RE: [squid-users] CONNECT method support(for https) using squid3.1.0.6 + tproxy4

2009-04-10 Thread joost.deheer
HTTPS cannot be spoofed, its part of the security involved with the SSL layer. Technically, HTTPS -can- be spoofed, using a wildcard trusted certificate for *. I know that BlueCoat supports this kind of interception to be able to scan HTTPS traffic. It's basically a trusted MITM attack. The

RE: [squid-users] Initial webpage before surfing on squid

2009-04-10 Thread Jorge Bastos
There is a man page included with the Squid source. Under the source directory it's helpers/external_acl/session/squid_session.8 Chris Chris, Well I was looking at it right now. And, I think I have another problem, I use the Debian Packages, so, can o compile this from source and copy the

RE: [squid-users] Initial webpage before surfing on squid

2009-04-10 Thread Jorge Bastos
There is a man page included with the Squid source. Under the source directory it's helpers/external_acl/session/squid_session.8 Chris Chris, Well I was looking at it right now. And, I think I have another problem, I use the Debian Packages, so, can o compile this from source and

RE: [squid-users] Initial webpage before surfing on squid

2009-04-10 Thread Jorge Bastos
There is a man page included with the Squid source. Under the source directory it's helpers/external_acl/session/squid_session.8 Chris Chris, Well I was looking at it right now. And, I think I have another problem, I use the Debian Packages, so, can o compile this from source and

[squid-users] Squid is ignoring my refresh_pattern?

2009-04-10 Thread ujjain
I have set up my refresh_pattern like this in the squid configuration: refresh_pattern . 1 100% 1 ignore-reload I have already tried tons of combinations including override-expire, override-lastmod, reload-into-ims, ignore-reload. Disabling refresh_pattern did disable caching when I removed the

RE: [squid-users] Initial webpage before surfing on squid

2009-04-10 Thread Jorge Bastos
Jorge Bastos wrote: Chris, Where can I find the documentation for this helper? I'm surfing squid's page and don't see it :S or am I blind? Jorge, There is a man page included with the Squid source. Under the source directory it's helpers/external_acl/session/squid_session.8

RE: [squid-users] Custom error page based on IP.

2009-04-10 Thread Palmer J.D.F.
Hi, NP: the line above deny_info ERR_EXTERNAL_IP not swan should be configured as: deny_info ERR_EXTERNAL_IP swan Can you explain why would want to do that? Unless the ERR_EXTERNAL_IP is generating the redirect to include various of the Squid % error page codes it can be replaced further

Re: [squid-users] Config for multiplexing non-caching proxy

2009-04-10 Thread Chris Woodfield
So now that this behavior has a name, I looked and noticed that per the 2.7 docs, collapsed_forwarding defaults to off, and isn't enabled in our config either. Does running squid in reverse proxy mode implicitly turn this on? -C On Apr 10, 2009, at 12:26 AM, Amos Jeffries wrote: Chris

[squid-users] squid + clamav

2009-04-10 Thread Ramzi Abdallah
Hi, I am using Squid Version 3.0.STABLE13 and ClamAV 0.95.1 all running on Fedora core 9. I would like to know if there is a reliable way to configure squid to use CalmAV to scan files before they get downloaded. I have tried squidclamav-4.0 which was slow and c_icap-060708rc2 which never worked.

RE: [squid-users] Initial webpage before surfing on squid

2009-04-10 Thread Jorge Bastos
Ops! Forgive me Chris, There's the squid_session on debian too, didn't saw it, sorry. I now need a bit of help on the webpage with this parameters: --- deny_info http://your.server/bannerpage?url=%s session Then set up http://your.server/bannerpage to display a session startup

[squid-users] -D obsolete?

2009-04-10 Thread Florian
Hello List, i installed squid 3.1.0.7. When i start the squid it writes to the screen: Starting squid: 2009/04/10 22:21:12| WARNING: -D command-line option is obsolete. The manpage for squid_3.1.0.7 knows the -D Option. How to disable the initial DNS-Tests? Is the manpage outdated? Rgerads,

[squid-users] 3.1.0.7 and langpack

2009-04-10 Thread Florian
Hello List, i installed squid 3.1.0.7. Squid missed the german langfiles and so i added the actual langpack: squid-3.HEAD-20090410-langpack.tar.gz Now the squid complains about missing langfiles for de-de. Now i copied the the .../errors/de directory to .../errors/de-de and everything works

Re: [squid-users] squid + clamav

2009-04-10 Thread Russell Suter
Ramzi, I'm using HAVP as a cache peer and it is working quite nicely: http://www.server-side.de/ -- Russ Ramzi Abdallah wrote: Hi, I am using Squid Version 3.0.STABLE13 and ClamAV 0.95.1 all running on Fedora core 9. I would like to know if there is a reliable way to configure squid to use

Re: [squid-users] Initial webpage before surfing on squid

2009-04-10 Thread Chris Robertson
Jorge Bastos wrote: Ops! Forgive me Chris, There's the squid_session on debian too, didn't saw it, sorry. I now need a bit of help on the webpage with this parameters: --- deny_info http://your.server/bannerpage?url=%s session Then set up http://your.server/bannerpage to display a

[squid-users] Need help with rewrite function

2009-04-10 Thread Error403
Hello, I've been using Squid for quite some time to help my friends and family reduce on their internet usage bill. However, my squid server is getting old and I feel like I'll need their cooperation to help me buy another one. So I got this idea... Why not change all the url referees for my

Re: [squid-users] 3.1.0.7 and langpack

2009-04-10 Thread Amos Jeffries
Florian wrote: Hello List, i installed squid 3.1.0.7. Squid missed the german langfiles and so i added the actual langpack: squid-3.HEAD-20090410-langpack.tar.gz Now the squid complains about missing langfiles for de-de. Now i copied the the .../errors/de directory to .../errors/de-de

Re: [squid-users] -D obsolete?

2009-04-10 Thread Amos Jeffries
Florian wrote: Hello List, i installed squid 3.1.0.7. When i start the squid it writes to the screen: Starting squid: 2009/04/10 22:21:12| WARNING: -D command-line option is obsolete. The manpage for squid_3.1.0.7 knows the -D Option. How to disable the initial DNS-Tests? Is the manpage

Re: [squid-users] Config for multiplexing non-caching proxy

2009-04-10 Thread Amos Jeffries
Chris Woodfield wrote: So now that this behavior has a name, I looked and noticed that per the 2.7 docs, collapsed_forwarding defaults to off, and isn't enabled in our config either. Does running squid in reverse proxy mode implicitly turn this on? Yes. It's designed for primary use in