[squid-users] Client randomly reloads pages every second - cache/parent issue?

2012-11-06 Thread Stefan Bauer
Dear Users/Developers, we're having the following squid structure in our environment: Parent-Proxy1+2 | DMZ | Child-Proxy1+2 | | Clients We notice quite often the case where the client/browser is automatically starting to refresh a random page every second for unknown reasons. We're unsure

Re: [squid-users] Client randomly reloads pages every second - cache/parent issue?

2012-11-06 Thread Amos Jeffries
On 6/11/2012 10:39 p.m., Stefan Bauer wrote: Dear Users/Developers, we're having the following squid structure in our environment: Parent-Proxy1+2 | DMZ | Child-Proxy1+2 | | Clients We notice quite often the case where the client/browser is automatically starting to refresh a random page

[squid-users] Bypassing Proxy or SSL bump for specific IPs

2012-11-06 Thread Sharon Sahar
Hello, There are some scenarios, like connection to app store, where certain SSL connections do not work well with the SSL Bump features + dynamic cert generation. For such connections, is there an option to: 1. Disable SSL Bump for certain domains / IPs? 2. Disable squid for certain domains /

Re: [squid-users] Bypassing Proxy or SSL bump for specific IPs

2012-11-06 Thread Eliezer Croitoru
On 11/6/2012 4:01 PM, Sharon Sahar wrote: Hello, There are some scenarios, like connection to app store, where certain SSL connections do not work well with the SSL Bump features + dynamic cert generation. For such connections, is there an option to: 1. Disable SSL Bump for certain domains /

Re: [squid-users] Bypassing Proxy or SSL bump for specific IPs

2012-11-06 Thread Amm
http://www.squid-cache.org/Doc/config/ssl_bump/ - Original Message - From: Sharon Sahar sharon.sa...@gmail.com For such connections, is there an option to: 1. Disable SSL Bump for certain domains / IPs? 2. Disable squid  for certain domains / IPs?

[squid-users] Getting connection port with ICAP or eCAP

2012-11-06 Thread Sharon Sahar
Hi, I understood that when using ICAP or eCAP, you basically receive the response and request body and headers, and there is an option to direct squid to send the client ip as well. I wonder, is there a way to instruct squid to send the listening port on which this client connection was

Re: [squid-users] Getting connection port with ICAP or eCAP

2012-11-06 Thread Eliezer Croitoru
On 11/6/2012 5:09 PM, Sharon Sahar wrote: Hi, I understood that when using ICAP or eCAP, you basically receive the response and request body and headers, and there is an option to direct squid to send the client ip as well. I wonder, is there a way to instruct squid to send the listening port

[squid-users] Squid TPROXY and Bonding LACP

2012-11-06 Thread Marcin Czupryniak
Hello to all, since today I've started to replace my bonding mode from balance-alb to 802.3ad (finally got 2 new stackable switches!) and SQUID stopped to work... I've just replaced the bonding option mode=balance-alb to mode=802.3ad and several related, restarted the machine and boom! Squid is

Re: [squid-users] Squid TPROXY and Bonding LACP

2012-11-06 Thread Eliezer Croitoru
On 11/6/2012 9:50 PM, Marcin Czupryniak wrote: Hello to all, since today I've started to replace my bonding mode from balance-alb to 802.3ad (finally got 2 new stackable switches!) and SQUID stopped to work... I've just replaced the bonding option mode=balance-alb to mode=802.3ad and several

[squid-users] Re: Squid TPROXY and Bonding LACP

2012-11-06 Thread Marcin Czupryniak
Sorry for the spam, apparently it was my mistake. I left a forgotten script handle the necessary kernel modifications for me and didn't update the reference to the interface name, which was moved from bond1 to bond0. Thanks Elezier for your reply Hello to all, since today I've started to

Re: [squid-users] Getting connection port with ICAP or eCAP

2012-11-06 Thread Amos Jeffries
On 07.11.2012 04:20, Eliezer Croitoru wrote: On 11/6/2012 5:09 PM, Sharon Sahar wrote: Hi, I understood that when using ICAP or eCAP, you basically receive the response and request body and headers, and there is an option to direct squid to send the client ip as well. I wonder, is there a way

[squid-users] doubt squid message log TCP_MISS/403

2012-11-06 Thread spiderslack
Hi all, What diference between message TCP_MISS/403 and TCP_DENIED/403. My file logs its displaying this message TCP_MISS/403. that when I have a rule allowing all access http_access allow all. Any idea

Re: [squid-users] doubt squid message log TCP_MISS/403

2012-11-06 Thread Amos Jeffries
On 07.11.2012 12:00, spiderslack wrote: Hi all, What diference between message TCP_MISS/403 and TCP_DENIED/403. My file logs its displaying this message TCP_MISS/403. that when I have a rule allowing all access http_access allow all. Any idea See the definition of what each part of those