUID: cache_dir filling up and squid imploding

On Tuesday 13 October 2015 at 16:37:10, Nelson Manuel Marques wrote: > On Tue, 2015-10-13 at 20:22 +0600, Yuri Voinov wrote: > > > > Squid has its own in-memory cache, what's the point to put the disk > > cache to the same ?! > > The problem here isn't the tmpfs, but instead Squid going 20% over

Re: [squid-users] Redirect site.ca to site.qc.ca

On Wednesday 14 October 2015 at 20:33:10, sebastien.boulia...@cpu.ca wrote: > Hi, > > How do you recommend me to configure Squid to redirect request on > example.ca to example.qc.ca ? My personal recommendation would be to use a search engine such as Google to look for information about "Squid"

Re: [squid-users] site http://www.domain.cpu.qc.ca work BUT http://domain.cpu.qc.ca DONT WORK

On Monday 19 October 2015 at 19:27:37, sebastien.boulia...@cpu.ca wrote: > 1445275480.152 5 TCP_MISS/200 9269 GET > http://www.cpu.qc.ca/ - FIRSTUP_PARENT/172.20.253.5 text/html > > 1445275241.374 0 TCP_DENIED/403 4106 GET > http://cpu.qc.ca/ - HIER_NONE/- text

Re: [squid-users] site http://www.domain.cpu.qc.ca work BUT http://domain.cpu.qc.ca DONT WORK

ould actually be available for Squid to fetch? Antony. > -Message d'origine- > De : squid-users [mailto:squid-users-boun...@lists.squid-cache.org] De la > part de Antony Stone Envoyé : 19 octobre 2015 13:36 > À : squid-users@lists.squid-cache.org > Objet :

Re: [squid-users] Can't find file

On Friday 30 October 2015 at 15:34:34, dol...@ihcrc.org wrote: > I am trying to complete the "Proxy auto configuration" portion of setting > up Squid to authenticate through Active Directory and the instructions say > to modify the file /etc/apache2/conf.d/wpad.dat. However, when I try to > save

<    1   2   3   4   5   6   >