Re: [squid-users] A little help with squid and e-cap

2015-02-12 Thread Luis Miguel Silva
Thanks Amos! I understand it loads a library (probably only once) but, what about the actual ecap service object? Does it load once per page request? Or does it pre-load it every time? The reason why I'm asking this is that I would like to create a ecap modifier service that reads a big list

[squid-users] A little help with squid and e-cap

2015-02-11 Thread Luis Miguel Silva
Dear all, This might not be the ideal place to ask questions about e-cap but, since e-cap's mailing list is not working, I decided to ask my question here. So, here goes: - *My ecap service only seems to work on some pages*... -- I've added the following configuration to my squid.conf:

Re: [squid-users] light weight ICAP server that isn't dead :o)

2015-02-10 Thread Luis Miguel Silva
wrote: On 02/10/2015 01:00 AM, Luis Miguel Silva wrote: The most interesting one seems to be C-ICAP but I don't like that it hasn't even reached a 1.0 version... If you believe that it is interesting then at least test it to see if it matches your needs. The version number has to do

Re: [squid-users] Calculate time spent on website (per ip address)

2015-02-10 Thread Luis Miguel Silva
at 2:52 PM, Yuri Voinov yvoi...@gmail.com wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hmmm Access.log? sqTop? 11.02.15 3:50, Luis Miguel Silva пишет: Dear all, I was wondering if there is a built in feature in Squid to calculate the time spent on a website, per ip

Re: [squid-users] Marking outgoing packets

2015-02-10 Thread Luis Miguel Silva
. I'm right, Amos? 11.02.15 3:52, Luis Miguel Silva пишет: Dear all, I just found this REALLY cool feature that allows you to mark packets for Netfilter to then intercept and handle: http://www.squid-cache.org/Doc/config/tcp_outgoing_mark/ What I was wondering was, is there a way

Re: [squid-users] Marking outgoing packets

2015-02-10 Thread Luis Miguel Silva
That's GREAT Amos, Where can I learn more about it? Can you point me to some documentation? I was able to find this here: http://www.eu.squid-cache.org/Doc/config/note/ It does seem that I could use this to note to tag things to an ACL but it isn't clear to me how to use it (especially

Re: [squid-users] Calculate time spent on website (per ip address)

2015-02-10 Thread Luis Miguel Silva
I'm trying to export this information and create pretty reports detailing how much time each device spent online / on each site. I understand I'll probably need to create this myself, I'm just trying to figure out what the state of the art is so I don't waste time on problems that have already

Re: [squid-users] light weight ICAP server that isn't dead :o)

2015-02-09 Thread Luis Miguel Silva
is a simple perl server that tries to implement ICAP. YMMV (attached) On Mon, Feb 09, 2015 at 05:18:36PM -0700, Luis Miguel Silva wrote: Thanks Amos. Well, that's exactly what I'm going to need to develop too (the plugin part), I just found it weird that the C-ICAP service was still

Re: [squid-users] light weight ICAP server that isn't dead :o)

2015-02-09 Thread Luis Miguel Silva
recommend if you wanted to easily create (lightweight) custom filtering capabilities? I'm very inclined to adopt c-icap. Thoughts? Thanks, Luis On Mon, Feb 9, 2015 at 4:40 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 10/02/2015 12:00 p.m., Luis Miguel Silva wrote: Dear all, I'm looking

[squid-users] light weight ICAP server that isn't dead :o)

2015-02-09 Thread Luis Miguel Silva
Dear all, I'm looking for a light weight (opensource) ICAP server project that isn't dead. I need to create some custom content filters but, I'm having a hard time finding an ICAP server that is being actively worked on... In the squid wiki http://wiki.squid-cache.org/Features/ICAP#ICAP_Servers,

[squid-users] fwdNegotiateSSL: Error negotiating SSL connection on FD 110

2015-02-08 Thread Luis Miguel Silva
Hello, Has anybody else ever seen this error in squid's cache.log? root@appliance:~# tail /var/log/squid3/cache.log 2015/02/09 06:51:51 kid1| fwdNegotiateSSL: Error negotiating SSL connection on FD 117: error:0B07C065:x509 certificate routines:X509_STORE_add_cert:cert already in hash table

Re: [squid-users] Blocking Chrome and QUIC

2015-02-07 Thread Luis Miguel Silva
to Squid 3.5.x to fix this? Why would that header fix it, seeing that my problem is that Chrome is bypassing the proxy altogether? Thank you, Luis On Sat, Feb 7, 2015 at 1:17 AM, Amos Jeffries squ...@treenet.co.nz wrote: On 7/02/2015 5:41 p.m., Luis Miguel Silva wrote: Antony, *Comments

Re: [squid-users] Blocking Chrome and QUIC

2015-02-07 Thread Luis Miguel Silva
-p tcp -m tcp --dport 443 -m state --state RELATED,ESTABLISHED -j DROP Hope this will be helpful to someone else! Luis On Sat, Feb 7, 2015 at 8:28 PM, Luis Miguel Silva luismiguelferreirasi...@gmail.com wrote: Ok, I'm using 3.4.9, so I've added that config option to my setup :o) Thanks

Re: [squid-users] Blocking Chrome and QUIC

2015-02-06 Thread Luis Miguel Silva
Antony, *Comments inline!* Thanks, Luis On Fri, Feb 6, 2015 at 3:58 PM, Antony Stone antony.st...@squid.open.source.it wrote: On Friday 06 February 2015 at 22:54:54 (EU time), Luis Miguel Silva wrote: As I started playing around with transparent ssl proxying, I learned that Chrome uses

[squid-users] Blocking Chrome and QUIC

2015-02-06 Thread Luis Miguel Silva
Dear all, This isn't entirely a squid question but more like a transparent proxying question (which I'm hoping you guys will be able to help me with)... As I started playing around with transparent ssl proxying, I learned that Chrome uses an alternate communication (UDP based) protocol called

[squid-users] SSL-bump certificate issues (mostly on Chrome, when accessing Google websites)

2015-02-05 Thread Luis Miguel Silva
Dear all, I recently compiled squid-3.4.9 with ssl-bump support and, although it is working for the most part, I'm having some issues accessing some websites. The behavior is REALLY weird so I'm going to try and describe it the best I can: - If i access https://www.google.com/ in Chrome, I could

[squid-users] dialer downloads bypassing squid acls

2004-07-16 Thread Luis Miguel
Hi all, I am using squid to secure access to the web, using ACLS' I stopped certain people from download dangerous files, the problem is that I cant block certain malicious downloads, this downloads never show the filename on a GET or POST command, the filename is send by the server on a MIME

Re: [squid-users] dialer downloads bypassing squid acls

2004-07-16 Thread Luis Miguel
El viernes, 16 julio del 2004 a las 12:06:07, Scott Phalen escribió: We need a way to filter based on the whole MIME replied header or on select mime fields (filename) to cath this downloads. I created an ACL to block by keyword, e.g. dialerexe. This will block any URL that contains that

Re: [squid-users] Re: dialer downloads bypassing squid acls

2004-07-16 Thread Luis Miguel
El viernes, 16 julio del 2004 a las 02:34:28, Adam Aube escribió: Luis Miguel wrote: El viernes, 16 julio del 2004 a las 12:06:07, Scott Phalen escribió: We need a way to filter based on the whole MIME replied header or on select mime fields (filename) to cath this downloads. I

Re: [squid-users] Re: dialer downloads bypassing squid acls

2004-07-16 Thread Luis Miguel R.
El viernes, 16 julio del 2004 a las 02:25:00, Scott Phalen escribió: Something like dansguardian might do the trick. This is a response from Henrik Nordstrom on a previous mail message: - Are there any way to pass this downloads to the redirector? It is already, but as you noticed there is

[squid-users] Re: Re: dialer downloads bypassing squid acls

2004-07-16 Thread Luis Miguel R.
El viernes, 16 julio del 2004 a las 04:13:26, Adam Aube escribió: Luis Miguel wrote: El viernes, 16 julio del 2004 a las 02:34:28, Adam Aube escribió: Luis Miguel wrote: El viernes, 16 julio del 2004 a las 12:06:07, Scott Phalen escribió: We need a way to filter based on the whole

[squid-users] squid or squidguard for acls

2004-07-15 Thread Luis Miguel
Hi all, I see squid supporting all acls types that squidguard have, are there any good reason to use squidguard for filtering purposes instead of squid acls? Regards.

[squid-users] Problems blocking files for certain sites

2004-07-09 Thread Luis Miguel
Hi, I am using squid + squidguard to block binary downloads (exec,cab, etc), work fine, but for certain sites i can download .exe files: Example: http://www.0texkax7c6hzuidk.com/?login=brokerid=extlogin=url=mediaid=00300214product=1iso_country=ESaol=0; I know that this king of download cant be

[squid-users] problems detecting downloads with Squid

2004-03-15 Thread Luis Miguel
Hi all, I am using Squid 2.5.4-3 on linux, I am using squidguard as redirector to block all windows executables, all is working fine except for some webs that bypass squid, the .exe file dont show in the log files and the user can download it using the browser. The only log squid generates is: