Re: [squid-users] Can't find file

2015-10-30 Thread Antony Stone
ser at the IP address of the server? What is the output of the following command? ls -al /etc/apache2 Regards, Antony. > -Original Message- > From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On > Behalf Of Antony Stone Sent: Friday, October 30,

Re: [squid-users] Can't find file

2015-10-30 Thread Antony Stone
On Friday 30 October 2015 at 16:18:16, dol...@ihcrc.org wrote: > Antony, > > I get the Apache2 Debian Default page when I got the address of the server. Excellent. > Here are the results of the command: > > root@srv-proxy:/usr/local/src/negotiate_wrapper-1.0.1# ls -al /etc/apache2 > total 96 >

Re: [squid-users] dns_ttl positive/negative Squid 3.5.10

2015-11-02 Thread Antony Stone
On Monday 02 November 2015 at 16:39:45, FredB wrote: > I want to reduce DNS requests, so I'm trying with > > positive_dns_ttl 6 hours > And > negative_dns_ttl 4 hours > If I try a false domain like test.google.com there is a response from my > DNS Servail, so ok But if I retry after a short time

Re: [squid-users] HTTP 503 error in squid proxy server

2015-11-07 Thread Antony Stone
On Saturday 07 November 2015 at 09:30:04, 聡司蛭田 wrote: > Dear > > I have question about HTTPS communication through Squid Proxy Server. > > HTTP 503 error frequency occurs. Does it also occur if you point your browser directly at the site, not via Squid? > 10.xx.xx.xx - - [01/Nov/2015:03:44:33

[squid-users] Fwd: Re: HTTP 503 error in squid proxy server

2015-11-07 Thread Antony Stone
This reply came to my private address. Forwarding to the list. -- Forwarded Message Starts -- Subject: Re: [squid-users] HTTP 503 error in squid proxy server Date: Saturday 07 November 2015 10:43:14 From: 聡司蛭田 To: Antony Stone > Dear Thank you for reply. Squid version

Re: [squid-users] Fwd: Re: HTTP 503 error in squid proxy server

2015-11-07 Thread Antony Stone
On Saturday 07 November 2015 at 12:48:09, Antony Stone wrote: > This reply came to my private address. > > Forwarding to the list. > > -- Forwarded Message Starts -- > > Subject: Re: [squid-users] HTTP 503 error in squid proxy server > Date: Saturday 0

Re: [squid-users] File rotation problem

2015-11-11 Thread Antony Stone
On Wednesday 11 November 2015 at 13:25:56, Verónica Ovando wrote: > Hi. I need to set up correctly my logfiles rotation. I think http://serverfault.com/questions/391538/logrotate-daily-and-size might help you. > I am using logrotate with this configuration in /etc/logrotate.d/squid3: > > /var/

Re: [squid-users] ACL and http_access

2015-11-12 Thread Antony Stone
On Thursday 12 November 2015 at 15:55:10, Magic Link wrote: > Hi, > I want people don't have access to Internet, except one hour twice a day > with only some urls.listed in a file.I use the ACL type "time" and > "url_regex" but it doesn't work. Please elaborate on "it doesn't work". Do you mean

Re: [squid-users] Large Files Not Caching

2015-11-12 Thread Antony Stone
On Thursday 12 November 2015 at 18:31:10, Benjamin Reed wrote: > I'm trying to set up a CDN-like frontend to our (bandwidth-constrained) > master package repository. Everything seems to be working (including > memory cache hits) except for some reason it does not seem to be > caching/keeping larg

Re: [squid-users] ACL and http_access

2015-11-15 Thread Antony Stone
On Thursday 12 November 2015 at 15:55:10, Magic Link wrote: > I want people don't have access to Internet, except one hour twice a day > with only some urls.listed in a file On 14/11/2015 11:23 p.m., Magic Link wrote: > I 've made a mistake so what i want is users can access Internet, except > t

Re: [squid-users] squid3.4 - MySQL, PHP script - block websites

2015-11-15 Thread Antony Stone
On Sunday 15 November 2015 at 15:53:56, Jens Kallup wrote: > Hello, > > Now, I use the follow script. > But, it ends in endless search - web browser site search. > > #!/usr/bin/python > > import sys > import time > > def grant (): >sys.stdout.write( 'OK\n' ) > > def deny (): >

Re: [squid-users] affinity session load balancing

2015-11-16 Thread Antony Stone
On Monday 16 November 2015 at 10:35:39, Patrick Chemla wrote: > Hi, > > I am using squid for years, maybe with basic features, and I have a > problem today with an app where I need to manage multiple backends, be > sure that a user is always sent to the same one because the app writes > on local

Re: [squid-users] affinity session load balancing

2015-11-16 Thread Antony Stone
sts to identify a session / user? Without knowing what application you're dealing with, we can't guess this for ourselves. Regards, Antony. > On 16/11/2015 11:41, Antony Stone wrote: > > On Monday 16 November 2015 at 10:35:39, Patrick Chemla wrote: > >> Hi, > >

Re: [squid-users] affinity session load balancing

2015-11-16 Thread Antony Stone
s/trunk/mod/mod_proxy_balancer.html https://opensourcehacker.com/2011/04/15/sticky/ Regards, Antony. > On 16/11/2015 12:49, Antony Stone wrote: > > On Monday 16 November 2015 at 11:32:31, Patrick Chemla wrote: > >> I am doing load balancing as sourcehash, so on IP source. >

Re: [squid-users] Delay Pools Parameters

2015-11-16 Thread Antony Stone
> 16.11.15 20:49, Tecnología CHARNE.NET пишет: > > Hello! > > > > I'm configuring delay pools on squid 3.5 > > > > I don't understand online doc > > [http://www.squid-cache.org/Versions/v3/3.5/cfgman/delay_parameters.html] > > about delay_parameters > > > > > > "Note that 8 x 32000 KByte/se

Re: [squid-users] Mutual Authentication Support

2015-11-18 Thread Antony Stone
On Wednesday 18 November 2015 at 11:45:52, Mohammad Asif wrote: > I am having problem configuring mutual authentication with squid server. What problem are you having? > Can you please tell me which squid server version support mutual > authentication and what is procedure to enable it. What ex

Re: [squid-users] squid intercept mode fo http & https

2015-11-21 Thread Antony Stone
On Saturday 21 November 2015 at 17:02:56, Ahmad Alzaeem wrote: > Hi Guys I have a squid runnng in intercept mode Okay... > I have a dns to resolve all the websites to the ip of proxy Which instructions / documentation did you follow saying that was a good idea? > I want the proxy to be able to

Re: [squid-users] TCP-MISS 503 for wrong destination ip

2015-11-24 Thread Antony Stone
On Tuesday 24 November 2015 at 12:22:40, Ahmad Alzaeem wrote: > Hi Devs , > > I have a server that send to squid http/https with wrong destination ips It has already been recommended that you fix your DNS so that it works correctly / normally. > So assume I want to open google > > The reques

Re: [squid-users] TCP-MISS 503 for wrong destination ip

2015-11-24 Thread Antony Stone
om: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On > Behalf Of Antony Stone Sent: Tuesday, November 24, 2015 2:42 PM > To: squid-users@lists.squid-cache.org > Subject: Re: [squid-users] TCP-MISS 503 for wrong destination ip > > On Tuesday 24 November 2015 at 12:22:4

Re: [squid-users] TCP-MISS 503 for wrong destination ip

2015-11-24 Thread Antony Stone
On Tuesday 24 November 2015 at 13:34:51, Ahmad Alzaeem wrote: > Well , what I have done is : > > I configured squid http_port xx and http_port xxy intercept > > And uses iptables to redirect http & https to squid ports 1. Have you fixed DNS so that clients are now resolving the correct addresse

Re: [squid-users] TCP-MISS 503 for wrong destination ip

2015-11-24 Thread Antony Stone
On Tuesday 24 November 2015 at 14:31:15, Ahmad Alzaeem wrote: > The DNS is not broken , it will resolve some websites to ip address of > squid and other websites will rslve to other ip That sounds pretty broken to me (unless the Squid machine really is the web server for those sites whose hostna

Re: [squid-users] Duplicate Headers

2015-11-24 Thread Antony Stone
On Tuesday 24 November 2015 at 18:58:01, Benjamin Reed wrote: > Any idea how my X-Cache, X-Cache-Lookup, and Via: headers are getting > messed up on my accelerator configuration? > > Here's the output from a sample HEAD request: > > http://paste.opennms.eu/?26c282e7abba631e#oqU/8pAmAUXHhMXPHhr9v

Re: [squid-users] Block google pictures

2015-11-26 Thread Antony Stone
On Thursday 26 November 2015 at 13:18:46, Funke, Martin wrote: > Hello list, > > is there a way to block the access to the google picture search? > https://www.google.de/imghp?hl=de I'm going to stick my neck out and say "no", because there are just too many ways of achieving the same result (i

Re: [squid-users] Log user agent in squid?

2015-11-26 Thread Antony Stone
On Thursday 26 November 2015 at 15:20:12, Ralf Hildebrandt wrote: > Is it possible to somehow log the user agent in squid? Our goal is to > find old/outdated versions of Windows and IE. See http://www.squid-cache.org/Doc/config/logformat/ - the very last example at the bottom shows User Agent be

Re: [squid-users] 2 way SSL on a non standard SSL Port

2015-11-30 Thread Antony Stone
On Monday 30 November 2015 at 18:53:54, Bart Spedden wrote: > I can successfully connect as long as I don't use squid for either 1 way or > 2 way TLS connections. I've also successfully connect via curl. So, I feel > like the site's certs are working well. I could be totally off base here > but my

Re: [squid-users] deny_info / url_rewrite_program

2015-11-30 Thread Antony Stone
On Monday 30 November 2015 at 19:00:14, Jens Kallup wrote: > Hello, > > I have try a "url_rewrite_program" that should redirect a page, > that content is filtered / changed. > I add 2 lines to config: > > url_rewrite_program /sap/squid/rewrite.pl > #deny_info http://www.freenet.de !mysql_blocker

Re: [squid-users] mail upload problem

2015-12-02 Thread Antony Stone
On Wednesday 02 December 2015 at 07:07:09, vivek singh wrote: > we are facing problem while users trying to upload some attachments it > fails using linux proxy, while at the same time if they switch to windows > proxy attachment uploaded succesfully. > I am using squid 3.5 version onbot

Re: [squid-users] logformat in normal GMT time?

2015-12-02 Thread Antony Stone
On Wednesday 02 December 2015 at 15:27:24, supergeorge wrote: > is their a logformat i can use that displays time logs in actual time? http://www.squid-cache.org/Doc/config/logformat/ - see the section "Time related format codes". Antony. -- This sentence contains exacly three erors.

Re: [squid-users] squid docs, http_access manager : mismatch

2015-12-03 Thread Antony Stone
On Thursday 03 December 2015 at 13:17:24, massimo.s...@asl.bergamo.it wrote: > http://www.squid-cache.org/Doc/config/http_access/ > > http_access allow localhost manager > > http://wiki.squid-cache.org/Features/CacheManager > > Cache manager Access Control in squid.conf >

Re: [squid-users] How to limit user traffic quota?

2015-12-03 Thread Antony Stone
On Thursday 03 December 2015 at 13:34:32, GoGo net wrote: > As I do NOT want to add extra cost to squid, I will stay with the script > and try to optimise it. What do you mean by "cost"? Antony. > > On Dec 3, 2015, at 8:27 PM, Amos Jeffries wrote: > > > > On 4/12/2015 1:14 a.m., GoGo net wro

Re: [squid-users] blocking certain file types by content

2015-12-13 Thread Antony Stone
On Sunday 13 Dec 2015 at 12:31, Markus wrote: > I'm trying to protect my internal network against unconsciously > downloading executable files (like malware). All users traffic pass > through our Squid proxy. > So, tell me guys, if there is any solution for this? http://www.techrepublic.com/blog

Re: [squid-users] Direct Access without Proxy

2015-12-13 Thread Antony Stone
On Sunday 13 Dec 2015 at 15:25, Marcio Demetrio Bacci wrote: > Hi, > > What is the best way to free access to a site without going through of the > Squid Proxy? Add an exception to the browser proxy configuration - generally most easily done using a PAC file: if (dnsDomainIs(host, ".my.bank.co

Re: [squid-users] Reverse proxy: session expired in 15 minutes

2015-12-15 Thread Antony Stone
On Tuesday 15 Dec 2015 at 11:39, Roberto Carna wrote: > Dear, we have a Squid3 as reverse proxy with default configuration. > > We have a domain pointed to a web server. In this server the user > session expiration is setup in 3 hs, but each 15 minutes the session > expires. What is your definit

Re: [squid-users] Reverse proxy: session expired in 15 minutes

2015-12-15 Thread Antony Stone
On Tuesday 15 Dec 2015 at 13:02, Roberto Carna wrote: > Development team say that a session is conformed by cookies, and the > expiration time defined is 3 hours. Squid will not change the content of the cookies (although it's possible it could remove them, depending on the configuration). Does

Re: [squid-users] Squid proxy whitelisting with HTTPS URL filtering

2015-12-28 Thread Antony Stone
On Monday 28 December 2015 at 16:22:58, joru.pacs wrote: > Hi! > > I am trying to set up squid to be a whitelist proxy which should be able to > filter both HTTP and HTTPS URLs. > I have already tried using SSL Bump How? What squid.conf did you use? What results did you get? What didn't wor

Re: [squid-users] Squid MAC address ACL is not worked, and how to get the MAC address Squid see?

2016-01-01 Thread Antony Stone
On Friday 01 January 2016 at 13:50:20, Billy.Zheng(zw963) wrote: > Hi, all, I deploy a new Squid Server in my VPS server. > And i set a squid MAC address ACL, like following: > > it seem like: > >> acl advance_users arp ??:??:??:??:??:?? > >> http_access allow advance_users > > But it not work.

Re: [squid-users] Squid MAC address ACL is not worked, and how to get the MAC address Squid see?

2016-01-01 Thread Antony Stone
On Friday 01 January 2016 at 14:21:38, Billy.Zheng(zw963) wrote: > $ squid -v > Squid Cache: Version 3.3.8 > configure options: > '--enable-eui' That will do MAC address matching for you. Please describe the network setup :) Antony. -- You can tell that the day just isn't going right when

Re: [squid-users] Squid MAC address ACL is not worked, and how to get the MAC address Squid see?

2016-01-01 Thread Antony Stone
On Friday 01 January 2016 at 15:54:50, Matus UHLAR - fantomas wrote: > On 01.01.16 20:50, Billy.Zheng(zw963) wrote: > >Hi, all, I deploy a new Squid Server in my VPS server. > >And i set a squid MAC address ACL, like following: > > > >it seem like: > >>> acl advance_users arp ??:??:??:??:??:?? > >

Re: [squid-users] Squid MAC address ACL is not worked, and how to get the MAC address Squid see?

2016-01-01 Thread Antony Stone
On Friday 01 January 2016 at 16:03:00, Billy.Zheng(zw963) wrote: > My config is a little longer, But it worked fine in recent months. Please: 1. Describe your network setup - specifically: - what is the client-facing IP address of your Squid server? - what network range are the clients in? 2.

Re: [squid-users] Delay Pools or Traffic Shaping per port?!

2016-01-02 Thread Antony Stone
On Sunday 03 January 2016 at 00:46:39, Christian Kunkel wrote: > Hey guys, > > is there any way i can do some traffic shaping with squid? Yes, but it's nowhere near as good as doing it with IP tools on the underlying O/S. > Its a bit complicated in my case. I can not shape through user ip beca

Re: [squid-users] Delay Pools or Traffic Shaping per port?!

2016-01-03 Thread Antony Stone
On Sunday 03 January 2016 at 09:42:21, Christian Kunkel wrote: > Am 03.01.2016 um 01:14 schrieb Antony Stone; > > >> On Sunday 03 January 2016 at 00:46:39, Christian Kunkel wrote: > >> > >> Hey guys, > >> > >> is there any way i can do some

Re: [squid-users] Delay Pools or Traffic Shaping per port?!

2016-01-03 Thread Antony Stone
On Sunday 03 January 2016 at 12:35:10, Christian Kunkel wrote: > > Am 03.01.2016 um 10:13 schrieb Antony Stone: > > > > How many users do you have? > > i wanted to put about 200-500 users on a server. is that possible? Certainly no problem for Squid, and I guess you cou

Re: [squid-users] Question about redirect

2016-01-03 Thread Antony Stone
On Sunday 03 January 2016 at 20:41:51, Daniel Calin wrote: > Scenario: > External IP: 1.1.1. > Website: www.domain1.com > Website: www.domain2.com > External DNS for both sites points to 1.1.1.1 > www.domain1.com is hosted on internal LAN IP 2.2.2.1 > www.domain2.com is hosted on the internal LAN

Re: [squid-users] ssl-bump and accel

2016-01-05 Thread Antony Stone
On Tuesday 05 January 2016 at 20:30:06, Nir Krakowski wrote: > how can you combine accel proxy with ssl-bump ? Have you looked at http://www.squid-cache.org/Doc/config/http_port/ ? You put the certificate (which would normally be on the web server) on the Squid server (because that's the machin

Re: [squid-users] ssl-bump and accel

2016-01-05 Thread Antony Stone
On Tuesday 05 January 2016 at 21:03:09, Nir Krakowski wrote: > eg: /etc/hosts > mail.google.com 10.0.0.250 > as for the ssl certificate, I hope to self sign with a made up root CA. What are you trying to achieve with this setup, and have you checked whether it is legal in your country / organisa

Re: [squid-users] NAT/TPROXY lookup failed to locate original IPs

2016-01-06 Thread Antony Stone
On Wednesday 06 January 2016 at 10:36:20, dbrb2 wrote: > I am trying to build squid on Mint 17.3 > kernel 3.19.0-32 geeric > Squid 3.5.12 > when I try to proxy an SSL connection, the squid logs show: > > ERROR: NAT/TPROXY lookup failed to locate original IPs on local= > remote=yyy >

Re: [squid-users] intercept mode gives access denied

2016-01-14 Thread Antony Stone
On Thursday 14 January 2016 at 13:21:57, jean-yves boisiaud wrote: > My squid box is not on a firewall, but on a dedicated server in the DMZ, > between the internal and the external firewall. > On the internal firewall, port 80 is redirected to the squid box port 3128, > for transparent proxying.

Re: [squid-users] intercept mode gives access denied

2016-01-14 Thread Antony Stone
On Thursday 14 January 2016 at 18:25:16, Robert Plamondon wrote: > > You *must* perform the NAT on the machine Squid is running on for > > intercept mode to work. > > > > Doing it on any other router along the way will not work. > > Unless I'm missing something, I'd phrase this differently: the

Re: [squid-users] I can´t block streaming !!!

2016-01-15 Thread Antony Stone
On Friday 15 January 2016 at 17:04:37, Aismel wrote: > Hi guys, > > I follow this steps and not work i don’t know why > > https://linuxstep.wordpress.com/step-by-step-configuration-squid-to-block-s > t reaming-media-online/ > > I try using the Zentyal software disabling all video and flash opti

Re: [squid-users] receive only (asymatric routing)

2016-01-17 Thread Antony Stone
On Sunday 17 January 2016 at 08:55:56, behrad eslami wrote: > Hi > Some part of our traffic is asymmatric (send and receive had different > route)Is squid cat work on one direct (only on receive)? If you're asking whether Squid will cache and/or proxy replies from webservers where it hasn't seen

Re: [squid-users] receive only (asymatric routing)

2016-01-18 Thread Antony Stone
he server pass through Squid? Antony. > On Sunday, January 17, 2016 12:21 PM, Antony Stone wrote: > > On Sunday 17 January 2016 at 08:55:56, behrad eslami wrote: > > Hi > > Some part of our traffic is asymmatric (send and receive had different > > route)Is squid cat

Re: [squid-users] receive only (asymatric routing)

2016-01-18 Thread Antony Stone
both just plain routers and are not doing NAT). However, you can not expect Squid to do anything useful if it sees replies but no requests. > On Monday, January 18, 2016 1:41 PM, Antony Stone > wrote: > > On Monday 18 January 2016 at 10:56:27, behrad eslami wrote: > >

Re: [squid-users] Squid Log messages Database

2016-01-18 Thread Antony Stone
On Monday 18 January 2016 at 17:55:51, romain noyer wrote: > Is there a way to get all the messages a squid server can create and send > to a syslog? See the "syslog" method of: http://www.squid-cache.org/Doc/config/access_log/ http://www.squid-cache.org/Doc/config/cache_store_log/ > The goal w

Re: [squid-users] urlpath_regex not being matched

2016-01-18 Thread Antony Stone
On Monday 18 January 2016 at 18:22:24, Lucía Guevgeozian wrote: > acl good_facebook urlpath_regex groups > acl banned_sites url_regex "/etc/squid/config/banned_sites" > > inside banned_sites I have the word facebook > > http_access allow good_facebook > http_access deny banned_sites Okay, so yo

Re: [squid-users] urlpath_regex not being matched

2016-01-18 Thread Antony Stone
s sorted out), no? > 18.01.16 23:29, Antony Stone пишет: > > On Monday 18 January 2016 at 18:22:24, Lucía Guevgeozian wrote: > >> acl good_facebook urlpath_regex groups > >> acl banned_sites url_regex "/etc/squid/config/banned_sites" > >

Re: [squid-users] urlpath_regex not being matched

2016-01-18 Thread Antony Stone
On Monday 18 January 2016 at 19:43:56, Jorgeley Junior wrote: > I didn't test this, but i think it works better: > *http_access deny banned_sites !good_facebook* > is it works? That would work, yes, but: - it's not as obvious as putting two lines one after the other - this is only an exampl

[squid-users] Fwd: Re: Squid Log messages Database

2016-01-18 Thread Antony Stone
e :) ). kind regards, On Mon, Jan 18, 2016 at 6:16 PM, Antony Stone wrote: > On Monday 18 January 2016 at 17:55:51, romain noyer wrote: > > > Is there a way to get all the messages a squid server can create and send > > to a syslog? > > See the "syslog" method

Re: [squid-users] convert http requests to https on proxy setup.

2016-02-02 Thread Antony Stone
On Wednesday 03 February 2016 at 01:04:37, user wrote: > When client sends a http request (say. http://www.abc123.com, I would like > my squid proxy to make this request into https (https://www.abc123.com) > Any help/pointers is appreciated. http://www.squid-cache.org/Doc/config/url_rewrite_prog

Re: [squid-users] convert http requests to https on proxy setup.

2016-02-02 Thread Antony Stone
#x27;. The new URL is fetched directly by Squid and returned to the client as the response to its request. > On Tuesday, February 2, 2016 4:10 PM, Antony Stone wrote: > > On Wednesday 03 February 2016 at 01:04:37, user wrote: > > When client sends a ht

Re: [squid-users] Encrypt/Obfuscate squid.conf file

2016-02-03 Thread Antony Stone
On Wednesday 03 February 2016 at 14:54:42, Alleshouse, Dale (NonEmp) wrote: > Developers share a root login on these machines. So, they're all equally trusted with all your data, then. > We need to authenticate through the corporate proxy to hit the internet. > We are using squid to do this enc

Re: [squid-users] Squid None Aborted problem

2016-02-08 Thread Antony Stone
On Monday 08 February 2016 at 20:48:01, Kinkie wrote: > Hi, > I can't find any reference about this problem in earlier mails, I > must have missed it. The URL linked in the footer gives the original posting, not yet published to the list: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squ

Re: [squid-users] bump files

2016-02-21 Thread Antony Stone
On Sunday 21 February 2016 at 11:34:44, HackXBack wrote: > Bump links by extension files > and not by servername I'm still not at all sure I understand what you mean. Please give one example of what you want to do and explain why it would be an improvement over the standard method. Thanks, A

Re: [squid-users] Squid None Aborted problem

2016-02-21 Thread Antony Stone
On Sunday 21 February 2016 at 12:56:03, secoonder wrote: > My Firewall eth0: 192.168.1.180 > eth1:192.168.2.180 I'm guessing that eth0 is your route to the Internet, and eth1 points towards the clients trying to use Squid? > ip_forwarding enable and more /proc/sys/net/ipv4/ip_

Re: [squid-users] whatsapp image download fails

2016-02-21 Thread Antony Stone
On Sunday 21 February 2016 at 19:51:05, turgut kalfaoğlu wrote: > Hi.. On my LAN's squid server, I redirect port 80 to local squid, >iptables -t nat -A PREROUTING -s 192.168.2.0/24 -p tcp --dport 80 -j > REDIRECT --to-port 3128 > > and the squid speeds up and anonymizes the requests from the

Re: [squid-users] whatsapp image download fails

2016-02-21 Thread Antony Stone
On Sunday 21 February 2016 at 20:10:59, turgut kalfaoğlu wrote: > Thank you for your reply; there is nothing about SSL neither in iptables > nor in squid settings now. > It only intercepts port 80 requests.. So, does this mean that all browsers and similar clients are unable to access any HTTPS

Re: [squid-users] Youtube "challenges"

2016-02-23 Thread Antony Stone
On Tuesday 23 February 2016 at 13:57:52, Chris Horry wrote: > On 2/23/2016 00:01, Darren wrote: > > Hi all > > > > AI am putting together a config to allow the kids to access > > selected videos in YouTube from a page of links on a local server. > > You might want to look into a web filter like

Re: [squid-users] how to obtain info about actual active downloads?

2014-10-27 Thread Antony Stone
On Monday 27 October 2014 at 14:32:39 (EU time), Frantisek Hanzlik wrote: > Please, what is best way for determining who squid clients (their > PC IP addresses) have which downloads active? > I want it to determine which clients burden our slow internet line. > Examining 'access.log' does not help

Re: [squid-users] TCP_DENIED/403

2014-11-05 Thread Antony Stone
On Wednesday 05 November 2014 at 10:39:19 (EU time), navari.lore...@gmail.com wrote: > I'm configuring a Squid Web Proxy Cache and I apply the deny policy to some > sites. This is the problem: > > when people access sites with GET they have the right html error page > ERR_ACCES_DENIED > (LOG =

Re: [squid-users] Squid3 config on Ubuntu remains even after uninstall and ignore the new config

2014-11-10 Thread Antony Stone
On Monday 10 November 2014 at 17:12:23 (EU time), Efe wrote: > acl myrule dstdom_regex "/etc/squid3/domainblock.txt" > http_access deny myrule > > where domainblock.txt is > > someaddress.com > blockthis.net As Amos said, use dstdomain instead of dstdom_regex. > Now whenever i

Re: [squid-users] Squid going through another forward proxy

2014-11-13 Thread Antony Stone
On Thursday 13 November 2014 at 19:50:36 (EU time), Hector Chan wrote: > Hi, > > Does anyone have any idea how to setup squid (reverse proxy) behind a > forward proxy ? 1. Set up Squid as a forward proxy on machine A for the clients. 2. Set up Squid as a reverse proxy on machine B for the serve

Re: [squid-users] Centralized Squid - design and implementation

2014-11-17 Thread Antony Stone
On Monday 17 November 2014 at 22:01:29 (EU time), Alexander Samad wrote: > Why haproxy instead of a pacemaker. I have 2 dmz boxes I setup in a > cluster. so I have 2 vips for the squid proxies. and dns setup to > round robin to the vip's. > > I see sort of even distribution but I don't have a sin

Re: [squid-users] Blocking Chrome and QUIC

2015-02-06 Thread Antony Stone
On Friday 06 February 2015 at 22:54:54 (EU time), Luis Miguel Silva wrote: > As I started playing around with transparent ssl proxying, I learned that > Chrome uses an alternate communication (UDP based) protocol called QUIC. I'd never heard of QUIC, and http://en.wikipedia.org/wiki/QUIC doesn't

Re: [squid-users] Problems with squid 3.5.1

2015-02-11 Thread Antony Stone
On Wednesday 11 Feb 2015 at 11:43, Yuri Voinov wrote: > Thanks, Captain :))) > > Eliezer, we not so stupid. :) > > This is obvious for System Administrator, isn't it? You never know who may come across this "recommendation" in the mailing list archives in months or years to com

Re: [squid-users] Squid 3.5.1 intercept / Forwarding loop detected for

2015-02-12 Thread Antony Stone
On Thursday 12 Feb 2015 at 10:52, naser sonbaty wrote: > Hi guys, > > I need your help with setting squid 3.5.1 with intercept. > My topolgy Clients PC <--> Router PC <--> SquidPC Where is the Internet connection in the above diagram? > Router: > Send trafic from 80 to squid 192.168.15.2:3129

Re: [squid-users] logfileHandleWrite: daemon:/var/logs/access.log: error writing ((32) Broken pipe)

2015-02-12 Thread Antony Stone
On Thursday 12 Feb 2015 at 11:01, Priya Agarwal wrote: > My permissions are set correct. Please show us the output of: ls -al /var/logs/access.log > 2015/02/12 11:44:06| Logfile: opening log daemon:/var/logs/access.log > 2015/02/12 11:44:06| Logfile Daemon: opening log /var/logs/access.log > 20

Re: [squid-users] Squid 3.5.1 intercept / Forwarding loop detected for

2015-02-12 Thread Antony Stone
ing on the router to do it. > On Thu, Feb 12, 2015 at 11:58 AM, Antony Stone wrote: > > > > Have you configured the router to redirect port 80 traffic from the > > Client PC to Squid 3129, or have you configured it to redirect *all* port > > 80 traffic (including fro

Re: [squid-users] logfileHandleWrite: daemon:/var/logs/access.log: error writing ((32) Broken pipe)

2015-02-13 Thread Antony Stone
On Friday 13 Feb 2015 at 03:53, Priya Agarwal wrote: > These are the output: > > root@t4240qds:~# /usr/sbin/squid ls -al /var/logs/access.log Thanks, but I asked for the output of ls -al /var/logs/access.log There is no squid command in there. All I want to see is that this file (and

Re: [squid-users] logfileHandleWrite: daemon:/var/logs/access.log: error writing ((32) Broken pipe)

2015-02-13 Thread Antony Stone
On Friday 13 Feb 2015 at 09:12, Antony Stone wrote: > On Friday 13 Feb 2015 at 03:53, Priya Agarwal wrote: > > These are the output: > > > > root@t4240qds:~# /usr/sbin/squid ls -al /var/logs/access.log > > Thanks, but I asked for the output of > > ls -a

Re: [squid-users] logfileHandleWrite: daemon:/var/logs/access.log: error writing ((32) Broken pipe)

2015-02-13 Thread Antony Stone
On Friday 13 Feb 2015 at 11:06, Priya Agarwal wrote: > So sorry. In squid.conf I had done cache_effective_user to nobody and set > permissions of /var and /usr to nobody. So those are the permissions. Are you saying that /var is owned by 'nobody'? That sounds like a problem for the system to me.

Re: [squid-users] cache peer load balancing round robin problem

2015-02-16 Thread Antony Stone
On Monday 16 Feb 2015 at 22:54, snakeeyes wrote: > Hi , > > I have many account from same provider and I would like to use those > accounts as round robin and each request has different IP as possible How many client machines are you trying to distribute in this way? Your example suggests you'

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-16 Thread Antony Stone
On Monday 16 Feb 2015 at 16:20, Yuri Voinov wrote: > root @ cthulhu / # ps axuf > usage: ps [ -aAdeflcjLPyZ ] [ -o format ] [ -t termlist ] > [ -u userlist ] [ -U userlist ] [ -G grouplist ] > [ -p proclist ] [ -g pgrplist ] [ -s sidlist ] [ -z zonelist ] > May be, you want to kno

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-17 Thread Antony Stone
On Tuesday 17 Feb 2015 at 11:00, Marcus Kool wrote: > On 02/16/2015 11:43 PM, Amos Jeffries wrote: > > PS. Marcus, perhaps you should go on search around to find distro > > maintainers who are publishing SG and convince them to replace the > > defaults with ufdbguard. I have to do that periodicall

Re: [squid-users] question about encrypted connection between https client and Squid

2015-03-01 Thread Antony Stone
On Sunday 01 March 2015 at 19:17:22 (EU time), Yuri Voinov wrote: > 02.03.15 0:07, Julianne Bielski пишет: > > > > http_port 443 ssl-bump > > cert=/usr/local/squid3/etc/site_priv+pub.pem > > http_port 3128 intercept > https_port 3129 intercept ssl-bump generate-host-certificates=on > dynamic_cer

Re: [squid-users] Fwd: squid intercept config

2015-03-06 Thread Antony Stone
On Friday 06 March 2015 at 14:03:28 (EU time), Monah Baki wrote: > Hi All, > > As an addition to my yesterday's issue, > > Tail -f cache.log, I am getting the following: > > 015/03/06 13:54:02| WARNING: Forwarding loop detected for: > Any ideas? Is your NAT rule catching the HTTP requests fro

Re: [squid-users] Fwd: squid intercept config

2015-03-06 Thread Antony Stone
On Friday 06 March 2015 at 14:50:50 (EU time), Monah Baki wrote: > http://wiki.squid-cache.org/ConfigExamples/Intercept/FreeBsdPf > > So something else is missing? Can you run a packet sniffer on the proxy, to see what packets come in (noting the MAC address of the previous hop), what packets g

Re: [squid-users] squid "internal?" loop - with no firewall nat going on..?

2015-03-10 Thread Antony Stone
On Tuesday 10 March 2015 at 13:29:15 (EU time), Klavs Klavsen wrote: > Hi, > > I just setup a squid trying to get it to work in intercept mode. Is it working correctly in non-intercept mode? It can be helpful to check the simple setup first, and then try something more complex... > When I acc

Re: [squid-users] squid "internal?" loop - with no firewall nat going on..?

2015-03-10 Thread Antony Stone
On Tuesday 10 March 2015 at 15:09:14 (EU time), Klavs Klavsen wrote: > so intercept mode is only used, if you actually do the nat'ing on the > same server as squid is running.. You can do the NATting somewhere else; the important point is that the traffic must be NATted, not direct. > ie. I sho

Re: [squid-users] squid "internal?" loop - with no firewall nat going on..?

2015-03-10 Thread Antony Stone
On Tuesday 10 March 2015 at 15:32:25 (EU time), Amos Jeffries wrote: > On 11/03/2015 3:18 a.m., Antony Stone wrote: > > On Tuesday 10 March 2015 at 15:09:14 (EU time), Klavs Klavsen wrote: > >> so intercept mode is only used, if you actually do the nat'ing on the >

Re: [squid-users] urlpath_regex

2015-03-12 Thread Antony Stone
On Thursday 12 March 2015 at 12:46:36 (EU time), James Harper wrote: > > Ah. That is a bug then. The -i bit is not supposed to be treated as a > > pattern. > > Even when I put it in []'s? I think the mistake was mine. There was no [] in your original posting of your conf file... On Thursday 12

Re: [squid-users] squid intercept config

2015-03-13 Thread Antony Stone
On Friday 13 March 2015 at 17:47:44 (EU time), Monah Baki wrote: > acl localnet src 10.0.0.0/8# RFC1918 possible internal network > acl localnet src 172.16.0.0/12# RFC1918 possible internal network > acl localnet src 192.168.0.0/16# RFC1918 possible internal network > acl localnet src

Re: [squid-users] Having Squid listen on another port and forward all traffic to a specific address

2015-04-17 Thread Antony Stone
On Friday 17 April 2015 at 18:53:10 (EU time), Jonathan Krautter wrote: > Is there any way to have squid listen on an additional port and then > forward any traffic on that port to a specific address? Example: > > proxy listens on port 4456 > proxy forwards all traffic received on port 4456 to 7

Re: [squid-users] Clear Logs file

2015-05-01 Thread Antony Stone
On Friday 01 May 2015 at 15:18:47 (EU time), Hierony Manurung wrote: > I want to clear my logs file, so that they will be fresh. > How can I do this in safe way? Use the rotate facility. http://wiki.squid-cache.org/SquidFaq/SquidLogs Antony. -- Wanted: telepath. You know where to apply.

<    1   2   3   4   5   6