ser at the IP address of the
server?
What is the output of the following command?
ls -al /etc/apache2
Regards,
Antony.
> -Original Message-
> From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On
> Behalf Of Antony Stone Sent: Friday, October 30,
On Friday 30 October 2015 at 16:18:16, dol...@ihcrc.org wrote:
> Antony,
>
> I get the Apache2 Debian Default page when I got the address of the server.
Excellent.
> Here are the results of the command:
>
> root@srv-proxy:/usr/local/src/negotiate_wrapper-1.0.1# ls -al /etc/apache2
> total 96
>
On Monday 02 November 2015 at 16:39:45, FredB wrote:
> I want to reduce DNS requests, so I'm trying with
>
> positive_dns_ttl 6 hours
> And
> negative_dns_ttl 4 hours
> If I try a false domain like test.google.com there is a response from my
> DNS Servail, so ok But if I retry after a short time
On Saturday 07 November 2015 at 09:30:04, 聡司蛭田 wrote:
> Dear
>
> I have question about HTTPS communication through Squid Proxy Server.
>
> HTTP 503 error frequency occurs.
Does it also occur if you point your browser directly at the site, not via
Squid?
> 10.xx.xx.xx - - [01/Nov/2015:03:44:33
This reply came to my private address.
Forwarding to the list.
-- Forwarded Message Starts --
Subject: Re: [squid-users] HTTP 503 error in squid proxy server
Date: Saturday 07 November 2015 10:43:14
From: 聡司蛭田
To: Antony Stone >
Dear
Thank you for reply.
Squid version
On Saturday 07 November 2015 at 12:48:09, Antony Stone wrote:
> This reply came to my private address.
>
> Forwarding to the list.
>
> -- Forwarded Message Starts --
>
> Subject: Re: [squid-users] HTTP 503 error in squid proxy server
> Date: Saturday 0
On Wednesday 11 November 2015 at 13:25:56, Verónica Ovando wrote:
> Hi. I need to set up correctly my logfiles rotation.
I think http://serverfault.com/questions/391538/logrotate-daily-and-size might
help you.
> I am using logrotate with this configuration in /etc/logrotate.d/squid3:
>
> /var/
On Thursday 12 November 2015 at 15:55:10, Magic Link wrote:
> Hi,
> I want people don't have access to Internet, except one hour twice a day
> with only some urls.listed in a file.I use the ACL type "time" and
> "url_regex" but it doesn't work.
Please elaborate on "it doesn't work".
Do you mean
On Thursday 12 November 2015 at 18:31:10, Benjamin Reed wrote:
> I'm trying to set up a CDN-like frontend to our (bandwidth-constrained)
> master package repository. Everything seems to be working (including
> memory cache hits) except for some reason it does not seem to be
> caching/keeping larg
On Thursday 12 November 2015 at 15:55:10, Magic Link wrote:
> I want people don't have access to Internet, except one hour twice a day
> with only some urls.listed in a file
On 14/11/2015 11:23 p.m., Magic Link wrote:
> I 've made a mistake so what i want is users can access Internet, except
> t
On Sunday 15 November 2015 at 15:53:56, Jens Kallup wrote:
> Hello,
>
> Now, I use the follow script.
> But, it ends in endless search - web browser site search.
>
> #!/usr/bin/python
>
> import sys
> import time
>
> def grant ():
>sys.stdout.write( 'OK\n' )
>
> def deny ():
>
On Monday 16 November 2015 at 10:35:39, Patrick Chemla wrote:
> Hi,
>
> I am using squid for years, maybe with basic features, and I have a
> problem today with an app where I need to manage multiple backends, be
> sure that a user is always sent to the same one because the app writes
> on local
sts to identify a session / user?
Without knowing what application you're dealing with, we can't guess this for
ourselves.
Regards,
Antony.
> On 16/11/2015 11:41, Antony Stone wrote:
> > On Monday 16 November 2015 at 10:35:39, Patrick Chemla wrote:
> >> Hi,
> >
s/trunk/mod/mod_proxy_balancer.html
https://opensourcehacker.com/2011/04/15/sticky/
Regards,
Antony.
> On 16/11/2015 12:49, Antony Stone wrote:
> > On Monday 16 November 2015 at 11:32:31, Patrick Chemla wrote:
> >> I am doing load balancing as sourcehash, so on IP source.
>
> 16.11.15 20:49, Tecnología CHARNE.NET пишет:
> > Hello!
> >
> > I'm configuring delay pools on squid 3.5
> >
> > I don't understand online doc
> > [http://www.squid-cache.org/Versions/v3/3.5/cfgman/delay_parameters.html]
> > about delay_parameters
> >
> >
> > "Note that 8 x 32000 KByte/se
On Wednesday 18 November 2015 at 11:45:52, Mohammad Asif wrote:
> I am having problem configuring mutual authentication with squid server.
What problem are you having?
> Can you please tell me which squid server version support mutual
> authentication and what is procedure to enable it.
What ex
On Saturday 21 November 2015 at 17:02:56, Ahmad Alzaeem wrote:
> Hi Guys I have a squid runnng in intercept mode
Okay...
> I have a dns to resolve all the websites to the ip of proxy
Which instructions / documentation did you follow saying that was a good idea?
> I want the proxy to be able to
On Tuesday 24 November 2015 at 12:22:40, Ahmad Alzaeem wrote:
> Hi Devs ,
>
> I have a server that send to squid http/https with wrong destination ips
It has already been recommended that you fix your DNS so that it works
correctly / normally.
> So assume I want to open google
>
> The reques
om: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On
> Behalf Of Antony Stone Sent: Tuesday, November 24, 2015 2:42 PM
> To: squid-users@lists.squid-cache.org
> Subject: Re: [squid-users] TCP-MISS 503 for wrong destination ip
>
> On Tuesday 24 November 2015 at 12:22:4
On Tuesday 24 November 2015 at 13:34:51, Ahmad Alzaeem wrote:
> Well , what I have done is :
>
> I configured squid http_port xx and http_port xxy intercept
>
> And uses iptables to redirect http & https to squid ports
1. Have you fixed DNS so that clients are now resolving the correct addresse
On Tuesday 24 November 2015 at 14:31:15, Ahmad Alzaeem wrote:
> The DNS is not broken , it will resolve some websites to ip address of
> squid and other websites will rslve to other ip
That sounds pretty broken to me (unless the Squid machine really is the web
server for those sites whose hostna
On Tuesday 24 November 2015 at 18:58:01, Benjamin Reed wrote:
> Any idea how my X-Cache, X-Cache-Lookup, and Via: headers are getting
> messed up on my accelerator configuration?
>
> Here's the output from a sample HEAD request:
>
> http://paste.opennms.eu/?26c282e7abba631e#oqU/8pAmAUXHhMXPHhr9v
On Thursday 26 November 2015 at 13:18:46, Funke, Martin wrote:
> Hello list,
>
> is there a way to block the access to the google picture search?
> https://www.google.de/imghp?hl=de
I'm going to stick my neck out and say "no", because there are just too many
ways of achieving the same result (i
On Thursday 26 November 2015 at 15:20:12, Ralf Hildebrandt wrote:
> Is it possible to somehow log the user agent in squid? Our goal is to
> find old/outdated versions of Windows and IE.
See http://www.squid-cache.org/Doc/config/logformat/ - the very last example at
the bottom shows User Agent be
On Monday 30 November 2015 at 18:53:54, Bart Spedden wrote:
> I can successfully connect as long as I don't use squid for either 1 way or
> 2 way TLS connections. I've also successfully connect via curl. So, I feel
> like the site's certs are working well. I could be totally off base here
> but my
On Monday 30 November 2015 at 19:00:14, Jens Kallup wrote:
> Hello,
>
> I have try a "url_rewrite_program" that should redirect a page,
> that content is filtered / changed.
> I add 2 lines to config:
>
> url_rewrite_program /sap/squid/rewrite.pl
> #deny_info http://www.freenet.de !mysql_blocker
On Wednesday 02 December 2015 at 07:07:09, vivek singh wrote:
> we are facing problem while users trying to upload some attachments it
> fails using linux proxy, while at the same time if they switch to windows
> proxy attachment uploaded succesfully.
> I am using squid 3.5 version onbot
On Wednesday 02 December 2015 at 15:27:24, supergeorge wrote:
> is their a logformat i can use that displays time logs in actual time?
http://www.squid-cache.org/Doc/config/logformat/ - see the section "Time
related format codes".
Antony.
--
This sentence contains exacly three erors.
On Thursday 03 December 2015 at 13:17:24, massimo.s...@asl.bergamo.it wrote:
> http://www.squid-cache.org/Doc/config/http_access/
>
> http_access allow localhost manager
>
> http://wiki.squid-cache.org/Features/CacheManager
>
> Cache manager Access Control in squid.conf
>
On Thursday 03 December 2015 at 13:34:32, GoGo net wrote:
> As I do NOT want to add extra cost to squid, I will stay with the script
> and try to optimise it.
What do you mean by "cost"?
Antony.
> > On Dec 3, 2015, at 8:27 PM, Amos Jeffries wrote:
> >
> > On 4/12/2015 1:14 a.m., GoGo net wro
On Sunday 13 Dec 2015 at 12:31, Markus wrote:
> I'm trying to protect my internal network against unconsciously
> downloading executable files (like malware). All users traffic pass
> through our Squid proxy.
> So, tell me guys, if there is any solution for this?
http://www.techrepublic.com/blog
On Sunday 13 Dec 2015 at 15:25, Marcio Demetrio Bacci wrote:
> Hi,
>
> What is the best way to free access to a site without going through of the
> Squid Proxy?
Add an exception to the browser proxy configuration - generally most easily
done using a PAC file:
if (dnsDomainIs(host, ".my.bank.co
On Tuesday 15 Dec 2015 at 11:39, Roberto Carna wrote:
> Dear, we have a Squid3 as reverse proxy with default configuration.
>
> We have a domain pointed to a web server. In this server the user
> session expiration is setup in 3 hs, but each 15 minutes the session
> expires.
What is your definit
On Tuesday 15 Dec 2015 at 13:02, Roberto Carna wrote:
> Development team say that a session is conformed by cookies, and the
> expiration time defined is 3 hours.
Squid will not change the content of the cookies (although it's possible it
could remove them, depending on the configuration).
Does
On Monday 28 December 2015 at 16:22:58, joru.pacs wrote:
> Hi!
>
> I am trying to set up squid to be a whitelist proxy which should be able to
> filter both HTTP and HTTPS URLs.
> I have already tried using SSL Bump
How? What squid.conf did you use? What results did you get? What didn't
wor
On Friday 01 January 2016 at 13:50:20, Billy.Zheng(zw963) wrote:
> Hi, all, I deploy a new Squid Server in my VPS server.
> And i set a squid MAC address ACL, like following:
>
> it seem like:
> >> acl advance_users arp ??:??:??:??:??:??
> >> http_access allow advance_users
>
> But it not work.
On Friday 01 January 2016 at 14:21:38, Billy.Zheng(zw963) wrote:
> $ squid -v
> Squid Cache: Version 3.3.8
> configure options:
> '--enable-eui'
That will do MAC address matching for you.
Please describe the network setup :)
Antony.
--
You can tell that the day just isn't going right when
On Friday 01 January 2016 at 15:54:50, Matus UHLAR - fantomas wrote:
> On 01.01.16 20:50, Billy.Zheng(zw963) wrote:
> >Hi, all, I deploy a new Squid Server in my VPS server.
> >And i set a squid MAC address ACL, like following:
> >
> >it seem like:
> >>> acl advance_users arp ??:??:??:??:??:??
> >
On Friday 01 January 2016 at 16:03:00, Billy.Zheng(zw963) wrote:
> My config is a little longer, But it worked fine in recent months.
Please:
1. Describe your network setup - specifically:
- what is the client-facing IP address of your Squid server?
- what network range are the clients in?
2.
On Sunday 03 January 2016 at 00:46:39, Christian Kunkel wrote:
> Hey guys,
>
> is there any way i can do some traffic shaping with squid?
Yes, but it's nowhere near as good as doing it with IP tools on the underlying
O/S.
> Its a bit complicated in my case. I can not shape through user ip beca
On Sunday 03 January 2016 at 09:42:21, Christian Kunkel wrote:
> Am 03.01.2016 um 01:14 schrieb Antony Stone;
> > >> On Sunday 03 January 2016 at 00:46:39, Christian Kunkel wrote:
> >>
> >> Hey guys,
> >>
> >> is there any way i can do some
On Sunday 03 January 2016 at 12:35:10, Christian Kunkel wrote:
> > Am 03.01.2016 um 10:13 schrieb Antony Stone:
> >
> > How many users do you have?
>
> i wanted to put about 200-500 users on a server. is that possible?
Certainly no problem for Squid, and I guess you cou
On Sunday 03 January 2016 at 20:41:51, Daniel Calin wrote:
> Scenario:
> External IP: 1.1.1.
> Website: www.domain1.com
> Website: www.domain2.com
> External DNS for both sites points to 1.1.1.1
> www.domain1.com is hosted on internal LAN IP 2.2.2.1
> www.domain2.com is hosted on the internal LAN
On Tuesday 05 January 2016 at 20:30:06, Nir Krakowski wrote:
> how can you combine accel proxy with ssl-bump ?
Have you looked at http://www.squid-cache.org/Doc/config/http_port/ ?
You put the certificate (which would normally be on the web server) on the
Squid server (because that's the machin
On Tuesday 05 January 2016 at 21:03:09, Nir Krakowski wrote:
> eg: /etc/hosts
> mail.google.com 10.0.0.250
> as for the ssl certificate, I hope to self sign with a made up root CA.
What are you trying to achieve with this setup,
and have you checked whether it is legal in your country / organisa
On Wednesday 06 January 2016 at 10:36:20, dbrb2 wrote:
> I am trying to build squid on Mint 17.3
> kernel 3.19.0-32 geeric
> Squid 3.5.12
> when I try to proxy an SSL connection, the squid logs show:
>
> ERROR: NAT/TPROXY lookup failed to locate original IPs on local=
> remote=yyy
>
On Thursday 14 January 2016 at 13:21:57, jean-yves boisiaud wrote:
> My squid box is not on a firewall, but on a dedicated server in the DMZ,
> between the internal and the external firewall.
> On the internal firewall, port 80 is redirected to the squid box port 3128,
> for transparent proxying.
On Thursday 14 January 2016 at 18:25:16, Robert Plamondon wrote:
> > You *must* perform the NAT on the machine Squid is running on for
> > intercept mode to work.
> >
> > Doing it on any other router along the way will not work.
>
> Unless I'm missing something, I'd phrase this differently: the
On Friday 15 January 2016 at 17:04:37, Aismel wrote:
> Hi guys,
>
> I follow this steps and not work i dont know why
>
> https://linuxstep.wordpress.com/step-by-step-configuration-squid-to-block-s
> t reaming-media-online/
>
> I try using the Zentyal software disabling all video and flash opti
On Sunday 17 January 2016 at 08:55:56, behrad eslami wrote:
> Hi
> Some part of our traffic is asymmatric (send and receive had different
> route)Is squid cat work on one direct (only on receive)?
If you're asking whether Squid will cache and/or proxy replies from webservers
where it hasn't seen
he server pass through Squid?
Antony.
> On Sunday, January 17, 2016 12:21 PM, Antony Stone wrote:
>
> On Sunday 17 January 2016 at 08:55:56, behrad eslami wrote:
> > Hi
> > Some part of our traffic is asymmatric (send and receive had different
> > route)Is squid cat
both
just plain routers and are not doing NAT).
However, you can not expect Squid to do anything useful if it sees replies but
no requests.
> On Monday, January 18, 2016 1:41 PM, Antony Stone
> wrote:
>
> On Monday 18 January 2016 at 10:56:27, behrad eslami wrote:
> >
On Monday 18 January 2016 at 17:55:51, romain noyer wrote:
> Is there a way to get all the messages a squid server can create and send
> to a syslog?
See the "syslog" method of:
http://www.squid-cache.org/Doc/config/access_log/
http://www.squid-cache.org/Doc/config/cache_store_log/
> The goal w
On Monday 18 January 2016 at 18:22:24, Lucía Guevgeozian wrote:
> acl good_facebook urlpath_regex groups
> acl banned_sites url_regex "/etc/squid/config/banned_sites"
>
> inside banned_sites I have the word facebook
>
> http_access allow good_facebook
> http_access deny banned_sites
Okay, so yo
s
sorted out), no?
> 18.01.16 23:29, Antony Stone пишет:
> > On Monday 18 January 2016 at 18:22:24, Lucía Guevgeozian wrote:
> >> acl good_facebook urlpath_regex groups
> >> acl banned_sites url_regex "/etc/squid/config/banned_sites"
> >
On Monday 18 January 2016 at 19:43:56, Jorgeley Junior wrote:
> I didn't test this, but i think it works better:
> *http_access deny banned_sites !good_facebook*
> is it works?
That would work, yes, but:
- it's not as obvious as putting two lines one after the other
- this is only an exampl
e :) ).
kind regards,
On Mon, Jan 18, 2016 at 6:16 PM, Antony Stone wrote:
> On Monday 18 January 2016 at 17:55:51, romain noyer wrote:
>
> > Is there a way to get all the messages a squid server can create and send
> > to a syslog?
>
> See the "syslog" method
On Wednesday 03 February 2016 at 01:04:37, user wrote:
> When client sends a http request (say. http://www.abc123.com, I would like
> my squid proxy to make this request into https (https://www.abc123.com)
> Any help/pointers is appreciated.
http://www.squid-cache.org/Doc/config/url_rewrite_prog
#x27;.
The new URL is fetched directly by Squid and returned to
the client as the response to its request.
> On Tuesday, February 2, 2016 4:10 PM, Antony Stone wrote:
>
> On Wednesday 03 February 2016 at 01:04:37, user wrote:
> > When client sends a ht
On Wednesday 03 February 2016 at 14:54:42, Alleshouse, Dale (NonEmp) wrote:
> Developers share a root login on these machines.
So, they're all equally trusted with all your data, then.
> We need to authenticate through the corporate proxy to hit the internet.
> We are using squid to do this enc
On Monday 08 February 2016 at 20:48:01, Kinkie wrote:
> Hi,
> I can't find any reference about this problem in earlier mails, I
> must have missed it.
The URL linked in the footer gives the original posting, not yet published to
the list:
http://squid-web-proxy-cache.1019090.n4.nabble.com/Squ
On Sunday 21 February 2016 at 11:34:44, HackXBack wrote:
> Bump links by extension files
> and not by servername
I'm still not at all sure I understand what you mean.
Please give one example of what you want to do and explain why it would be an
improvement over the standard method.
Thanks,
A
On Sunday 21 February 2016 at 12:56:03, secoonder wrote:
> My Firewall eth0: 192.168.1.180
> eth1:192.168.2.180
I'm guessing that eth0 is your route to the Internet, and eth1 points towards
the clients trying to use Squid?
> ip_forwarding enable and more /proc/sys/net/ipv4/ip_
On Sunday 21 February 2016 at 19:51:05, turgut kalfaoğlu wrote:
> Hi.. On my LAN's squid server, I redirect port 80 to local squid,
>iptables -t nat -A PREROUTING -s 192.168.2.0/24 -p tcp --dport 80 -j
> REDIRECT --to-port 3128
>
> and the squid speeds up and anonymizes the requests from the
On Sunday 21 February 2016 at 20:10:59, turgut kalfaoğlu wrote:
> Thank you for your reply; there is nothing about SSL neither in iptables
> nor in squid settings now.
> It only intercepts port 80 requests..
So, does this mean that all browsers and similar clients are unable to access
any HTTPS
On Tuesday 23 February 2016 at 13:57:52, Chris Horry wrote:
> On 2/23/2016 00:01, Darren wrote:
> > Hi all
> >
> > AI am putting together a config to allow the kids to access
> > selected videos in YouTube from a page of links on a local server.
>
> You might want to look into a web filter like
On Monday 27 October 2014 at 14:32:39 (EU time), Frantisek Hanzlik wrote:
> Please, what is best way for determining who squid clients (their
> PC IP addresses) have which downloads active?
> I want it to determine which clients burden our slow internet line.
> Examining 'access.log' does not help
On Wednesday 05 November 2014 at 10:39:19 (EU time), navari.lore...@gmail.com
wrote:
> I'm configuring a Squid Web Proxy Cache and I apply the deny policy to some
> sites. This is the problem:
>
> when people access sites with GET they have the right html error page
> ERR_ACCES_DENIED
> (LOG =
On Monday 10 November 2014 at 17:12:23 (EU time), Efe wrote:
> acl myrule dstdom_regex "/etc/squid3/domainblock.txt"
> http_access deny myrule
>
> where domainblock.txt is
>
> someaddress.com
> blockthis.net
As Amos said, use dstdomain instead of dstdom_regex.
> Now whenever i
On Thursday 13 November 2014 at 19:50:36 (EU time), Hector Chan wrote:
> Hi,
>
> Does anyone have any idea how to setup squid (reverse proxy) behind a
> forward proxy ?
1. Set up Squid as a forward proxy on machine A for the clients.
2. Set up Squid as a reverse proxy on machine B for the serve
On Monday 17 November 2014 at 22:01:29 (EU time), Alexander Samad wrote:
> Why haproxy instead of a pacemaker. I have 2 dmz boxes I setup in a
> cluster. so I have 2 vips for the squid proxies. and dns setup to
> round robin to the vip's.
>
> I see sort of even distribution but I don't have a sin
On Friday 06 February 2015 at 22:54:54 (EU time), Luis Miguel Silva wrote:
> As I started playing around with transparent ssl proxying, I learned that
> Chrome uses an alternate communication (UDP based) protocol called QUIC.
I'd never heard of QUIC, and http://en.wikipedia.org/wiki/QUIC doesn't
On Wednesday 11 Feb 2015 at 11:43, Yuri Voinov wrote:
> Thanks, Captain :)))
>
> Eliezer, we not so stupid. :)
>
> This is obvious for System Administrator, isn't it?
You never know who may come across this "recommendation" in the mailing list
archives in months or years to com
On Thursday 12 Feb 2015 at 10:52, naser sonbaty wrote:
> Hi guys,
>
> I need your help with setting squid 3.5.1 with intercept.
> My topolgy Clients PC <--> Router PC <--> SquidPC
Where is the Internet connection in the above diagram?
> Router:
> Send trafic from 80 to squid 192.168.15.2:3129
On Thursday 12 Feb 2015 at 11:01, Priya Agarwal wrote:
> My permissions are set correct.
Please show us the output of:
ls -al /var/logs/access.log
> 2015/02/12 11:44:06| Logfile: opening log daemon:/var/logs/access.log
> 2015/02/12 11:44:06| Logfile Daemon: opening log /var/logs/access.log
> 20
ing on the router to do it.
> On Thu, Feb 12, 2015 at 11:58 AM, Antony Stone wrote:
> >
> > Have you configured the router to redirect port 80 traffic from the
> > Client PC to Squid 3129, or have you configured it to redirect *all* port
> > 80 traffic (including fro
On Friday 13 Feb 2015 at 03:53, Priya Agarwal wrote:
> These are the output:
>
> root@t4240qds:~# /usr/sbin/squid ls -al /var/logs/access.log
Thanks, but I asked for the output of
ls -al /var/logs/access.log
There is no squid command in there.
All I want to see is that this file (and
On Friday 13 Feb 2015 at 09:12, Antony Stone wrote:
> On Friday 13 Feb 2015 at 03:53, Priya Agarwal wrote:
> > These are the output:
> >
> > root@t4240qds:~# /usr/sbin/squid ls -al /var/logs/access.log
>
> Thanks, but I asked for the output of
>
> ls -a
On Friday 13 Feb 2015 at 11:06, Priya Agarwal wrote:
> So sorry. In squid.conf I had done cache_effective_user to nobody and set
> permissions of /var and /usr to nobody. So those are the permissions.
Are you saying that /var is owned by 'nobody'?
That sounds like a problem for the system to me.
On Monday 16 Feb 2015 at 22:54, snakeeyes wrote:
> Hi ,
>
> I have many account from same provider and I would like to use those
> accounts as round robin and each request has different IP as possible
How many client machines are you trying to distribute in this way? Your
example suggests you'
On Monday 16 Feb 2015 at 16:20, Yuri Voinov wrote:
> root @ cthulhu / # ps axuf
> usage: ps [ -aAdeflcjLPyZ ] [ -o format ] [ -t termlist ]
> [ -u userlist ] [ -U userlist ] [ -G grouplist ]
> [ -p proclist ] [ -g pgrplist ] [ -s sidlist ] [ -z zonelist ]
> May be, you want to kno
On Tuesday 17 Feb 2015 at 11:00, Marcus Kool wrote:
> On 02/16/2015 11:43 PM, Amos Jeffries wrote:
> > PS. Marcus, perhaps you should go on search around to find distro
> > maintainers who are publishing SG and convince them to replace the
> > defaults with ufdbguard. I have to do that periodicall
On Sunday 01 March 2015 at 19:17:22 (EU time), Yuri Voinov wrote:
> 02.03.15 0:07, Julianne Bielski пишет:
> >
> > http_port 443 ssl-bump
> > cert=/usr/local/squid3/etc/site_priv+pub.pem
>
> http_port 3128 intercept
> https_port 3129 intercept ssl-bump generate-host-certificates=on
> dynamic_cer
On Friday 06 March 2015 at 14:03:28 (EU time), Monah Baki wrote:
> Hi All,
>
> As an addition to my yesterday's issue,
>
> Tail -f cache.log, I am getting the following:
>
> 015/03/06 13:54:02| WARNING: Forwarding loop detected for:
> Any ideas?
Is your NAT rule catching the HTTP requests fro
On Friday 06 March 2015 at 14:50:50 (EU time), Monah Baki wrote:
> http://wiki.squid-cache.org/ConfigExamples/Intercept/FreeBsdPf
>
> So something else is missing?
Can you run a packet sniffer on the proxy, to see what packets come in (noting
the MAC address of the previous hop), what packets g
On Tuesday 10 March 2015 at 13:29:15 (EU time), Klavs Klavsen wrote:
> Hi,
>
> I just setup a squid trying to get it to work in intercept mode.
Is it working correctly in non-intercept mode? It can be helpful to check the
simple setup first, and then try something more complex...
> When I acc
On Tuesday 10 March 2015 at 15:09:14 (EU time), Klavs Klavsen wrote:
> so intercept mode is only used, if you actually do the nat'ing on the
> same server as squid is running..
You can do the NATting somewhere else; the important point is that the traffic
must be NATted, not direct.
> ie. I sho
On Tuesday 10 March 2015 at 15:32:25 (EU time), Amos Jeffries wrote:
> On 11/03/2015 3:18 a.m., Antony Stone wrote:
> > On Tuesday 10 March 2015 at 15:09:14 (EU time), Klavs Klavsen wrote:
> >> so intercept mode is only used, if you actually do the nat'ing on the
>
On Thursday 12 March 2015 at 12:46:36 (EU time), James Harper wrote:
> > Ah. That is a bug then. The -i bit is not supposed to be treated as a
> > pattern.
>
> Even when I put it in []'s? I think the mistake was mine.
There was no [] in your original posting of your conf file...
On Thursday 12
On Friday 13 March 2015 at 17:47:44 (EU time), Monah Baki wrote:
> acl localnet src 10.0.0.0/8# RFC1918 possible internal network
> acl localnet src 172.16.0.0/12# RFC1918 possible internal network
> acl localnet src 192.168.0.0/16# RFC1918 possible internal network
> acl localnet src
On Friday 17 April 2015 at 18:53:10 (EU time), Jonathan Krautter wrote:
> Is there any way to have squid listen on an additional port and then
> forward any traffic on that port to a specific address? Example:
>
> proxy listens on port 4456
> proxy forwards all traffic received on port 4456 to 7
On Friday 01 May 2015 at 15:18:47 (EU time), Hierony Manurung wrote:
> I want to clear my logs file, so that they will be fresh.
> How can I do this in safe way?
Use the rotate facility.
http://wiki.squid-cache.org/SquidFaq/SquidLogs
Antony.
--
Wanted: telepath. You know where to apply.
501 - 592 of 592 matches
Mail list logo