Re: [squid-users] Yet another store_id question HIT MISS

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 21.08.2016 19:23, Eliezer Croitoru пишет: > Well it's pretty simple, I have used squd 4.0.13 with default settings and > the rules you provided ie: > squid.conf: > store_id_program /usr/lib64/squid/storeid_file_rewrite /etc/squid/storeid-rules >

Re: [squid-users] Viber + squid = no images

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Show your logs and config. 21.08.2016 23:31, Yan Seiner пишет: > > I'm struggling with a strange problem. I have squid 2.4 set up as a transparent proxy. Everything works fine, except that Viber will not download images. > > Has anyone run acros

Re: [squid-users] best way to have randomized outgoing per each new connection

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Aha :-) HTTP is stateless protocol :-) 23.08.2016 3:20, Antony Stone пишет: > On Monday 22 August 2016 at 20:01:14, --Ahmad-- wrote: > >> I’m wondering here … what is the best method so that i give randomized tcp >> outgoing address per new sess

Re: [squid-users] clarifying Features/SslPeekAndSplice on wiki + fake CONNECT

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 May be will be more right to refer it by squirky :-) 24.08.2016 2:03, Stanford Prescott пишет: > I've been thinking that since we are talking about the squid wiki perhaps we > could just refer to it as the squiki? > > On Tue, Aug 23, 2016 at 10:

Re: [squid-users] Https_port with "official" certificate

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 No one CA do not issue signing CA for subject, which is not CA itself. So, op wants impossible thing. 24.08.2016 18:15, Antony Stone пишет: > On Wednesday 24 August 2016 at 14:02:43, Samuraiii wrote: > >> Squid fails to start for me with: >> FAT

Re: [squid-users] Https_port with "official" certificate

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Predictable. 24.08.2016 18:22, Samuraiii пишет: > On 24.8.2016 14:18, Yuri Voinov wrote: > > >> No one CA do not issue signing CA for subject, which is not CA itself. >> >> So, op wants impossible thing. >> >

Re: [squid-users] Https_port with "official" certificate

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 24.08.2016 18:23, Antony Stone пишет: > On Wednesday 24 August 2016 at 14:18:46, Yuri Voinov wrote: > >> No one CA do not issue signing CA for subject, which is not CA itself. >> >> So, op wants impossible thing. > >

Re: [squid-users] Https_port with "official" certificate

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 24.08.2016 18:31, Samuraiii пишет: > >> look to the browser >> >> > like HTTPS ones. >> Then I do not understand what he wants op. >> >> >> > > http://wiki.squid-cache.org/Features/HTTPS#Encrypted_browser-Squid_connection > > Secure c

Re: [squid-users] Https_port with "official" certificate

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 24.08.2016 18:32, Antony Stone пишет: > On Wednesday 24 August 2016 at 14:26:48, Yuri Voinov wrote: > >> 24.08.2016 18:23, Antony Stone пишет: >>> On Wednesday 24 August 2016 at 14:18:46, Yuri Voinov wrote: >>>>

Re: [squid-users] Https_port with "official" certificate

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Against this backdrop, even a bump SSL security seems a masterpiece. 24.08.2016 18:32, Antony Stone пишет: > On Wednesday 24 August 2016 at 14:26:48, Yuri Voinov wrote: > >> 24.08.2016 18:23, Antony Stone пишет: >>> On Wed

Re: [squid-users] Https_port with "official" certificate

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 24.08.2016 18:44, Samuraiii пишет: > >> >> > No SSL-bumping or whatever just forwarding. >> Firstly, the concept is not safe. Users will have a secure connection to the proxy - as well as the next? HTTP? User misled green padlock, believes

Re: [squid-users] Https_port with "official" certificate

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 24.08.2016 19:24, Antony Stone пишет: > On Wednesday 24 August 2016 at 14:35:03, Yuri Voinov wrote: > >>>> Then I do not understand what he wants op. >> >> http://wiki.squid-cache.org/Features/HTTPS#Encrypte

Re: [squid-users] Strange log https problem??

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 What is you threat as error? 26.08.2016 0:31, erdosain9 пишет: > Hi im doing bump. > all is working fine except that i have this error in log > > 49484.020 0 192.168.1.17 NONE/200 0 CONNECT www.facebook.com:443 - > HIER_NONE/- - > 1472149484

Re: [squid-users] Limit Bandwith for youtube....

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 26.08.2016 0:39, erdosain9 пишет: > Hi. > i have ssl-bump enable... > > # > # Squid listen Port > http_port 192.168.1.97:3128 ssl-bump generate-host-certificates=on > dynamic_cert_mem_cache_size=4MB cer

Re: [squid-users] Block access to a ip (external)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 With router or L3 switch. 26.08.2016 0:58, erdosain9 пишет: > Hi. > I have too much traffic to this ip 190.61.17.9 i really dont know what > it is... so i want to block that ip. > How i can do this? > Thanks! > > > > -- > View this message in

Re: [squid-users] Block access to a ip (external)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Feel free to check yoursuspicious IP: http://www.tcpiputils.com/browse/ip-address/190.61.17.9 As you can see, this is Akamai. So, this can be (most probably) perfectly legitimate traffic. So, don't panic. 26.08.2016 0:58, erdosain9 пишет: > Hi

Re: [squid-users] Block access to a ip (external)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Feel free to check yoursuspicious IP: http://www.tcpiputils.com/browse/ip-address/190.61.17.9 As you can see, this is Akamai. So, this can be (most probably) perfectly legitimate traffic. So, don't panic. 26.08.2016 0:58, erdosain9 пишет: > Hi

Re: [squid-users] Block access to a ip (external)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Feel free to check yoursuspicious IP: http://www.tcpiputils.com/browse/ip-address/190.61.17.9 As you can see, this is Akamai. So, this can be (most probably) perfectly legitimate traffic. So, don't panic. 26.08.2016 0:58, erdosain9 пишет:

Re: [squid-users] Block access to a ip (external)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Traceroute confirm this: root @ khorne / # traceroute 190.61.17.9 traceroute to 190.61.17.9 (190.61.17.9), 30 hops max, 40 byte packets 1 192.168.201.1 (192.168.201.1) 0.978 ms 0.798 ms 0.755 ms 2 178.88.163.97 (178.88.163.97) 24.230 ms 2

Re: [squid-users] Strange log https problem??

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Nod. This is informational tag AFAIK. 26.08.2016 1:56, erdosain9 пишет: > I have a lot of > > "NONE/200".. that's an error i guess. > or not?? > Thanks > > > > -- > View this message in context: http://squid-web-proxy-cache.1019090.n4.nab

Re: [squid-users] Block access to a ip (external)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Akamai works with many companies. Antivirus providers, MS updates, Social networks (FB, Instagram, etc.etc.etc.). 26.08.2016 2:40, erdosain9 пишет: > Is there any way to know which service (web, or whatever) provides this ip ?? Only squid's acces

Re: [squid-users] Limit Bandwith for youtube....

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Everything can be much easier. Google Streaming video is not cacheable. Absolutely. If users are watching the same video, each time it is downloaded from the outside. Slowly and sadly. 26.08.2016 3:10, erdosain9 пишет: > I have ssl-bump enable..

Re: [squid-users] Limit Bandwith for youtube....

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Dont' sure. http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube/Discussion?highlight=%28Youtube%29 26.08.2016 23:54, Matus UHLAR - fantomas пишет: > On 26.08.16 03:16, Yuri Voinov wrote: >> Everything can be much

Re: [squid-users] Limit Bandwith for youtube....

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 28.08.2016 17:34, Matus UHLAR - fantomas пишет: > On 27.08.16 01:10, Yuri Voinov wrote: >> http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube/Discussion?highlight=%28Youtube%29 >> >> >> 26.08.2016 23

Re: [squid-users] Limit Bandwith for youtube....

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 28.08.2016 21:59, Yuri Voinov пишет: > > > > 28.08.2016 17:34, Matus UHLAR - fantomas пишет: > > On 27.08.16 01:10, Yuri Voinov wrote: > >> > http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube/Disc

Re: [squid-users] Limit Bandwith for youtube....

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 28.08.2016 22:39, Yuri Voinov пишет: > > > > 28.08.2016 21:59, Yuri Voinov пишет: > > > > > > > > 28.08.2016 17:34, Matus UHLAR - fantomas пишет: > > > > On 27.08.16 01:10, Yuri Voin

Re: [squid-users] Limit Bandwith for youtube....

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Regex for fb video: fbcdn\.net\/v\/(.*\.mp4)\? Written with help of https://regex101.com. 29.08.2016 21:08, erdosain9 пишет: > ... and a last thing with this theme of limit video. for > facebook? > what would be the sysntax??? >

Re: [squid-users] Limit Bandwith for youtube....

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I'm a little differently solve the problem of the speed limit streaming video. I limit the speed of the video on the router to the proxy, the proxy itself gives cached video streaming to the local network at full speed, because the speed of the loc

Re: [squid-users] More host header forgery pain with peek/splice

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 30.08.2016 23:25, Marcus Kool пишет: > Do I understand it correctly that Squid in normal proxy mode > allows malware to do a CONNECT to any destination, while in > transparent proxy mode does extra security checks which causes > some regular (non

Re: [squid-users] More host header forgery pain with peek/splice

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 31.08.2016 1:24, Yuri Voinov пишет: > > > > 30.08.2016 23:25, Marcus Kool пишет: > > Do I understand it correctly that Squid in normal proxy mode > > allows malware to do a CONNECT to any destination, while in > &g

Re: [squid-users] More host header forgery pain with peek/splice

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 And this one: http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoIOSv15Wccp2 of course. 30.08.2016 23:25, Marcus Kool пишет: > Do I understand it correctly that Squid in normal proxy mode > allows malware to do a CONNECT to any destinati

Re: [squid-users] Limit Bandwith for youtube....

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 To cache streaming video, you require to utilize Store-ID feature: http://wiki.squid-cache.org/Features/StoreID 31.08.2016 2:16, erdosain9 пишет: > By the way... > I have this on log > > https://fbcdn-video-k-a.akamaihd.net/hvideo-ak-xat1/v/t42

Re: [squid-users] Limit Bandwith for youtube....

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 And, to limit faceboot video, you require to utilize akamaihd\.net\/v\/(.*\.mp4)\? regex in conjunction with delay-pool + SSL bump. :) 31.08.2016 2:48, Yuri Voinov пишет: > > To cache streaming video, you require to utilize Store-ID f

Re: [squid-users] Limit Bandwith for youtube....

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I did not say it would be easy, right? :) 31.08.2016 2:51, Yuri Voinov пишет: > > And, to limit faceboot video, > you require to utilize akamaihd\.net\/v\/(.*\.mp4)\? regex in conjunction with delay-pool + SSL bump. :) > > 31.08.

Re: [squid-users] TCP_MISS_ABORTED only for one site

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 1472676457.210 5829 127.0.0.1 TCP_MISS/302 512 GET http://www.ipiranga.com.br/ - HIER_DIRECT/177.67.60.32 text/html 1472676457.633366 127.0.0.1 TCP_MISS/302 739 GET http://www.ipiranga.com.br/wps/portal/ipiranga - HIER_DIRECT/177.67.60.32 - 1

Re: [squid-users] TCP_MISS_ABORTED only for one site

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 May be upgrade? 3.3.x is antique. 01.09.2016 2:48, Yuri Voinov пишет: > > 1472676457.210 5829 127.0.0.1 TCP_MISS/302 512 GET http://www.ipiranga.com.br/ - HIER_DIRECT/177.67.60.32 text/html > 1472676457.633366 127.0.0.1 TCP_MISS/30

Re: [squid-users] Web Whatsapp, Dropbox... problem

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 http://wiki.squid-cache.org/Features/SslPeekAndSplice Here is answer to your question. Read carefully. 01.09.2016 19:12, erdosain9 пишет: > Hi to all. > Im having problem with the > > web.whatssap.com > > and with Dropbox client... > > There is

Re: [squid-users] Limit Bandwith for youtube....

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Man, don't panic. just comment out debud_options and reconfigure your squid. Always yours, Captain Obvious. 01.09.2016 19:43, erdosain9 пишет: > PLEASE HELP! > I probe this > " You can use debug_options 11,2 to see the HTTP message headers and >

Re: [squid-users] Web Whatsapp, Dropbox... problem

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 In versions older than 3.5 squid's uses obsolete SSL bump implementation, which requires IP's against server_name to splice/no_bump. Your Squid is antique. Upgrade it first. 01.09.2016 20:21, erdosain9 пишет: > hi. > Thanks > but, now im using s

Re: [squid-users] Web Whatsapp, Dropbox... problem

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 This will not work in Squid<3.5. 3.4 and below requires dst (IP-based) acl type for no-bump because they does not contains SNI functionality. 01.09.2016 20:30, Craddock, Tommy пишет: > Hello, > > Create an ACL that will be a list of domains, ei

Re: [squid-users] Web Whatsapp, Dropbox... problem

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Or, you can buy router to bypass proxy for selected IP's. eBay is great. 01.09.2016 20:21, erdosain9 пишет: > hi. > Thanks > but, now im using ssl-bump with squid 3.3.8 is there a possibility that work > web.whatsapp and drobpox with this version

Re: [squid-users] Web Whatsapp, Dropbox... problem

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Thank you, Eliezer, I forgot about the solution with IP tables. When the hand router, everything seems to network :) 02.09.2016 0:36, Eliezer Croitoru пишет: > Hey Erdosian, > > I have a question regarding the need for squid bypass. > What have

Re: [squid-users] Problems with Linux Worstations

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 05.09.2016 22:25, Marcio Demetrio Bacci пишет: > Hi Amos > > Now, my squid.conf is as follow (very simple): > > START # > http_port 3128 > > debug_options 11,2 > > cache_mem 512 MB > cache_swap_low 80 > cache_swap_hig

Re: [squid-users] windows update not working squid 3.5.2

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 http://wiki.squid-cache.org/ConfigExamples/Caching/WindowsUpdates Did you read this? 06.09.2016 20:59, --Ahmad-- пишет: > hi squid users . > > I’m trying to catch windows updates as cached object > im testing with windows 10 pc > > i see all re

Re: [squid-users] windows update not working squid 3.5.2

tern entries above these. > # > #refresh_pattern ^ftp: 144020% 10080 > #refresh_pattern ^gopher: 14400% 1440 > #refresh_pattern -i (/cgi-bin/|\?) 00% 0 > #refresh_pattern . 0 20% 4320 > # > rang

Re: [squid-users] regarding to "cache videos" plugin now as open source

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 https://www.google.com :) 06.09.2016 21:26, reinerotto пишет: >> since the plugin that is called “cache videos “ became now free and open > source < > Link, pls. > > > > -- > View this message in context: http://squid-web-proxy-cache.1019090.n4.

Re: [squid-users] ssl bump certificate question

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 08.09.2016 2:25, erdosain9 пишет: > > Hi. > A query. Sslbump is possible without installing the certificate, machine by > machine ??? Bump impossible. Splice - possible. > > Is there any way that this certificate Squid SUBMIT ?? Cant understand q

Re: [squid-users] ssl bump certificate question

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 08.09.2016 2:58, Antony Stone пишет: > On Wednesday 07 September 2016 at 22:55:06, Yuri Voinov wrote: > >> 08.09.2016 2:25, erdosain9 пишет: >>> Hi. >>> A query. Sslbump is possible without installing the certi

Re: [squid-users] Web Whatsapp, Dropbox... problem

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Show access.log, not screenshot. 08.09.2016 18:38, erdosain9 пишет: > Finally i update to squid 3.5 and try the acl with dstdomain > > > Craddock, Tommy wrote >> Hello, >> Create an ACL that will be a list of domains, either in the ACL or in a >>

Re: [squid-users] Web Whatsapp, Dropbox... problem

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Absolutely right. It is requires to put Whatsapp web to splice rule to make it work. 09.09.2016 2:04, Chico Venancio пишет: > > We had that trouble with whatsapp web. We simply put it in the splice rule. It seems whatsapp checks the client certif

Re: [squid-users] squid TCP_DENIED/403

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 My Squid tells me this is adware URL. And my setup blocks this URL with TCP_DENIED/403. 09.09.2016 19:55, erdosain9 пишет: > Hi, > If i go to http://affiliates.digitalriver.com/z/36067/CD109988 squid tell me > ACCESS DENIED. I look the access.lo

Re: [squid-users] squid TCP_DENIED/403

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Just not go to sites via marketing references. Just type http://store.vmware.com/store/vmware/en_US/pd/productID.282883900 in address bar then press Enter. Viola! Here is it! 09.09.2016 21:03, erdosain9 пишет: > But... now that i think... there

Re: [squid-users] compliled squid size

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 . or just gmake install-strip ;) 10.09.2016 0:07, Cassiano Martin пишет: > > Strip binary: strip -s squid > > Enviado do meu iPhone > >> Em 9 de set de 2016, às 10:58, mzgmedia escreveu: >> >> I think that the >> the param is -g and is there

Re: [squid-users] Web Whatsapp, Dropbox... problem

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Rewrite as follows: acl step1 at_step SslBump1 acl excludeSSL ssl::server_name_regex web.whatsapp.com ssl_bump peek step1 ssl_bump splice excludeSSL ssl_bump bump all Then try again. 12.09.2016 19:45, erdosain9 пишет: > Hi > I keep having probl

Re: [squid-users] Web Whatsapp, Dropbox... problem

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Oooops, acl must be: acl excludeSSL ssl::server_name_regex web\.whatsapp\.com 12.09.2016 20:13, Yuri Voinov пишет: > > Rewrite as follows: > > acl step1 at_step SslBump1 > acl excludeSSL ssl::server_name_regex web.whatsapp.com &g

Re: [squid-users] Web Whatsapp, Dropbox... problem

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Because ssl :: server_name_regex works reliably. As shown by my personal practice. But in general it is by op's choice. 12.09.2016 20:38, Marcus Kool пишет: > > > On 09/12/2016 11:14 AM, Yuri Voinov wrote: >> >> ---

Re: [squid-users] Web Whatsapp, Dropbox... problem

the regex, it matches also web.whatsapp.com-24.site: it needs a $ > > Marcus > >> Chico Venancio >> >> >> Em 12/09/2016 11:42, "Yuri Voinov" mailto:yvoi...@gmail.com>> escreveu: >> >> > Because ssl :: server_name_regex works reliably. As shown

Re: [squid-users] Lost of all squid cache

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 What cache_dir mode? aufs? 12.09.2016 22:54, Eduardo Carneiro пишет: > Hi everyone! > > I've got a strange issue on my Squid 3.5.19. > > About 30 minutes ago, my squid stopped and I noticed that the message > "Rebuilding storage in /squid/cache/d

Re: [squid-users] Lost of all squid cache

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hm. As a recovery you can try to rename/remove swap.state from cache_dir's and start squid again. AFAIK in this case it re-indexing all exists disk cache contents and build new one swap.state file. Also, does all permissions to cache_dir and subdi

Re: [squid-users] Web Whatsapp, Dropbox... problem

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Wait. Does anybody see WebSockets connections to web.whatsapp.com? 14.09.2016 2:38, Chico Venancio пишет: > > We need more of access log. > There is at least connect attempts at w1.web.whatsapp.com not shown. > > Chi

Re: [squid-users] Web Whatsapp, Dropbox... problem

128 TCP_TUNNEL/200 3639 CONNECT w7.web.whatsapp.com:443 <http://w7.web.whatsapp.com:443> - HIER_DIRECT/169.55.69.156 <http://169.55.69.156> - > > > Chico Venancio > > 2016-09-13 17:40 GMT-03:00 Yuri Voinov mailto:yvoi...@gmail.com>>: > > > Wait. > >

Re: [squid-users] Preserving Squid.conf when upgrading

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 15.09.2016 20:28, Rafael Akchurin пишет: > > Hello Patrick, > > > > Sorry I do not know. I guess MSI will just remove it. > > So back it up somewhere before uninstall/install. > This is easy and obvious procedure ;) > > > > Best regards, > > Ra

Re: [squid-users] Preserving Squid.conf when upgrading

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 15.09.2016 22:04, Rafael Akchurin пишет: > > Hello Yuri, > > > > Yes latest Docker runs natively on Windows – you do not need to install anything and so will happily run Squid in Docker container (inside hyper-v I

Re: [squid-users] (71) Protocol error (TLS code: X509_V_ERR_CERT_HAS_EXPIRED)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 16.09.2016 4:00, Antony Stone пишет: > On Thursday 15 Sep 2016 at 19:44, erdosain9 wrote: > >> Hi. >> I have this problem with some webs >> >> example: >> https://www.dalemacartney.com/2012/07/06/squid-proxy-integration-with-activ >> e-direct

Re: [squid-users] (71) Protocol error (TLS code: X509_V_ERR_CERT_HAS_EXPIRED)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Rotten year ago certificate - a terrible grief :) 16.09.2016 4:00, Antony Stone пишет: > On Thursday 15 Sep 2016 at 19:44, erdosain9 wrote: > >> Hi. >> I have this problem with some webs >> >> example: >> https://www.dalemacartney.com/2012/07

Re: [squid-users] SQUID 3.4.8 on RPi 3

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 17.09.2016 12:38, VB пишет: > Hi Yuri > > thx a lot for your links.. following the first one, what I did: > > 1. Create and sign the .pem certificate > > 2. Update my squid.conf with: > https_port 3130 ssl-bump \ > c

Re: [squid-users] SQUID 3.4.8 on RPi 3

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 17.09.2016 12:38, VB пишет: > Hi Yuri > > thx a lot for your links.. following the first one, what I did: > > 1. Create and sign the .pem certificate > > 2. Update my squid.conf with: > https_port 3130 ssl-bump \ > c

Re: [squid-users] SQUID 3.4.8 on RPi 3

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 IDK. I'm not Linux fanboy. 17.09.2016 19:02, VB пишет: > Hi Yuri > > which version do you suggest for Raspian Jesse? > Is it OK the 3.5.21? Probably. At least 3.5.20. > > thx > Vincenzo > > > > -- > View

Re: [squid-users] libevent

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Joined. 22.09.2016 2:46, joe пишет: > is there a support for libevent in squid ??? > > > > -- > View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/libevent-tp4679637.html > Sent from the Squid - Users mailing list ar

Re: [squid-users] libevent

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 22.09.2016 3:52, Alex Rousskov пишет: > On 09/21/2016 03:01 PM, joe wrote: >> almost most of internet app like dns and other cache using it its the >> futur so why not squid > > because nobody added libevent support to Squid. including de

Re: [squid-users] libevent

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 You are too few in number to provide something decent enough, and not from the last century. So, business as usual. 22.09.2016 3:54, Yuri Voinov пишет: > > > > 22.09.2016 3:52, Alex Rousskov пишет: > > On 09/21/2016 0

Re: [squid-users] libevent

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 23.09.2016 3:33, reinerotto пишет: >> You are too few in number to provide something decent enough, and not from > the last century.< > The smaller the development team, the more efficient it is. Highly qualified > staff assumed. Oh, yes, we've s

[squid-users] Question: Is it possible adaptation_service_chain from services with different access lists?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi gents. I appeal to the experts in the adaptation. For example, I have to adaptation service A, which has the access list "All". And B adaptation service that has access list, for example, "only text types". I want to chain both services in

Re: [squid-users] Question: Is it possible adaptation_service_chain from services with different access lists?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 26.09.2016 22:25, Alex Rousskov пишет: > On 09/26/2016 09:44 AM, Yuri Voinov wrote: > >> I have to adaptation service A, which has the access list "All". >> >> And B adaptation service that has access list "

Re: [squid-users] Question: Is it possible adaptation_service_chain from services with different access lists?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 26.09.2016 23:16, Alex Rousskov пишет: > On 09/26/2016 10:42 AM, Yuri Voinov wrote: >> 26.09.2016 22:25, Alex Rousskov пишет: >>> I assume you meant that Squid should >>> not send service B non-text messages at all. &

Re: [squid-users] Question: Is it possible adaptation_service_chain from services with different access lists?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 27.09.2016 0:08, Alex Rousskov пишет: > On 09/26/2016 11:32 AM, Yuri Voinov wrote: >> 26.09.2016 23:16, Alex Rousskov пишет: >>> On 09/26/2016 10:42 AM, Yuri Voinov wrote: >>>> How can I make a chain of adaptation

Re: [squid-users] The Squid “Persona”- Squid 3.5.21+4.0.14 Release

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 It seems to me more important than the quality of the product debugging instead invention mascot for it. 28.09.2016 17:43, Antony Stone пишет: > On Wednesday 28 September 2016 at 13:39:04, Eliezer Croitoru wrote: > >> Take a look at the page sour

Re: [squid-users] cache_peer name gone from logs after upgrade to 3.5

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 It's tragedy, man. But 3.1 is too antique against 3.5 to remain unchanged. Also, do not expect good documentation from open source - you can always read sources yourself and know what's changed. Too sad. But this it. WBR, Yuri 28.

Re: [squid-users] cache_peer name gone from logs after upgrade to 3.5

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 29.09.2016 0:38, Daniel Sutcliffe пишет: > On Wed, Sep 28, 2016 at 1:56 PM, Yuri Voinov wrote: >>> It's tragedy, man. >>> >>> But 3.1 is too antique against 3.5 to remain unchanged. > > On Wed, Sep 28,

Re: [squid-users] Large text ACL lists

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Amos, I'm afraid that this is not a solution. Block lists have become so huge that only their compression and / or placement in an external database (as Marcus) can save the situation. 30.09.2016 12:59, Amos Jeffries пишет: > On 30/09/2016 6:58 p

Re: [squid-users] FW: squid tproxy ssl-bump and Protocol error (TLS code: SQUID_ERR_SSL_HANDSHAKE)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 30.09.2016 17:36, Vieri пишет: > Hi, > > - Original Message - >> From: Amos Jeffries >> >> Squid mimics the client details when contacting the server. So you would > >> get the same problem (though maybe different description) if going >

Re: [squid-users] Squid 3.5.21 for Microsoft Windows 64-bit is available

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Yup, Raf, sure. Thank you! 30.09.2016 13:37, Rafael Akchurin пишет: > > Greetings everyone, > > > > @yuri Sorry for being so late, we had some issues compiling this version :( > > > > > > For those wis

Re: [squid-users] handshake problems with stare and bump

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 http://wiki.squid-cache.org/ConfigExamples/Intercept/SslBumpExplicit#Hardening 03.10.2016 23:50, Marc пишет: > Hi, > > I've got an issue with squid stare and bump, hope someone can help! > > I'm staring and bumping everything, using transparent p

Re: [squid-users] Problem with Squid3 Caches

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Show config. 04.10.2016 0:55, Jason Alexander пишет: > Greetings - > > I’m trying to install squid on an Ubuntu workstation in a VM. I install squid but unable to initialize caches. I get the following error: > > Initializing the Squid cache wi

[squid-users] Your real byte hit

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Can your achieve this? https://i1.someimage.com/ce1txmo.png At the week-end! ;) -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEcBAEBCAAGBQJX+VfwAAoJENNXIZxhPexG7/sIALJe0URPi0iCu2ZFycJmFn2V a6k//Oy3B9oRed6YkNkqHLlcMEqeF4zxQPrDYNSvC9N8TqyqKX

Re: [squid-users] Your real byte hit

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 This is simple interception/forwarding proxy :) 09.10.2016 2:32, Yuri Voinov пишет: > > Can your achieve this? > > https://i1.someimage.com/ce1txmo.png > > At the week-end! ;) > > -BEGIN PGP SIGNATUR

Re: [squid-users] Your real byte hit

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I mean BYTE HIT :) If you have eyes :) 09.10.2016 4:11, reinerotto пишет: > You mean the 10% ? No problem. > > > > -- > View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Your-real-byte-hit-tp4680014p4680016.html > S

Re: [squid-users] Your real byte hit

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Blue line :) Colorblind go to the optometrist :) 09.10.2016 4:11, reinerotto пишет: > You mean the 10% ? No problem. > > > > -- > View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Your-real-byte-hit-tp4680014p468001

Re: [squid-users] Your real byte hit

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Those who understand - have rushed to they monitor :) PS. HIT is about nothing. Only BYTE HIT matters. 09.10.2016 4:39, Yuri Voinov пишет: > > Blue line :) Colorblind go to the optometrist :) > > > 09.10.2016 4:11, reinerotto пише

Re: [squid-users] Your real byte hit

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 But you can continue to assume that the hit - a measure of the efficiency of the cache :) 09.10.2016 4:44, Yuri Voinov пишет: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Those who understand - have rushed to they mo

Re: [squid-users] Your real byte hit

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 (When you can just - you come and boast) 09.10.2016 5:08, Yuri Voinov пишет: > > But you can continue to assume that the hit - a measure of the efficiency of the cache :) > > > 09.10.2016 4:44, Yuri Voinov пишет: > > >

Re: [squid-users] Your real byte hit

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 This is what Squid has to be. Do not ask me to share configuration - it is not a magic configuration. This is something else. Custom code, custom config, custom setup. Train better! Hard luck! 09.10.2016 5:14, Yuri Voinov пишет: > > (Wh

[squid-users] TCP_MISS/304 question

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi gents. I have very stupid question. Look at this access.log entry: 1476236018.506 85 192.168.100.103 TCP_MISS/304 354 GET https://www.gazeta.ru/nm2015/gzt/img/logo_footer.png - HIER_DIRECT/81.19.72.2 - I'm see this: http://wiki.squid-ca

Re: [squid-users] TCP_MISS/304 question

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 13.10.2016 19:41, Amos Jeffries пишет: > On 14/10/2016 1:38 a.m., Yuri Voinov wrote: >> >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA256 >> >> Hi gents. >> >> I have very stupid

Re: [squid-users] TCP_MISS/304 question

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 13.10.2016 19:44, Yuri Voinov пишет: > > > > 13.10.2016 19:41, Amos Jeffries пишет: > > On 14/10/2016 1:38 a.m., Yuri Voinov wrote: > >> > >> -BEGIN PGP SIGNED MESSAGE- > >> Hash: SHA256 >

Re: [squid-users] TCP_MISS/304 question

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 13.10.2016 20:09, Amos Jeffries пишет: > On 14/10/2016 2:46 a.m., Yuri Voinov wrote: >> >> >> >> 13.10.2016 19:44, Yuri Voinov пишет: >> >> >> >>> 13.10.2016 19:41, Amos Jeffries

Re: [squid-users] TCP_MISS/304 question

of this event as a TCP_MISS seems incorrect and, consequently, leads to errors in accounting/billing. That, in turn, can lead to a loss of money. So, nice to have functionality for correct handling this cases. 13.10.2016 20:09, Amos Jeffries пишет: > On 14/10/2016 2:46 a.m., Yuri Voinov wr

Re: [squid-users] TCP_MISS/304 question

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 13.10.2016 21:02, Yuri Voinov пишет: > > > > 13.10.2016 20:09, Amos Jeffries пишет: > > On 14/10/2016 2:46 a.m., Yuri Voinov wrote: > >> > >> > >> > >> 13.10.2016 19:44, Yuri Voinov пишет

Re: [squid-users] TCP_MISS/304 question

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 14.10.2016 0:28, Alex Rousskov пишет: > On 10/13/2016 11:52 AM, Yuri Voinov wrote: >> When we seen ??/304 with only headers - most probably content behind >> proxy already and this is CLIENT_IMS_HIT observed. >> >&g

Re: [squid-users] TCP_MISS/304 question

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 14.10.2016 1:28, Alex Rousskov пишет: > On 10/13/2016 12:46 PM, Yuri Voinov wrote: >> >> >> 14.10.2016 0:28, Alex Rousskov пишет: >>> On 10/13/2016 11:52 AM, Yuri Voinov wrote: >>>> When we seen ??

<    4   5   6   7   8   9   10   11   12   13   >