Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-17 Thread Yuri Voinov 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
 
Heh, qos need to be configured with squid.conf to be something different
from 0x0 :)


18.05.16 2:40, J Green пишет:
> That could work, I would just need to know at some point, if this event was 
> triggered.
>
> Been playing with %st , %>qos , & %
> Would another way to go about this be to log %Se , for Squid errors? 
In this case, ERR_TOO_BIG ?  Couldn't get this option to work either.
>
> This implementation of Squid is w/in pfSense, so it seems I have
limited options for logging, etc.
>
> Thank you.
>
>
>
> On Tue, May 17, 2016 at 7:14 AM, Amos Jeffries > wrote:
>
> On 17/05/2016 6:37 a.m., J Green wrote:
> > Re logging, does this eventually get logged by Squid, somewhere?
> >
>
> I assume by "this" you mean the TOS values?
>
> There are the %>qos and %
> Amos
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org

> http://lists.squid-cache.org/listinfo/squid-users
>
>
>
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXO4TpAAoJENNXIZxhPexGGhYIAMAVOr1JS7gnQBaPlTfeXDMn
nFzOy+j2Bf9il+Ptnd1JdIC7l0bOwoa4EpckHhfp9C67nK+71ZlpNpFtgQndt/AU
j3CDzXcHn/7cuIFR1nhcDrtV4RKPZCvr/uOVvU2RdqboNatiSUWviXZgQzT3B81e
Akf0llrk3Bc7M05z4bOuE58fysNSzh++kGf/nNyUsspnBv8msMwG+kdmxS4HRxz5
S7JrlcEvxnUjC28ObJsWLsY7xwf/Q5J4Q3KSKU9MCcrws6chczhNSTIe48VOi5XF
vrhMLsevcoI9mO23TU7EcTvVGI6Q31stdAJiph69nR3JOzZZEnth0/12+3rK7pA=
=esCB
-END PGP SIGNATURE-



0x613DEC46.asc
Description: application/pgp-keys
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-17 Thread J Green 
That could work, I would just need to know at some point, if this event was
triggered.

Been playing with %st , %>qos , & % wrote:

> On 17/05/2016 6:37 a.m., J Green wrote:
> > Re logging, does this eventually get logged by Squid, somewhere?
> >
>
> I assume by "this" you mean the TOS values?
>
> There are the %>qos and %
> Amos
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-17 Thread Amos Jeffries 
On 17/05/2016 6:37 a.m., J Green wrote:
> Re logging, does this eventually get logged by Squid, somewhere?
> 

I assume by "this" you mean the TOS values?

There are the %>qos and %http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-16 Thread Amos Jeffries 

On 2016-05-17 07:49, J Green wrote:

Sorry, I was looking for logging of traffic management events, where
maximum download/upload size has been violated.  Thank you.



The Squid native format logs size of things delivered to the client, not 
the upload/request size.


You will need to define a custom log format. See the "SIZE COUNTERS" 
section of  for the 
available size measurement codes. You probably want %st.


And as Alex said tunnels and large uploads will not be logged and 
reported until they are finished. You cannot catch someone in the act 
using logs.


Amos

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-16 Thread Alex Rousskov 
On 05/16/2016 01:49 PM, J Green wrote:
> Sorry, I was looking for logging of traffic management events, where
> maximum download/upload size has been violated.

When it comes to logging, I recommend that you think in terms of
transactions rather than traffic management events because Squid logs
transactions, not events (except for extraordinary events logged in
cache.log that should not be abused for your purposes).

If Squid abnormally terminates a transaction for any reason, including
exceeding size restrictions, the corresponding access log entry should
reflect that. I do not know whether the logged details would be
sufficient to identify the particular events you are interested in.


Furthermore, if you can express "maximum download/upload size has been
violated" condition using existing Squid ACLs, then you can log all
transactions that meet that condition to a special access log (and/or
log no other transactions).

  http://www.squid-cache.org/Doc/config/access_log/

If you cannot express that condition using existing Squid ACLs, you may
facilitate adding new Squid ACLs that would allow you to do so. If you
have to go this route, please define exactly what transactions each new
ACLs will match. The more transactions an ACL can apply to (i.e., can be
evaluated against), the better.

Alex.


> On Mon, May 16, 2016 at 12:39 PM, Alex Rousskov wrote:
> 
> On 05/16/2016 12:37 PM, J Green wrote:
> > Re logging, does this eventually get logged by Squid, somewhere?
> 
> All transactions accessing Squid must be logged in access.log. If a
> transaction is not logged, it is a Squid bug.
> 
> Please note that Squid logs transactions when they complete, not when
> they start. Thus, tunneled transactions should be logged when the tunnel
> is closed, which may take a very long time in some cases.
> 
> Alex.
> 
> 

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-16 Thread J Green 
Sorry, I was looking for logging of traffic management events, where
maximum download/upload size has been violated.  Thank you.

On Mon, May 16, 2016 at 12:39 PM, Alex Rousskov <
rouss...@measurement-factory.com> wrote:

> On 05/16/2016 12:37 PM, J Green wrote:
> > Re logging, does this eventually get logged by Squid, somewhere?
>
> All transactions accessing Squid must be logged in access.log. If a
> transaction is not logged, it is a Squid bug.
>
> Please note that Squid logs transactions when they complete, not when
> they start. Thus, tunneled transactions should be logged when the tunnel
> is closed, which may take a very long time in some cases.
>
> Alex.
>
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-16 Thread Alex Rousskov 
On 05/16/2016 12:37 PM, J Green wrote:
> Re logging, does this eventually get logged by Squid, somewhere?

All transactions accessing Squid must be logged in access.log. If a
transaction is not logged, it is a Squid bug.

Please note that Squid logs transactions when they complete, not when
they start. Thus, tunneled transactions should be logged when the tunnel
is closed, which may take a very long time in some cases.

Alex.
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-16 Thread J Green 
Re logging, does this eventually get logged by Squid, somewhere?

For this implementation, I was going to use pfSense.  Turns out that Sarg
is no longer included in the package list for pfSense (current version).



On Tue, May 10, 2016 at 2:43 PM, J Green <corpengin...@gmail.com> wrote:

> Very interesting, thank you both.
>
> On Tue, May 10, 2016 at 2:23 PM, Yuri Voinov <yvoi...@gmail.com> wrote:
>
>>
>> -BEGIN PGP SIGNED MESSAGE-
>> Hash: SHA256
>>
>>
>>
>> 11.05.16 2:57, Eliezer Croitoru пишет:
>> >
>> > Hey,
>> >
>> >
>> >
>> > You can always use a TOS from squid to mark connections and\or users
>> and to somehow create some policy case on that.
>>
>> Sure, Eliezer. I've forgot about TOS. Good point.
>> >
>> > I have used more then once the Linux "tc" to "jail" a user which was
>> abusing his unbound bandwidth policy.
>> >
>> > I do not like the idea but I have asked couple networking experts about
>> the most used approach compared to the most efficient and it's seems pretty
>> reasonable from the business aspect of networking to slow(not hog) a user.
>> > Specifically there are places which defines the Internet as a WEB only
>> ie port 80 and 443 and for HTTP only traffic.
>> >
>> > For these purposes squid is great while there are other approaches to
>> the subject.
>> >
>> >
>> >
>> > Eliezer
>> >
>> >
>> >
>> > 
>> >
>> > Eliezer Croitoru <http://ngtech.co.il/lmgtfy/>
>> <http://ngtech.co.il/lmgtfy/>
>> > Linux System Administrator
>> > Mobile: +972-5-28704261
>> > Email: elie...@ngtech.co.il
>> >
>> >
>> >
>> > *From:*squid-users [mailto:squid-users-boun...@lists.squid-cache.org
>> <squid-users-boun...@lists.squid-cache.org>] *On Behalf Of *J Green
>> > *Sent:* Tuesday, May 10, 2016 8:42 PM
>> > *To:* Yuri Voinov
>> > *Cc:* squid-users@lists.squid-cache.org
>> > *Subject:* Re: [squid-users] Can Traffic Management Settings be
>> configured for other TCP protocols?
>> >
>> >
>> >
>> > That is fair, re intended use.  But yes, management want to know if
>> users are attempting to circumvent policy.  Re analyzing logs, I did not
>> see this logged anywhere.  Is there perhaps a debug mode which I need to
>> enable?
>> >
>> > Thank you.
>> >
>> >
>> >
>> > On Tue, May 10, 2016 at 10:29 AM, Yuri Voinov <yvoi...@gmail.com
>> <mailto:yvoi...@gmail.com> <yvoi...@gmail.com>> wrote:
>> >
>> >
>> > First, upload is PUT method usage. Most common HTTP/HTTPS is GET/HEAD
>> methods.
>> >
>> > Second, logging of all things is not my goal.
>> >
>> > For me, it is sufficient that the restrictions imposed by me in
>> accordance with the policy. The amount of downloads for my count analyzers
>> logs, if management is interesting to read the reports independently.
>> >
>> > 10.05.16 23:25, J Green пишет:
>> > > So back to the intended use cases for HTTP, HTTPS, & FTP , how can
>> you log violations of maximum download/upload size?  I see an error message
>> generated on the client system, but not w/in Squid.  Thank you.
>> >
>> > > On Mon, May 9, 2016 at 10:12 AM, Yuri Voinov <yvoi...@gmail.com
>> <mailto:yvoi...@gmail.com> <yvoi...@gmail.com> <mailto:yvoi...@gmail.com>
>> <yvoi...@gmail.com> <mailto:yvoi...@gmail.com> <yvoi...@gmail.com>>
>> wrote:
>> >
>> >
>> > > Squid is not a proxy server every imaginable the TCP-usage protocol.
>> >
>> > > AFAIK HTTP/HTTPS/FTP. That's all, folks.
>> >
>> >
>> > > 09.05.16 23:07, J Green пишет:
>> > > > Hello all:
>> >
>> >
>> >
>> > >   > Can Traffic Management Settings be configured for TCP
>> > >   protocols other than HTTP?
>> >
>> >
>> >
>> > >   > Would like to limit maximum upload and download sizes for
>> > >   other TCP protocols:  SMB, NFS, FTP, and RDP.
>> >
>> >
>> >
>> > >   > Is this possible?  If so, how?
>> >
>> >
>> >
>> > >   > Thank you.
>> >
>> >
>> >
>> >

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-10 Thread J Green 
Very interesting, thank you both.

On Tue, May 10, 2016 at 2:23 PM, Yuri Voinov <yvoi...@gmail.com> wrote:

>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
>
>
> 11.05.16 2:57, Eliezer Croitoru пишет:
> >
> > Hey,
> >
> >
> >
> > You can always use a TOS from squid to mark connections and\or users and
> to somehow create some policy case on that.
>
> Sure, Eliezer. I've forgot about TOS. Good point.
> >
> > I have used more then once the Linux "tc" to "jail" a user which was
> abusing his unbound bandwidth policy.
> >
> > I do not like the idea but I have asked couple networking experts about
> the most used approach compared to the most efficient and it's seems pretty
> reasonable from the business aspect of networking to slow(not hog) a user.
> > Specifically there are places which defines the Internet as a WEB only
> ie port 80 and 443 and for HTTP only traffic.
> >
> > For these purposes squid is great while there are other approaches to
> the subject.
> >
> >
> >
> > Eliezer
> >
> >
> >
> > 
> >
> > Eliezer Croitoru <http://ngtech.co.il/lmgtfy/>
> <http://ngtech.co.il/lmgtfy/>
> > Linux System Administrator
> > Mobile: +972-5-28704261
> > Email: elie...@ngtech.co.il
> >
> >
> >
> > *From:*squid-users [mailto:squid-users-boun...@lists.squid-cache.org
> <squid-users-boun...@lists.squid-cache.org>] *On Behalf Of *J Green
> > *Sent:* Tuesday, May 10, 2016 8:42 PM
> > *To:* Yuri Voinov
> > *Cc:* squid-users@lists.squid-cache.org
> > *Subject:* Re: [squid-users] Can Traffic Management Settings be
> configured for other TCP protocols?
> >
> >
> >
> > That is fair, re intended use.  But yes, management want to know if
> users are attempting to circumvent policy.  Re analyzing logs, I did not
> see this logged anywhere.  Is there perhaps a debug mode which I need to
> enable?
> >
> > Thank you.
> >
> >
> >
> > On Tue, May 10, 2016 at 10:29 AM, Yuri Voinov <yvoi...@gmail.com
> <mailto:yvoi...@gmail.com> <yvoi...@gmail.com>> wrote:
> >
> >
> > First, upload is PUT method usage. Most common HTTP/HTTPS is GET/HEAD
> methods.
> >
> > Second, logging of all things is not my goal.
> >
> > For me, it is sufficient that the restrictions imposed by me in
> accordance with the policy. The amount of downloads for my count analyzers
> logs, if management is interesting to read the reports independently.
> >
> > 10.05.16 23:25, J Green пишет:
> > > So back to the intended use cases for HTTP, HTTPS, & FTP , how can you
> log violations of maximum download/upload size?  I see an error message
> generated on the client system, but not w/in Squid.  Thank you.
> >
> > > On Mon, May 9, 2016 at 10:12 AM, Yuri Voinov <yvoi...@gmail.com
> <mailto:yvoi...@gmail.com> <yvoi...@gmail.com> <mailto:yvoi...@gmail.com>
> <yvoi...@gmail.com> <mailto:yvoi...@gmail.com> <yvoi...@gmail.com>> wrote:
> >
> >
> > > Squid is not a proxy server every imaginable the TCP-usage protocol.
> >
> > > AFAIK HTTP/HTTPS/FTP. That's all, folks.
> >
> >
> > > 09.05.16 23:07, J Green пишет:
> > > > Hello all:
> >
> >
> >
> > >   > Can Traffic Management Settings be configured for TCP
> > >   protocols other than HTTP?
> >
> >
> >
> > >   > Would like to limit maximum upload and download sizes for
> > >   other TCP protocols:  SMB, NFS, FTP, and RDP.
> >
> >
> >
> > >   > Is this possible?  If so, how?
> >
> >
> >
> > >   > Thank you.
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > >   > ___
> >
> > >   > squid-users mailing list
> >
> > >   > squid-users@lists.squid-cache.org
> <mailto:squid-users@lists.squid-cache.org>
> <squid-users@lists.squid-cache.org>
> <mailto:squid-users@lists.squid-cache.org>
> <squid-users@lists.squid-cache.org>
> <mailto:squid-users@lists.squid-cache.org>
> <squid-users@lists.squid-cache.org>
> >
> > >   > http://lists.squid-cache.org/listinfo/squid-users
> >
> >
> >
> > > ___
> > > squid-users mailing list
> > > squid-users@lists.squid-cache

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-10 Thread Yuri Voinov 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
 


11.05.16 2:57, Eliezer Croitoru пишет:
>
> Hey,
>
> 
>
> You can always use a TOS from squid to mark connections and\or users
and to somehow create some policy case on that.

Sure, Eliezer. I've forgot about TOS. Good point.
>
> I have used more then once the Linux "tc" to "jail" a user which was
abusing his unbound bandwidth policy.
>
> I do not like the idea but I have asked couple networking experts
about the most used approach compared to the most efficient and it's
seems pretty reasonable from the business aspect of networking to
slow(not hog) a user.
> Specifically there are places which defines the Internet as a WEB only
ie port 80 and 443 and for HTTP only traffic.
>
> For these purposes squid is great while there are other approaches to
the subject.
>
> 
>
> Eliezer
>
> 
>
> 
>
> Eliezer Croitoru <http://ngtech.co.il/lmgtfy/>
> Linux System Administrator
> Mobile: +972-5-28704261
> Email: elie...@ngtech.co.il
>
> 
>
> *From:*squid-users [mailto:squid-users-boun...@lists.squid-cache.org]
*On Behalf Of *J Green
> *Sent:* Tuesday, May 10, 2016 8:42 PM
> *To:* Yuri Voinov
> *Cc:* squid-users@lists.squid-cache.org
> *Subject:* Re: [squid-users] Can Traffic Management Settings be
configured for other TCP protocols?
>
> 
>
> That is fair, re intended use.  But yes, management want to know if
users are attempting to circumvent policy.  Re analyzing logs, I did not
see this logged anywhere.  Is there perhaps a debug mode which I need to
enable?
>
> Thank you.
>
> 
>
> On Tue, May 10, 2016 at 10:29 AM, Yuri Voinov <yvoi...@gmail.com
<mailto:yvoi...@gmail.com>> wrote:
>
>
> First, upload is PUT method usage. Most common HTTP/HTTPS is GET/HEAD
methods.
>
> Second, logging of all things is not my goal.
>
> For me, it is sufficient that the restrictions imposed by me in
accordance with the policy. The amount of downloads for my count
analyzers logs, if management is interesting to read the reports
independently.
>
> 10.05.16 23:25, J Green пишет:
> > So back to the intended use cases for HTTP, HTTPS, & FTP , how can
you log violations of maximum download/upload size?  I see an error
message generated on the client system, but not w/in Squid.  Thank you.
>
> > On Mon, May 9, 2016 at 10:12 AM, Yuri Voinov <yvoi...@gmail.com
<mailto:yvoi...@gmail.com> <mailto:yvoi...@gmail.com>
<mailto:yvoi...@gmail.com>> wrote:
>
>
> > Squid is not a proxy server every imaginable the TCP-usage protocol.
>
> > AFAIK HTTP/HTTPS/FTP. That's all, folks.
>
>
> > 09.05.16 23:07, J Green пишет:
> > > Hello all:
>
>
>
> >   > Can Traffic Management Settings be configured for TCP
> >   protocols other than HTTP?
>
>
>
> >   > Would like to limit maximum upload and download sizes for
> >   other TCP protocols:  SMB, NFS, FTP, and RDP.
>
>
>
> >   > Is this possible?  If so, how?
>
>
>
> >   > Thank you.
>
>
>
>
>
>
>
>
>
> >   > ___
>
> >   > squid-users mailing list
>
> >   > squid-users@lists.squid-cache.org
<mailto:squid-users@lists.squid-cache.org>
<mailto:squid-users@lists.squid-cache.org>
<mailto:squid-users@lists.squid-cache.org>
>
> >   > http://lists.squid-cache.org/listinfo/squid-users
>
>
>
> > ___
> > squid-users mailing list
> > squid-users@lists.squid-cache.org
<mailto:squid-users@lists.squid-cache.org>
<mailto:squid-users@lists.squid-cache.org>
<mailto:squid-users@lists.squid-cache.org>
> > http://lists.squid-cache.org/listinfo/squid-users
>
>
>
>
> 
>

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXMlFEAAoJENNXIZxhPexGO6AH/RsDrJKihobs93E9OLhT7uuB
6KjX5eSfcNzYmTX1QsTn4SDf2l3HaItZ5jPuSFGSBMTuGo0RaHc0Y+YIcRO8CuOG
PQDBPXff2Vg16o06Ty78XLUAfWUr1q4uu6G5Vp8F2cLWSjk7thuFu9XoYe5Q2z1V
yN99aV/Kol+Om//eSPOf3hre3ONYRFn2lR+GJET9QNfogiRakpFOzeeGp3fXQgzA
S6n2MfhyhYRO3lDtjGcrWDoR5Tz8OdKlReuwHqtkuQi/OA95O9CpfwnEnORGLVN6
G4H0pG7MrXBbl5zRhspkr9BNvtunkFsSnUlcUhBtKj1RhsC7H9g7lvkE8QKphIU=
=kDA0
-END PGP SIGNATURE-



0x613DEC46.asc
Description: application/pgp-keys
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-10 Thread Yuri Voinov 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
 


11.05.16 2:11, J Green пишет:
> Fair criticisms, yes.  But an interesting problem, no?   And I think I am 
> close to getting something
somewhat functional, using various pieces of hardware and software.  Is
it a slick solution?  Not at all.  But it just might work more or less. 
Small could be 10MB.  Large is larger.

Yes, this is interesting and a bit complex problem.

In many cases it is necessary to formulate a different formulation of
the problem, or to use a variety of tools.

By the way, today there is no satisfactory solution to the open source
software for access control and accounting is based on it to be used in
conjunction with a SQUID. SAMS has long abandoned. New solutions I
personally have not seen.

>
> On Tue, May 10, 2016 at 1:03 PM, Yuri Voinov > wrote:
>
>
> I think change is posing the problem. "Big" and "small", it seems to
me, is too vague a criterion. Plus direct solution assumes continious
control of each connection at all and accounting at all. What, in my
opinion, a bit crazy.
>
> 11.05.16 1:59, J Green пишет:
> > From what I understand, it is
>   traffic policing, as opposed to traffic shaping.
>
>
>
>   > The goal is to block transfer of large files over various TCP
>   protocols, while allowing small files.
>
>
>
>   > Thank you all, for your input.
>
>
>
>
>
>
>
>   > On Tue, May 10, 2016 at 12:55 PM, Yuri Voinov
>   
 > wrote:
>
>
>
>
>
>   > And, incidentally, smoke manuals - Cisco either enables
>   traffic shaping or limit the speed on ports, protocols, networks,
>   clients and so on. :) As you wish. :)
>
>
>
>   > Its possibilities are limited only version of the software
>   platform, and your ability to smoke manuals. :)
>
>
>
>   > 11.05.16 1:49, Yuri Voinov пишет:
>
>
>
>
>
>
>
>   >   > You can not pull the owl on the globe. )
>
>
>
>
>
>
>
>   >   > By the way, I'm not sure what he was trying to
>   achieve this
>
>   >   :)
>
>
>
>
>
>
>
>
>
>
>
>   >   > 11.05.16 1:45, Adam W. Dace пишет:
>
>
>
>   >   > > Back in the day, I used
>
>
>
>   >   >   "traffic shaping" on the Cisco router to
>   achieve that
>
>   >   sort of
>
>
>
>   >   >   thing.  It actually changes the traffic to
>   fit your
>
>   >   Internet link,
>
>
>
>   >   >   versus limiting per-connection speed.
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>   >   >   > Still, this is off-topic.  Anyways,
>   consult your
>
>   >   CIOS
>
>
>
>   >   >   documentation and good luck!  :)
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>   >   >   > Regards,
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>   >   >   > Adam
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>   >   >   > On Mon, May 9, 2016 at 12:07 PM J Green
>
>
>
>   >   >   
>    
>
>
>
>   >   >   

>    >
wrote:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>   >   >   > Hello all:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>   >   >   > Can Traffic Management Settings be
>   configured
>
>   >   for TCP
>
>
>
>   >   >   protocols other than HTTP?
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>   >   >   > Would like to limit maximum upload
>   and
>
>   >   download sizes for
>
>
>
>   >   >   other TCP protocols:  SMB, NFS, FTP, and
>   RDP.
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>   >   >   > Is this possible?  If so, how?
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>   >   >   > Thank you.
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>   >   >   >   
>
>   >   ___
>
>
>
>
>
>
>
>   >   >   > squid-users mailing list
>
>
>
>
>
>
>
>   >   >   > squid-users@lists.squid-cache.org

>   

>
>
>
>   >   > 
>   

>   

>
>
>
>
>
>
>
>   >   >   >   
>
>   >   http://lists.squid-cache.org/listinfo/squid-users
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>   >   >   >
>   ___
>
>
>
>
>
>
>
>   >   >   > squid-users mailing list
>
>
>
>
>
>
>
>

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-10 Thread J Green 
Fair criticisms, yes.  But an interesting problem, no?   And I think I am
close to getting something somewhat functional, using various pieces of
hardware and software.  Is it a slick solution?  Not at all.  But it just
might work more or less.  Small could be 10MB.  Large is larger.

On Tue, May 10, 2016 at 1:03 PM, Yuri Voinov  wrote:

>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> I think change is posing the problem. "Big" and "small", it seems to me,
> is too vague a criterion. Plus direct solution assumes continious control
> of each connection at all and accounting at all. What, in my opinion, a bit
> crazy.
>
> 11.05.16 1:59, J Green пишет:
> > From what I understand, it is traffic policing, as opposed to traffic
> shaping.
> >
> > The goal is to block transfer of large files over various TCP protocols,
> while allowing small files.
> >
> > Thank you all, for your input.
> >
> >
> >
> > On Tue, May 10, 2016 at 12:55 PM, Yuri Voinov   > wrote:
> >
> >
> > And, incidentally, smoke manuals - Cisco either enables traffic shaping
> or limit the speed on ports, protocols, networks, clients and so on. :) As
> you wish. :)
> >
> > Its possibilities are limited only version of the software platform, and
> your ability to smoke manuals. :)
> >
> > 11.05.16 1:49, Yuri Voinov пишет:
> >
> >
> >
> >   > You can not pull the owl on the globe. )
> >
> >
> >
> >   > By the way, I'm not sure what he was trying to achieve this
> >   :)
> >
> >
> >
> >
> >
> >   > 11.05.16 1:45, Adam W. Dace пишет:
> >
> >   > > Back in the day, I used
> >
> >   >   "traffic shaping" on the Cisco router to achieve that
> >   sort of
> >
> >   >   thing.  It actually changes the traffic to fit your
> >   Internet link,
> >
> >   >   versus limiting per-connection speed.
> >
> >
> >
> >
> >
> >
> >
> >   >   > Still, this is off-topic.  Anyways, consult your
> >   CIOS
> >
> >   >   documentation and good luck!  :)
> >
> >
> >
> >
> >
> >
> >
> >   >   > Regards,
> >
> >
> >
> >
> >
> >
> >
> >   >   > Adam
> >
> >
> >
> >
> >
> >
> >
> >   >   > On Mon, May 9, 2016 at 12:07 PM J Green
> >
> >   >   
> 
> >
> >   >    
>  > wrote:
> >
> >
> >
> >
> >
> >
> >
> >   >   > Hello all:
> >
> >
> >
> >
> >
> >
> >
> >   >   > Can Traffic Management Settings be configured
> >   for TCP
> >
> >   >   protocols other than HTTP?
> >
> >
> >
> >
> >
> >
> >
> >   >   > Would like to limit maximum upload and
> >   download sizes for
> >
> >   >   other TCP protocols:  SMB, NFS, FTP, and RDP.
> >
> >
> >
> >
> >
> >
> >
> >   >   > Is this possible?  If so, how?
> >
> >
> >
> >
> >
> >
> >
> >   >   > Thank you.
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >   >   >
> >   ___
> >
> >
> >
> >   >   > squid-users mailing list
> >
> >
> >
> >   >   > squid-users@lists.squid-cache.org
> 
> 
> >
> >   >   
> 
> 
> 
> >
> >
> >
> >   >   >
> >   http://lists.squid-cache.org/listinfo/squid-users
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >   >   > ___
> >
> >
> >
> >   >   > squid-users mailing list
> >
> >
> >
> >   >   > squid-users@lists.squid-cache.org
> 
> 
> >
> >
> >
> >   >   > http://lists.squid-cache.org/listinfo/squid-users
> >
> >
> >
> >
> >
> >
> >
> > ___
> > squid-users mailing list
> > squid-users@lists.squid-cache.org
> 
> 
> > http://lists.squid-cache.org/listinfo/squid-users
> >
> >
>
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2
>
> iQEcBAEBCAAGBQJXMj6CAAoJENNXIZxhPexG4P4H/iampGAgQXQik3ZgbDwgDn22
> CNB4/KFcrv1Sdjst6b3pzko/XRpvOhuYSbJ2tUOfasP7gF5bTqUTYl1jCWxd07kA
> VXmSbY5ynM3hgHVZowiL/6wksxQyTiqNEA86ae77gDig0SWu8NbNHZ058iN/sCRn
> 9F363nYdpj4LffHYXe16XLn/lGLF3yG0kpDZI+dSVy2QS57aOisc0lADTbKvzSOJ
> RpfUfUI4EHcQoOVYlk91c6LckZGxy6N1lYEQbdCy+Y0OwM25crCaiaEuiaB8RTSi
> kKcJk16L5UFGYQiKchyUq9r73D4+0hLlloOTCJ+HwNYQzbLFPn+rTrLo6tI47pg=
> =Y3mu
> -END PGP SIGNATURE-
>
>
___
squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-10 Thread Yuri Voinov 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
 
I think change is posing the problem. "Big" and "small", it seems to me,
is too vague a criterion. Plus direct solution assumes continious
control of each connection at all and accounting at all. What, in my
opinion, a bit crazy.

11.05.16 1:59, J Green пишет:
> From what I understand, it is traffic policing, as opposed to traffic shaping.
>
> The goal is to block transfer of large files over various TCP
protocols, while allowing small files.
>
> Thank you all, for your input.
>
> 
>
> On Tue, May 10, 2016 at 12:55 PM, Yuri Voinov > wrote:
>
>
> And, incidentally, smoke manuals - Cisco either enables traffic
shaping or limit the speed on ports, protocols, networks, clients and so
on. :) As you wish. :)
>
> Its possibilities are limited only version of the software platform,
and your ability to smoke manuals. :)
>
> 11.05.16 1:49, Yuri Voinov пишет:
>
>
>
>   > You can not pull the owl on the globe. )
>
>
>
>   > By the way, I'm not sure what he was trying to achieve this
>   :)
>
>
>
>
>
>   > 11.05.16 1:45, Adam W. Dace пишет:
>
>   > > Back in the day, I used
>
>   >   "traffic shaping" on the Cisco router to achieve that
>   sort of
>
>   >   thing.  It actually changes the traffic to fit your
>   Internet link,
>
>   >   versus limiting per-connection speed.
>
>
>
>
>
>
>
>   >   > Still, this is off-topic.  Anyways, consult your
>   CIOS
>
>   >   documentation and good luck!  :)
>
>
>
>
>
>
>
>   >   > Regards,
>
>
>
>
>
>
>
>   >   > Adam
>
>
>
>
>
>
>
>   >   > On Mon, May 9, 2016 at 12:07 PM J Green
>
>   >   
>
>   >   
> wrote:
>
>
>
>
>
>
>
>   >   > Hello all:
>
>
>
>
>
>
>
>   >   > Can Traffic Management Settings be configured
>   for TCP
>
>   >   protocols other than HTTP?
>
>
>
>
>
>
>
>   >   > Would like to limit maximum upload and
>   download sizes for
>
>   >   other TCP protocols:  SMB, NFS, FTP, and RDP.
>
>
>
>
>
>
>
>   >   > Is this possible?  If so, how?
>
>
>
>
>
>
>
>   >   > Thank you.
>
>
>
>
>
>
>
>
>
>
>
>   >   >   
>   ___
>
>
>
>   >   > squid-users mailing list
>
>
>
>   >   > squid-users@lists.squid-cache.org

>
>   >   

>
>
>
>   >   >   
>   http://lists.squid-cache.org/listinfo/squid-users
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>   >   > ___
>
>
>
>   >   > squid-users mailing list
>
>
>
>   >   > squid-users@lists.squid-cache.org

>
>
>
>   >   > http://lists.squid-cache.org/listinfo/squid-users
>
>
>
>
>
>
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org

> http://lists.squid-cache.org/listinfo/squid-users
>
>

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXMj6CAAoJENNXIZxhPexG4P4H/iampGAgQXQik3ZgbDwgDn22
CNB4/KFcrv1Sdjst6b3pzko/XRpvOhuYSbJ2tUOfasP7gF5bTqUTYl1jCWxd07kA
VXmSbY5ynM3hgHVZowiL/6wksxQyTiqNEA86ae77gDig0SWu8NbNHZ058iN/sCRn
9F363nYdpj4LffHYXe16XLn/lGLF3yG0kpDZI+dSVy2QS57aOisc0lADTbKvzSOJ
RpfUfUI4EHcQoOVYlk91c6LckZGxy6N1lYEQbdCy+Y0OwM25crCaiaEuiaB8RTSi
kKcJk16L5UFGYQiKchyUq9r73D4+0hLlloOTCJ+HwNYQzbLFPn+rTrLo6tI47pg=
=Y3mu
-END PGP SIGNATURE-



0x613DEC46.asc
Description: application/pgp-keys
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-10 Thread J Green 
>From what I understand, it is traffic policing, as opposed to traffic
shaping.

The goal is to block transfer of large files over various TCP protocols,
while allowing small files.

Thank you all, for your input.



On Tue, May 10, 2016 at 12:55 PM, Yuri Voinov  wrote:

>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> And, incidentally, smoke manuals - Cisco either enables traffic shaping or
> limit the speed on ports, protocols, networks, clients and so on. :) As you
> wish. :)
>
> Its possibilities are limited only version of the software platform, and
> your ability to smoke manuals. :)
>
> 11.05.16 1:49, Yuri Voinov пишет:
>
> >
> > You can not pull the owl on the globe. )
> >
> > By the way, I'm not sure what he was trying to achieve this :)
> >
> >
> > 11.05.16 1:45, Adam W. Dace пишет:
> > > Back in the day, I used
> >   "traffic shaping" on the Cisco router to achieve that sort of
> >   thing.  It actually changes the traffic to fit your Internet link,
> >   versus limiting per-connection speed.
> >
> >
> >
> >   > Still, this is off-topic.  Anyways, consult your CIOS
> >   documentation and good luck!  :)
> >
> >
> >
> >   > Regards,
> >
> >
> >
> >   > Adam
> >
> >
> >
> >   > On Mon, May 9, 2016 at 12:07 PM J Green
> >    >    > wrote:
> >
> >
> >
> >   > Hello all:
> >
> >
> >
> >   > Can Traffic Management Settings be configured for TCP
> >   protocols other than HTTP?
> >
> >
> >
> >   > Would like to limit maximum upload and download sizes for
> >   other TCP protocols:  SMB, NFS, FTP, and RDP.
> >
> >
> >
> >   > Is this possible?  If so, how?
> >
> >
> >
> >   > Thank you.
> >
> >
> >
> >
> >
> >   > ___
> >
> >   > squid-users mailing list
> >
> >   > squid-users@lists.squid-cache.org
> >   
> 
> >
> >   > http://lists.squid-cache.org/listinfo/squid-users
> >
> >
> >
> >
> >
> >
> >
> >   > ___
> >
> >   > squid-users mailing list
> >
> >   > squid-users@lists.squid-cache.org
> >
> >   > http://lists.squid-cache.org/listinfo/squid-users
> >
> >
>
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2
>
> iQEcBAEBCAAGBQJXMjyyAAoJENNXIZxhPexGH+gH/A2Ma7A+LqIP34jWqLK2LUvY
> GLtzDh8KZuHgucg6dXlsCUIP+odUcm1RFhyxDBQMto4J5i+1C3qWQ+AVhj2SaWn7
> RyS3NPAtOAcoN7aAFbghsHXPv9UZVa5AG5qqNkr6HDv9TlpcOWAQK2kzfDQL8TZs
> SBtADRFWYwHpr3lK5bU50E5LYJ0+IePLEuHiltj+Q2hh26zRfixNmIWDr1awxIUP
> izg4rHLg7Zl8i2M3dGW50jf0SGf2sPUm3ZK6W8HLusBv0tsNn1Z/4eVzl9F6n9XE
> nvx5wVLNA4wurZDAuDn8Tca+QeBIbZ78RiAooT+1dxMTmOEY33+PZOykRI8y80U=
> =y3cz
> -END PGP SIGNATURE-
>
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>
>
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-10 Thread Yuri Voinov 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
 
And, incidentally, smoke manuals - Cisco either enables traffic shaping
or limit the speed on ports, protocols, networks, clients and so on. :)
As you wish. :)

Its possibilities are limited only version of the software platform, and
your ability to smoke manuals. :)

11.05.16 1:49, Yuri Voinov пишет:
>
> You can not pull the owl on the globe. )
>
> By the way, I'm not sure what he was trying to achieve this :)
>
>
> 11.05.16 1:45, Adam W. Dace пишет:
> > Back in the day, I used
>   "traffic shaping" on the Cisco router to achieve that sort of
>   thing.  It actually changes the traffic to fit your Internet link,
>   versus limiting per-connection speed.
>
>
>
>   > Still, this is off-topic.  Anyways, consult your CIOS
>   documentation and good luck!  :)
>
>
>
>   > Regards,
>
>
>
>   > Adam
>
>
>
>   > On Mon, May 9, 2016 at 12:07 PM J Green
>      > wrote:
>
>
>
>   > Hello all:
>
>
>
>   > Can Traffic Management Settings be configured for TCP
>   protocols other than HTTP?
>
>
>
>   > Would like to limit maximum upload and download sizes for
>   other TCP protocols:  SMB, NFS, FTP, and RDP.
>
>
>
>   > Is this possible?  If so, how?
>
>
>
>   > Thank you.
>
>
>
>
>
>   > ___
>
>   > squid-users mailing list
>
>   > squid-users@lists.squid-cache.org
>   
>
>   > http://lists.squid-cache.org/listinfo/squid-users
>
>
>
>
>
>
>
>   > ___
>
>   > squid-users mailing list
>
>   > squid-users@lists.squid-cache.org
>
>   > http://lists.squid-cache.org/listinfo/squid-users
>
>

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXMjyyAAoJENNXIZxhPexGH+gH/A2Ma7A+LqIP34jWqLK2LUvY
GLtzDh8KZuHgucg6dXlsCUIP+odUcm1RFhyxDBQMto4J5i+1C3qWQ+AVhj2SaWn7
RyS3NPAtOAcoN7aAFbghsHXPv9UZVa5AG5qqNkr6HDv9TlpcOWAQK2kzfDQL8TZs
SBtADRFWYwHpr3lK5bU50E5LYJ0+IePLEuHiltj+Q2hh26zRfixNmIWDr1awxIUP
izg4rHLg7Zl8i2M3dGW50jf0SGf2sPUm3ZK6W8HLusBv0tsNn1Z/4eVzl9F6n9XE
nvx5wVLNA4wurZDAuDn8Tca+QeBIbZ78RiAooT+1dxMTmOEY33+PZOykRI8y80U=
=y3cz
-END PGP SIGNATURE-



0x613DEC46.asc
Description: application/pgp-keys
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-10 Thread Yuri Voinov 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
 
You can not pull the owl on the globe. )

By the way, I'm not sure what he was trying to achieve this :)


11.05.16 1:45, Adam W. Dace пишет:
> Back in the day, I used "traffic shaping" on the Cisco router to achieve that 
> sort of thing. 
It actually changes the traffic to fit your Internet link, versus
limiting per-connection speed.
>
> Still, this is off-topic.  Anyways, consult your CIOS documentation
and good luck!  :)
>
> Regards,
>
> Adam
>
> On Mon, May 9, 2016 at 12:07 PM J Green > wrote:
>
> Hello all:
>
> Can Traffic Management Settings be configured for TCP protocols
other than HTTP?
>
> Would like to limit maximum upload and download sizes for other
TCP protocols:  SMB, NFS, FTP, and RDP.
>
> Is this possible?  If so, how?
>
> Thank you.
>
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org

> http://lists.squid-cache.org/listinfo/squid-users
>
>
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXMjtlAAoJENNXIZxhPexGUFMIAIMCYqcc72KRyx3Z6brNmq+x
i1eKyhOcUfjnVW+LpJLZBgLQuER3wIdzXF68TBU+9oDl7bsMAfIlu9RH0bvngM+m
/jM16z9qkAcRaeY0iCAn5V/znFQ+9GKL0eC8d17O9DlyVBgiy0xEMrzpUDmfK4wF
dW/UBoOfrAJESbS7uuh9VmBYuFc8Gse+G58fb8G/mwpNgvGxyHHq3tqs0ZSUGUzV
TkwbcS+qU9D3c9sZhlhR+XvqXl6b7vYumB5dVPG5sjgO/CLOsji8wokL0ep3mInG
VnOaDggzCA6sy0jrhd9uR+f1xZvU/AzGwfUJlyIn3hM+3r6cWDPOmkccHDt6cp8=
=qni2
-END PGP SIGNATURE-



0x613DEC46.asc
Description: application/pgp-keys
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-10 Thread Adam W. Dace 
Back in the day, I used "traffic shaping" on the Cisco router to achieve
that sort of thing.  It actually changes the traffic to fit your Internet
link, versus limiting per-connection speed.

Still, this is off-topic.  Anyways, consult your CIOS documentation and
good luck!  :)

Regards,

Adam

On Mon, May 9, 2016 at 12:07 PM J Green  wrote:

> Hello all:
>
> Can Traffic Management Settings be configured for TCP protocols other than
> HTTP?
>
> Would like to limit maximum upload and download sizes for other TCP
> protocols:  SMB, NFS, FTP, and RDP.
>
> Is this possible?  If so, how?
>
> Thank you.
>
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-10 Thread Yuri Voinov 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
 
SARG or SquidAnalyzer, in general, has reports with denied and donwloads
logging.

This information (excluding the access restrictions) are usually not
found in the logs immediately, it takes some processing.

10.05.16 23:41, J Green пишет:
> That is fair, re intended use.  But yes, management want to know if users are 
> attempting to circumvent
policy.  Re analyzing logs, I did not see this logged anywhere.  Is
there perhaps a debug mode which I need to enable?
>
> Thank you.
>
> On Tue, May 10, 2016 at 10:29 AM, Yuri Voinov > wrote:
>
>
> First, upload is PUT method usage. Most common HTTP/HTTPS is GET/HEAD
methods.
>
> Second, logging of all things is not my goal.
>
> For me, it is sufficient that the restrictions imposed by me in
accordance with the policy. The amount of downloads for my count
analyzers logs, if management is interesting to read the reports
independently.
>
> 10.05.16 23:25, J Green пишет:
> > So back to the intended use
>   cases for HTTP, HTTPS, & FTP , how can you log violations of
>   maximum download/upload size?  I see an error message generated on
>   the client system, but not w/in Squid.  Thank you.
>
>
>
>   > On Mon, May 9, 2016 at 10:12 AM, Yuri Voinov
>   
 > wrote:
>
>
>
>
>
>   > Squid is not a proxy server every imaginable the TCP-usage
>   protocol.
>
>
>
>   > AFAIK HTTP/HTTPS/FTP. That's all, folks.
>
>
>
>
>
>   > 09.05.16 23:07, J Green пишет:
>
>   > > Hello all:
>
>
>
>
>
>
>
>   >   > Can Traffic Management Settings be configured for
>   TCP
>
>   >   protocols other than HTTP?
>
>
>
>
>
>
>
>   >   > Would like to limit maximum upload and download
>   sizes for
>
>   >   other TCP protocols:  SMB, NFS, FTP, and RDP.
>
>
>
>
>
>
>
>   >   > Is this possible?  If so, how?
>
>
>
>
>
>
>
>   >   > Thank you.
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>   >   > ___
>
>
>
>   >   > squid-users mailing list
>
>
>
>   >   > squid-users@lists.squid-cache.org

>   

>
>
>
>   >   > http://lists.squid-cache.org/listinfo/squid-users
>
>
>
>
>
>
>
>   > ___
>
>   > squid-users mailing list
>
>   > squid-users@lists.squid-cache.org

>   

>
>   > http://lists.squid-cache.org/listinfo/squid-users
>
>
>
>
>
>
>

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXMh5bAAoJENNXIZxhPexGCBQH/jN03pgdWzZq9mxFlXGYDLmC
L94Fl8RMSGgAInJuB4o/QqMpp69yB1WwHlXfWuohz7R/Ao0nU4PEKFlsdIvYt0Sq
oSLK3VSROJzpBn473M1Dk02FLEG1KfEpJk4DqDACB1W6vshZhwudLcc0gNUSmqC7
go1IFown+hYg3Hw1yDHeDeHsmVxhPkLHnybo9iJ+FsD/xQxRcydPbYefKkVb1x9Z
460wEGNNhCvjxbLXku2nj1t8fzLoMXTnhVqlw7PTIXx1eQb6rgTZzec4pfGukUCU
YtHNQo7+wv+//K9G9DNR3LT/mYPQfeJjDdNw2R6dq9Tl944Z3acMzLqtzW/Ttyw=
=wO1H
-END PGP SIGNATURE-



0x613DEC46.asc
Description: application/pgp-keys
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-10 Thread J Green 
That is fair, re intended use.  But yes, management want to know if users
are attempting to circumvent policy.  Re analyzing logs, I did not see this
logged anywhere.  Is there perhaps a debug mode which I need to enable?

Thank you.

On Tue, May 10, 2016 at 10:29 AM, Yuri Voinov  wrote:

>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> First, upload is PUT method usage. Most common HTTP/HTTPS is GET/HEAD
> methods.
>
> Second, logging of all things is not my goal.
>
> For me, it is sufficient that the restrictions imposed by me in accordance
> with the policy. The amount of downloads for my count analyzers logs, if
> management is interesting to read the reports independently.
>
> 10.05.16 23:25, J Green пишет:
> > So back to the intended use cases for HTTP, HTTPS, & FTP , how can you
> log violations of maximum download/upload size?  I see an error message
> generated on the client system, but not w/in Squid.  Thank you.
> >
> > On Mon, May 9, 2016 at 10:12 AM, Yuri Voinov   > wrote:
> >
> >
> > Squid is not a proxy server every imaginable the TCP-usage protocol.
> >
> > AFAIK HTTP/HTTPS/FTP. That's all, folks.
> >
> >
> > 09.05.16 23:07, J Green пишет:
> > > Hello all:
> >
> >
> >
> >   > Can Traffic Management Settings be configured for TCP
> >   protocols other than HTTP?
> >
> >
> >
> >   > Would like to limit maximum upload and download sizes for
> >   other TCP protocols:  SMB, NFS, FTP, and RDP.
> >
> >
> >
> >   > Is this possible?  If so, how?
> >
> >
> >
> >   > Thank you.
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >   > ___
> >
> >   > squid-users mailing list
> >
> >   > squid-users@lists.squid-cache.org
> 
> 
> >
> >   > http://lists.squid-cache.org/listinfo/squid-users
> >
> >
> >
> > ___
> > squid-users mailing list
> > squid-users@lists.squid-cache.org
> 
> 
> > http://lists.squid-cache.org/listinfo/squid-users
> >
> >
>
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2
>
> iQEcBAEBCAAGBQJXMhpnAAoJENNXIZxhPexG3ZkH/RXEyeJFjGECUV7S6ebQg0SZ
> 31A82FNRApaHOLZWPHYZ0u1tpyISYK2t+2ZpAI+lAuMocUtRIW6gKHIPiWP66SdZ
> xLU5PeSvEbvlncoChajChD+3SDmrlADJD7WpMfw/4RqwDZqNznKX6jLRv3ApoCwu
> JRl+6S2PQ2UARmUEEyeAJLIfZQLKI3EqyUphaVeTaO6una1RXQgavRePjU3zuVBX
> 9Yw0c8cRxtTuo9GePjPsQVIn7QZTSp6EHJ9ExHiLFFi1USdf51qSpc5VKS5HpOkL
> U8wdp59yDb9fa15rrqBSFhXCTwhe5qbyDuxdOq6tozHN5BTm3zMNICv1En1dUig=
> =x2f0
> -END PGP SIGNATURE-
>
>
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-10 Thread Yuri Voinov 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
 
Furthermore, the proxy server itself is not a billing system. Accounting
as task can be solved by the third software analyzing access logs.

10.05.16 23:25, J Green пишет:
> So back to the intended use cases for HTTP, HTTPS, & FTP , how can you log 
> violations of maximum
download/upload size?  I see an error message generated on the client
system, but not w/in Squid.  Thank you.
>
> On Mon, May 9, 2016 at 10:12 AM, Yuri Voinov > wrote:
>
>
> Squid is not a proxy server every imaginable the TCP-usage protocol.
>
> AFAIK HTTP/HTTPS/FTP. That's all, folks.
>
>
> 09.05.16 23:07, J Green пишет:
> > Hello all:
>
>
>
>   > Can Traffic Management Settings be configured for TCP
>   protocols other than HTTP?
>
>
>
>   > Would like to limit maximum upload and download sizes for
>   other TCP protocols:  SMB, NFS, FTP, and RDP.
>
>
>
>   > Is this possible?  If so, how?
>
>
>
>   > Thank you.
>
>
>
>
>
>
>
>
>
>   > ___
>
>   > squid-users mailing list
>
>   > squid-users@lists.squid-cache.org

>
>   > http://lists.squid-cache.org/listinfo/squid-users
>
>
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org

> http://lists.squid-cache.org/listinfo/squid-users
>
>

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXMhqoAAoJENNXIZxhPexGeBgIAMzXGW+GXUBvCdvXghZ+7tmg
WXoXjUZfRu/2A8yUrh2nq3wh8gFqsXMmt1POVXaqgnTSJiPBqjfOzYP8zYFuVwBo
ZxgdAnOdNIYI/6jAhVeBPV+fq8MrlE1nWmLZNdwOo3DGaGnluuSBgk4XPIzsPVF3
apEPqLJlHqTlRA5flwivr2t2ZCtMKmOwe1uI3REwmeH4pkYBDCw1g4pIyNjn8c3z
D+Bpti8exMPGMarVyzR/rqx7D1W7x9548KthXWo/F3PRx44YlF0VUeoG1adovCtp
8WW3oNRceHOfgTefmbPm7tMD8ivH1LpIZVZEdJd/EyNQpbHbb3F85Sg7Kky3ypk=
=gZLy
-END PGP SIGNATURE-



0x613DEC46.asc
Description: application/pgp-keys
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-10 Thread Yuri Voinov 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
 
First, upload is PUT method usage. Most common HTTP/HTTPS is GET/HEAD
methods.

Second, logging of all things is not my goal.

For me, it is sufficient that the restrictions imposed by me in
accordance with the policy. The amount of downloads for my count
analyzers logs, if management is interesting to read the reports
independently.

10.05.16 23:25, J Green пишет:
> So back to the intended use cases for HTTP, HTTPS, & FTP , how can you log 
> violations of maximum
download/upload size?  I see an error message generated on the client
system, but not w/in Squid.  Thank you.
>
> On Mon, May 9, 2016 at 10:12 AM, Yuri Voinov > wrote:
>
>
> Squid is not a proxy server every imaginable the TCP-usage protocol.
>
> AFAIK HTTP/HTTPS/FTP. That's all, folks.
>
>
> 09.05.16 23:07, J Green пишет:
> > Hello all:
>
>
>
>   > Can Traffic Management Settings be configured for TCP
>   protocols other than HTTP?
>
>
>
>   > Would like to limit maximum upload and download sizes for
>   other TCP protocols:  SMB, NFS, FTP, and RDP.
>
>
>
>   > Is this possible?  If so, how?
>
>
>
>   > Thank you.
>
>
>
>
>
>
>
>
>
>   > ___
>
>   > squid-users mailing list
>
>   > squid-users@lists.squid-cache.org

>
>   > http://lists.squid-cache.org/listinfo/squid-users
>
>
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org

> http://lists.squid-cache.org/listinfo/squid-users
>
>

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXMhpnAAoJENNXIZxhPexG3ZkH/RXEyeJFjGECUV7S6ebQg0SZ
31A82FNRApaHOLZWPHYZ0u1tpyISYK2t+2ZpAI+lAuMocUtRIW6gKHIPiWP66SdZ
xLU5PeSvEbvlncoChajChD+3SDmrlADJD7WpMfw/4RqwDZqNznKX6jLRv3ApoCwu
JRl+6S2PQ2UARmUEEyeAJLIfZQLKI3EqyUphaVeTaO6una1RXQgavRePjU3zuVBX
9Yw0c8cRxtTuo9GePjPsQVIn7QZTSp6EHJ9ExHiLFFi1USdf51qSpc5VKS5HpOkL
U8wdp59yDb9fa15rrqBSFhXCTwhe5qbyDuxdOq6tozHN5BTm3zMNICv1En1dUig=
=x2f0
-END PGP SIGNATURE-



0x613DEC46.asc
Description: application/pgp-keys
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-10 Thread J Green 
So back to the intended use cases for HTTP, HTTPS, & FTP , how can you log
violations of maximum download/upload size?  I see an error message
generated on the client system, but not w/in Squid.  Thank you.

On Mon, May 9, 2016 at 10:12 AM, Yuri Voinov  wrote:

>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> Squid is not a proxy server every imaginable the TCP-usage protocol.
>
> AFAIK HTTP/HTTPS/FTP. That's all, folks.
>
>
> 09.05.16 23:07, J Green пишет:
> > Hello all:
> >
> > Can Traffic Management Settings be configured for TCP protocols other
> than HTTP?
> >
> > Would like to limit maximum upload and download sizes for other TCP
> protocols:  SMB, NFS, FTP, and RDP.
> >
> > Is this possible?  If so, how?
> >
> > Thank you.
> >
> >
> >
> >
> > ___
> > squid-users mailing list
> > squid-users@lists.squid-cache.org
> > http://lists.squid-cache.org/listinfo/squid-users
>
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2
>
> iQEcBAEBCAAGBQJXMMUAAAoJENNXIZxhPexGOy8IAMs2DbmNAopj7jqL5Z9KEg6z
> GpRL7y207VkSaz12Bhcdf2PsAy+xCnHzJ6SMeR4MNKeTrfImSQoyJbS4UuFHygcR
> v+9618vUKfpcYaTUc09DTJUh49F0PwJX/lJQxNiDtb/AHEkX+WdDbuFL2S8+AzJm
> ZhNA1FigXzuhGpwaxqhh2uB0zL5wec7IQuSO24POPvBf/hgvzSmBuH6u1SuBLvpp
> RPObRULHTaWhyvMQgufHWm1H0ejpvCZgCqEEcXSW4MbqCatr8DBSmkP28EfweocD
> 4mdpKTWu6HX9EX3ZZ96dKqsOjEBXlKU8BUqlK2irMQgM09IIXCjCRc5W00Qv8tA=
> =v0m2
> -END PGP SIGNATURE-
>
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>
>
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-10 Thread J Green 
At the host level?  Was hoping for something at the network level.

On Mon, May 9, 2016 at 10:06 PM, Amos Jeffries  wrote:

> On 2016-05-10 06:05, J Green wrote:
>
>> Appreciate the response.  Thought it might work if I added those ports
>> to the safe list.
>>
>
> The Safe_ports list is the ports it is considered safe to send traffic to
> from an HTTP proxy. The ports not on that list are for protocols that can
> have crafted messages that look like HTTP to the proxy and non-HTTP to the
> server. Enabling server attacks through HTTP relays. Email SMTP ports are
> particularly vulnerable to spam being delivered in this way.
>
>
>> If not Squid, any idea how to accomplish this?
>>
>>
> With your systems regular QoS settings.
>
> Amos
>
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-09 Thread Amos Jeffries 

On 2016-05-10 06:05, J Green wrote:

Appreciate the response.  Thought it might work if I added those ports
to the safe list.


The Safe_ports list is the ports it is considered safe to send traffic 
to from an HTTP proxy. The ports not on that list are for protocols that 
can have crafted messages that look like HTTP to the proxy and non-HTTP 
to the server. Enabling server attacks through HTTP relays. Email SMTP 
ports are particularly vulnerable to spam being delivered in this way.




If not Squid, any idea how to accomplish this?



With your systems regular QoS settings.

Amos

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-09 Thread J Green 
Sorry to derail off topic, though I appreciate the feedback.  Trying to get
this to work through a Cisco ASA.  If not, I probably have an old 2900
series router somewhere.

Thank you again.

On Mon, May 9, 2016 at 2:33 PM, Yuri Voinov  wrote:

>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> I mean this, for example:
>
> haribda(config)#policy-map Net_Limit
> haribda(config-pmap)#class alternate
> haribda(config-pmap-c)#?
> Policy-map class configuration commands:
>   admitAdmit the request for
>   bandwidthBandwidth
>   compression  Activate Compression
>   drop Drop all packets
>   exit Exit from class action configuration mode
>   fair-queue   Enable Flow-based Fair Queuing in this Class
>   flow Flow subcommands
>   log  Log IPv4 and ARP packets
>   measure  Measure
>   netflow-sampler  NetFlow action
>   no   Negate or set default values of a command
>   police   Police
>   priority Strict Scheduling Priority for this Class
>   queue-limit  Queue Max Threshold for Tail Drop
>   random-detectEnable Random Early Detection as drop policy
>   service-policy   Configure QoS Service Policy
>   set  Set QoS values
>   shapeTraffic Shaping
>
> haribda(config-pmap-c)#bandwidth ?
>   <1-200>  Kilo Bits per second
>   percent  % of total Bandwidth
>   remainingpercent/ratio of the remaining bandwidth
>
> This is 2901, ISR G-2.
>
> 10.05.16 3:15, J Green пишет:
> > Here, re 'upload and download sizes', I meant the later 'dumb traffic
> limits'.
> >
> > We do have a Cisco firewall in place, and I have setup 'traffic
> policing'.  However, the results are inconsistent.  Sometimes it seems to
> work, other times it blocks everything, or it blocks nothing.
> >
> > Appreciate all the feedback, thank you all for your time.
> >
> > On Mon, May 9, 2016 at 12:27 PM, Yuri Voinov   > wrote:
> >
> >
> > For such task enough put Cisco router with TCP traffic policies .
> >
> > And please - any protocol, any speed limits, any ACL's, any SLA .
> >
> >
> > 10.05.16 1:15, Alex Rousskov пишет:
> > > On 05/09/2016 12:53 PM, Yuri Voinov wrote:
> >
> > >> Just to clarify. For proxying anything (protocol or service), the
> proxy
> > >> server must be at the same time also act as the client of a protocol
> or
> > >> service - and as a server.
> >
> >
> > > It all depends on the definition of "upload and download sizes" in the
> > > OP question. If the intent is to understand and restrict individual
> > > protocol messages, then you are right. If the intent is just to limit
> > > the aggregate number of TCP bytes transferred, then protocol
> > > understanding (in a "transparent" setup) is not required.
> >
> > > Needless to say, Squid is unlikely to be the best solution for the
> > > latter "dumb traffic limits" problem, but if an "all-in-one executable"
> > > is a critical requirement, one can make modern Squids to limit tunneled
> > > TCP traffic that it does not understand.
> >
> > > Alex.
> >
> >
> > >> J Green:
> >  Would like to limit maximum upload and download sizes for
> >    other TCP protocols:  SMB, NFS, FTP, and RDP.
> > > ___
> > > squid-users mailing list
> > > squid-users@lists.squid-cache.org
> 
> 
> > > http://lists.squid-cache.org/listinfo/squid-users
> >
> >
> >
> > ___
> > squid-users mailing list
> > squid-users@lists.squid-cache.org
> 
> 
> > http://lists.squid-cache.org/listinfo/squid-users
> >
> >
>
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2
>
> iQEcBAEBCAAGBQJXMQIjAAoJENNXIZxhPexGC9YIAIXbLAOqQMTNmawXVrSpK2rP
> zwW4RmwsmDOZzqFgldMlEJRkSH+H3UXiF6Zw994Ys3pYliB5o55qN3DYB2fGlu4H
> Me3bq71PoZo+qes15l9ePpWq+0jK9B06fMGgWdBeSuVjRwC72hq0k2cPCpg9Hcd3
> KqytNCaM6kb7CFfxhm8g5w0lSHwQkoKM8XDbtVzrKjT0VbFcYRXR6SP5tzRwDW9D
> ZHFQ8hX19RBof8JqWQo6UbhXZBZGtDjoOaGQ/EBMLjzl6guUdKt9Xi8pF+rkBgSk
> S0Y2JZypIxAeMuj9STfRs54ZCId9NtZfA76o5M7PH0OrCfz1oXA+m0kzCQfEZtY=
> =tSMD
> -END PGP SIGNATURE-
>
>
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-09 Thread Yuri Voinov 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
 
I mean this, for example:

haribda(config)#policy-map Net_Limit
haribda(config-pmap)#class alternate
haribda(config-pmap-c)#?
Policy-map class configuration commands:
  admitAdmit the request for
  bandwidthBandwidth
  compression  Activate Compression
  drop Drop all packets
  exit Exit from class action configuration mode
  fair-queue   Enable Flow-based Fair Queuing in this Class
  flow Flow subcommands
  log  Log IPv4 and ARP packets
  measure  Measure
  netflow-sampler  NetFlow action
  no   Negate or set default values of a command
  police   Police
  priority Strict Scheduling Priority for this Class
  queue-limit  Queue Max Threshold for Tail Drop
  random-detectEnable Random Early Detection as drop policy
  service-policy   Configure QoS Service Policy
  set  Set QoS values
  shapeTraffic Shaping

haribda(config-pmap-c)#bandwidth ?
  <1-200>  Kilo Bits per second
  percent  % of total Bandwidth
  remainingpercent/ratio of the remaining bandwidth

This is 2901, ISR G-2.

10.05.16 3:15, J Green пишет:
> Here, re 'upload and download sizes', I meant the later 'dumb traffic limits'.
>
> We do have a Cisco firewall in place, and I have setup 'traffic
policing'.  However, the results are inconsistent.  Sometimes it seems
to work, other times it blocks everything, or it blocks nothing.
>
> Appreciate all the feedback, thank you all for your time.
>
> On Mon, May 9, 2016 at 12:27 PM, Yuri Voinov > wrote:
>
>
> For such task enough put Cisco router with TCP traffic policies .
>
> And please - any protocol, any speed limits, any ACL's, any SLA .
>
>
> 10.05.16 1:15, Alex Rousskov пишет:
> > On 05/09/2016 12:53 PM, Yuri Voinov wrote:
>
> >> Just to clarify. For proxying anything (protocol or service), the proxy
> >> server must be at the same time also act as the client of a protocol or
> >> service - and as a server.
>
>
> > It all depends on the definition of "upload and download sizes" in the
> > OP question. If the intent is to understand and restrict individual
> > protocol messages, then you are right. If the intent is just to limit
> > the aggregate number of TCP bytes transferred, then protocol
> > understanding (in a "transparent" setup) is not required.
>
> > Needless to say, Squid is unlikely to be the best solution for the
> > latter "dumb traffic limits" problem, but if an "all-in-one executable"
> > is a critical requirement, one can make modern Squids to limit tunneled
> > TCP traffic that it does not understand.
>
> > Alex.
>
>
> >> J Green:
>  Would like to limit maximum upload and download sizes for
>    other TCP protocols:  SMB, NFS, FTP, and RDP.
> > ___
> > squid-users mailing list
> > squid-users@lists.squid-cache.org

> > http://lists.squid-cache.org/listinfo/squid-users
>
>
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org

> http://lists.squid-cache.org/listinfo/squid-users
>
>

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXMQIjAAoJENNXIZxhPexGC9YIAIXbLAOqQMTNmawXVrSpK2rP
zwW4RmwsmDOZzqFgldMlEJRkSH+H3UXiF6Zw994Ys3pYliB5o55qN3DYB2fGlu4H
Me3bq71PoZo+qes15l9ePpWq+0jK9B06fMGgWdBeSuVjRwC72hq0k2cPCpg9Hcd3
KqytNCaM6kb7CFfxhm8g5w0lSHwQkoKM8XDbtVzrKjT0VbFcYRXR6SP5tzRwDW9D
ZHFQ8hX19RBof8JqWQo6UbhXZBZGtDjoOaGQ/EBMLjzl6guUdKt9Xi8pF+rkBgSk
S0Y2JZypIxAeMuj9STfRs54ZCId9NtZfA76o5M7PH0OrCfz1oXA+m0kzCQfEZtY=
=tSMD
-END PGP SIGNATURE-



0x613DEC46.asc
Description: application/pgp-keys
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-09 Thread Yuri Voinov 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
 
I'm afraid Cisco firewall is not enough here.

You need something more advanced. Like integrated service router,
i.e.2901 or 2911, or something similar. With iOS 15.5 and complete
hardware support.

10.05.16 3:15, J Green пишет:
> Here, re 'upload and download sizes', I meant the later 'dumb traffic limits'.
>
> We do have a Cisco firewall in place, and I have setup 'traffic
policing'.  However, the results are inconsistent.  Sometimes it seems
to work, other times it blocks everything, or it blocks nothing.
>
> Appreciate all the feedback, thank you all for your time.
>
> On Mon, May 9, 2016 at 12:27 PM, Yuri Voinov > wrote:
>
>
> For such task enough put Cisco router with TCP traffic policies .
>
> And please - any protocol, any speed limits, any ACL's, any SLA .
>
>
> 10.05.16 1:15, Alex Rousskov пишет:
> > On 05/09/2016 12:53 PM, Yuri Voinov wrote:
>
> >> Just to clarify. For proxying anything (protocol or service), the proxy
> >> server must be at the same time also act as the client of a protocol or
> >> service - and as a server.
>
>
> > It all depends on the definition of "upload and download sizes" in the
> > OP question. If the intent is to understand and restrict individual
> > protocol messages, then you are right. If the intent is just to limit
> > the aggregate number of TCP bytes transferred, then protocol
> > understanding (in a "transparent" setup) is not required.
>
> > Needless to say, Squid is unlikely to be the best solution for the
> > latter "dumb traffic limits" problem, but if an "all-in-one executable"
> > is a critical requirement, one can make modern Squids to limit tunneled
> > TCP traffic that it does not understand.
>
> > Alex.
>
>
> >> J Green:
>  Would like to limit maximum upload and download sizes for
>    other TCP protocols:  SMB, NFS, FTP, and RDP.
> > ___
> > squid-users mailing list
> > squid-users@lists.squid-cache.org

> > http://lists.squid-cache.org/listinfo/squid-users
>
>
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org

> http://lists.squid-cache.org/listinfo/squid-users
>
>

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXMQGlAAoJENNXIZxhPexGUrUIAJPB/z0efUrIg/MQNdt/rhYh
xc4S+0y1E0uDooctFOrHxsRaFq8QoegHRpAQ8EOR9jH2sTkKeLWzT7q4RGNzjVK8
Zmq/lb2W4TG4tdpfEwt07/46koLd47EIlYfmm9sqck+Lez2JgHZ9+y8Il9fbEGqY
mUL9qwNtK9Wp2VjaNMZ447oOIShZj6nDELo9raVDkknpluFl37M0WFkmShR076Rw
NvhA9pto1u+Sx9STSkFz7AgkU4vp4Nzetlqg1cjoklmQTN/iAgyQK+2FRYoYgtJO
rZxjcC1iFkTV+J0xwS9iWBfktRDTi247oLhDCxK9jL6SDhs771sGJmuGJaJ8Mnw=
=jTlc
-END PGP SIGNATURE-



0x613DEC46.asc
Description: application/pgp-keys
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-09 Thread Yuri Voinov 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
 
No-no, not policing. This is too blunt instrument.

Try to dig in direction of policy-map, bandwidth, service policy, QoS
and control-plane.

Unfortunately, this is offtopic here. This is a completely different
proprietary tool. This is not the time nor the place to discuss these
issues.

> We do have a Cisco firewall in place, and I have setup 'traffic policing'.  
> However, the results are
inconsistent.  Sometimes it seems to work, other times it blocks
everything, or it blocks nothing.
>
> Appreciate all the feedback, thank you all for your time.
>
> On Mon, May 9, 2016 at 12:27 PM, Yuri Voinov > wrote:
>
>
> For such task enough put Cisco router with TCP traffic policies .
>
> And please - any protocol, any speed limits, any ACL's, any SLA .
>
>
> 10.05.16 1:15, Alex Rousskov пишет:
> > On 05/09/2016 12:53 PM, Yuri Voinov wrote:
>
> >> Just to clarify. For proxying anything (protocol or service), the proxy
> >> server must be at the same time also act as the client of a protocol or
> >> service - and as a server.
>
>
> > It all depends on the definition of "upload and download sizes" in the
> > OP question. If the intent is to understand and restrict individual
> > protocol messages, then you are right. If the intent is just to limit
> > the aggregate number of TCP bytes transferred, then protocol
> > understanding (in a "transparent" setup) is not required.
>
> > Needless to say, Squid is unlikely to be the best solution for the
> > latter "dumb traffic limits" problem, but if an "all-in-one executable"
> > is a critical requirement, one can make modern Squids to limit tunneled
> > TCP traffic that it does not understand.
>
> > Alex.
>
>
> >> J Green:
>  Would like to limit maximum upload and download sizes for
>    other TCP protocols:  SMB, NFS, FTP, and RDP.
> > ___
> > squid-users mailing list
> > squid-users@lists.squid-cache.org

> > http://lists.squid-cache.org/listinfo/squid-users
>
>
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org

> http://lists.squid-cache.org/listinfo/squid-users
>
>

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXMQDkAAoJENNXIZxhPexGuh0H/A5EqyONyPmmfC+Ql2rATcJ2
tmXtx847qNlL0v5Hjy8ZPUpNyh7oN/UQwD71I7+5AXwpN0eSVwQnn/a5IqTVLOz3
ki1ks2G1O/vHT+Kb9+BtCm48MMqpRF/+ODvVc54zj74sJbwh7HtEkaCBHYVW8NZg
ztmz0QXRFW5WUa3ASqehpWJApemEBM7Nev5OTTR4mqTPrYSfXrXFk8vy9B01wzMy
lLd+PenxmzByIVy3PRHZ/di9qUL5QM4d6cXBC1JiJgjDnzErAan76fgjjQBkR6zr
KTCA+/zKi5+XHfI4nqvHG1LbQelTcfT45PFil0YAaAbUkKkRpVhywdY8PSWnrPc=
=Wla5
-END PGP SIGNATURE-



0x613DEC46.asc
Description: application/pgp-keys
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-09 Thread J Green 
Here, re 'upload and download sizes', I meant the later 'dumb traffic
limits'.

We do have a Cisco firewall in place, and I have setup 'traffic policing'.
However, the results are inconsistent.  Sometimes it seems to work, other
times it blocks everything, or it blocks nothing.

Appreciate all the feedback, thank you all for your time.

On Mon, May 9, 2016 at 12:27 PM, Yuri Voinov  wrote:

>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> For such task enough put Cisco router with TCP traffic policies .
>
> And please - any protocol, any speed limits, any ACL's, any SLA .
>
>
> 10.05.16 1:15, Alex Rousskov пишет:
> > On 05/09/2016 12:53 PM, Yuri Voinov wrote:
> >
> >> Just to clarify. For proxying anything (protocol or service), the proxy
> >> server must be at the same time also act as the client of a protocol or
> >> service - and as a server.
> >
> >
> > It all depends on the definition of "upload and download sizes" in the
> > OP question. If the intent is to understand and restrict individual
> > protocol messages, then you are right. If the intent is just to limit
> > the aggregate number of TCP bytes transferred, then protocol
> > understanding (in a "transparent" setup) is not required.
> >
> > Needless to say, Squid is unlikely to be the best solution for the
> > latter "dumb traffic limits" problem, but if an "all-in-one executable"
> > is a critical requirement, one can make modern Squids to limit tunneled
> > TCP traffic that it does not understand.
> >
> > Alex.
> >
> >
> >> J Green:
>  Would like to limit maximum upload and download sizes for
>    other TCP protocols:  SMB, NFS, FTP, and RDP.
> > ___
> > squid-users mailing list
> > squid-users@lists.squid-cache.org
> > http://lists.squid-cache.org/listinfo/squid-users
>
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2
>
> iQEcBAEBCAAGBQJXMOSiAAoJENNXIZxhPexGmOAIAJhNvgZRR5ehoj/UBiqPQJQa
> rOxzPE52Z2iw7jlN+Iy3R9yW/noJyi7SQ91ll1p/rtEUbDhoObCPwClg/BIb45Ah
> J8T2UrvqkebVLjKOkNVmH9BlZ0cioiLcsI/vATSg6cEIdD4ZxHIV99VigKWx4tk1
> NxGBKQats5fOTsrqrH4dPsRIyQgCgjAwF9IgAjU5Hxy4Xrbe8sFNxjOh6tabIB4q
> WUaBhch6eaxZEKw8aR9G6fxYRrTlMUHhxhHT15O52CSt6kwl+HVTRdlt5acQRxvN
> 0dTDxKOn1PUMix13WtbhpausAC54VJTCfUgmukB3TSWWXQYeA7/S/Bj2L0REgM8=
> =LcoZ
> -END PGP SIGNATURE-
>
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>
>
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-09 Thread Yuri Voinov 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
 
For such task enough put Cisco router with TCP traffic policies .

And please - any protocol, any speed limits, any ACL's, any SLA .


10.05.16 1:15, Alex Rousskov пишет:
> On 05/09/2016 12:53 PM, Yuri Voinov wrote:
>
>> Just to clarify. For proxying anything (protocol or service), the proxy
>> server must be at the same time also act as the client of a protocol or
>> service - and as a server.
>
>
> It all depends on the definition of "upload and download sizes" in the
> OP question. If the intent is to understand and restrict individual
> protocol messages, then you are right. If the intent is just to limit
> the aggregate number of TCP bytes transferred, then protocol
> understanding (in a "transparent" setup) is not required.
>
> Needless to say, Squid is unlikely to be the best solution for the
> latter "dumb traffic limits" problem, but if an "all-in-one executable"
> is a critical requirement, one can make modern Squids to limit tunneled
> TCP traffic that it does not understand.
>
> Alex.
>
>
>> J Green:
 Would like to limit maximum upload and download sizes for
   other TCP protocols:  SMB, NFS, FTP, and RDP.
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXMOSiAAoJENNXIZxhPexGmOAIAJhNvgZRR5ehoj/UBiqPQJQa
rOxzPE52Z2iw7jlN+Iy3R9yW/noJyi7SQ91ll1p/rtEUbDhoObCPwClg/BIb45Ah
J8T2UrvqkebVLjKOkNVmH9BlZ0cioiLcsI/vATSg6cEIdD4ZxHIV99VigKWx4tk1
NxGBKQats5fOTsrqrH4dPsRIyQgCgjAwF9IgAjU5Hxy4Xrbe8sFNxjOh6tabIB4q
WUaBhch6eaxZEKw8aR9G6fxYRrTlMUHhxhHT15O52CSt6kwl+HVTRdlt5acQRxvN
0dTDxKOn1PUMix13WtbhpausAC54VJTCfUgmukB3TSWWXQYeA7/S/Bj2L0REgM8=
=LcoZ
-END PGP SIGNATURE-



0x613DEC46.asc
Description: application/pgp-keys
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-09 Thread Alex Rousskov 
On 05/09/2016 12:53 PM, Yuri Voinov wrote:

> Just to clarify. For proxying anything (protocol or service), the proxy
> server must be at the same time also act as the client of a protocol or
> service - and as a server.


It all depends on the definition of "upload and download sizes" in the
OP question. If the intent is to understand and restrict individual
protocol messages, then you are right. If the intent is just to limit
the aggregate number of TCP bytes transferred, then protocol
understanding (in a "transparent" setup) is not required.

Needless to say, Squid is unlikely to be the best solution for the
latter "dumb traffic limits" problem, but if an "all-in-one executable"
is a critical requirement, one can make modern Squids to limit tunneled
TCP traffic that it does not understand.

Alex.


> J Green:
>>> Would like to limit maximum upload and download sizes for
>>>   other TCP protocols:  SMB, NFS, FTP, and RDP.
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-09 Thread Yuri Voinov 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
 
You are welcome.

Just to clarify. For proxying anything (protocol or service), the proxy
server must be at the same time also act as the client of a protocol or
service - and as a server. It is known for at least several hundreds of
protocols. It is hard to imagine that such a comprehensive proxy anyone
ever wrote. Especially for the protocols that do not need to cache, or
even more so, in principle, to proxy.


10.05.16 0:21, J Green пишет:
> Thank you.  Yes, I am having a difficult time trying to find a solution for 
> this.
>
> On Mon, May 9, 2016 at 11:18 AM, Yuri Voinov > wrote:
>
>
> As I know, even this solution can not:
>
>
https://www.bluecoat.com/products-and-solutions/on-premise-secure-web-gateway
>
> 10.05.16 0:05, J Green пишет:
> > Appreciate the response.
>   Thought it might work if I added those ports to the safe list.
>
>
>
>   > If not Squid, any idea how to accomplish this?
>
>
>
>   > Thank you.
>
>
>
>   > On Mon, May 9, 2016 at 10:12 AM, Yuri Voinov
>   
 > wrote:
>
>
>
>
>
>   > Squid is not a proxy server every imaginable the TCP-usage
>   protocol.
>
>
>
>   > AFAIK HTTP/HTTPS/FTP. That's all, folks.
>
>
>
>
>
>   > 09.05.16 23:07, J Green пишет:
>
>   > > Hello all:
>
>
>
>
>
>
>
>   >   > Can Traffic Management Settings be configured for
>   TCP
>
>   >   protocols other than HTTP?
>
>
>
>
>
>
>
>   >   > Would like to limit maximum upload and download
>   sizes for
>
>   >   other TCP protocols:  SMB, NFS, FTP, and RDP.
>
>
>
>
>
>
>
>   >   > Is this possible?  If so, how?
>
>
>
>
>
>
>
>   >   > Thank you.
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>   >   > ___
>
>
>
>   >   > squid-users mailing list
>
>
>
>   >   > squid-users@lists.squid-cache.org

>   

>
>
>
>   >   > http://lists.squid-cache.org/listinfo/squid-users
>
>
>
>
>
>
>
>   > ___
>
>   > squid-users mailing list
>
>   > squid-users@lists.squid-cache.org

>   

>
>   > http://lists.squid-cache.org/listinfo/squid-users
>
>
>
>
>
>
>

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXMNyLAAoJENNXIZxhPexGJ4cH/RW18n14O3DVcNugV7PjLqVs
VoC/BKtzdNQTnstS/8leC1N8eUfCAtgQuSW1esZsdjm/F5V9JagCuZ617v6c2Z9w
m36XuH86SUVYLxd/pTHX8LBEzWxlcfU5v68wPEPXtHK0RfagHruYnRpcsT23Mt5X
WZFM6jOhRD3pECQYnLYlKKizDjQzTPc/jiLzS6E8fJGI4oZfcx6pd1j2h+XyecGv
scNDUogBWoqOB3ZyNw2CODVE9ehWaL7ghb8bkd4cbreCvcI5kFQ51k3CWgY0nRH1
R6GgJ0rE0y5ADArhJLMsVhQmmiEBj1Dhcy9vKZMnDgS7il65xZKb8rbdwJnYmrs=
=Yqac
-END PGP SIGNATURE-



0x613DEC46.asc
Description: application/pgp-keys
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-09 Thread J Green 
Thank you.  Yes, I am having a difficult time trying to find a solution for
this.

On Mon, May 9, 2016 at 11:18 AM, Yuri Voinov  wrote:

>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> As I know, even this solution can not:
>
>
> https://www.bluecoat.com/products-and-solutions/on-premise-secure-web-gateway
>
> 10.05.16 0:05, J Green пишет:
> > Appreciate the response.  Thought it might work if I added those ports
> to the safe list.
> >
> > If not Squid, any idea how to accomplish this?
> >
> > Thank you.
> >
> > On Mon, May 9, 2016 at 10:12 AM, Yuri Voinov   > wrote:
> >
> >
> > Squid is not a proxy server every imaginable the TCP-usage protocol.
> >
> > AFAIK HTTP/HTTPS/FTP. That's all, folks.
> >
> >
> > 09.05.16 23:07, J Green пишет:
> > > Hello all:
> >
> >
> >
> >   > Can Traffic Management Settings be configured for TCP
> >   protocols other than HTTP?
> >
> >
> >
> >   > Would like to limit maximum upload and download sizes for
> >   other TCP protocols:  SMB, NFS, FTP, and RDP.
> >
> >
> >
> >   > Is this possible?  If so, how?
> >
> >
> >
> >   > Thank you.
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >   > ___
> >
> >   > squid-users mailing list
> >
> >   > squid-users@lists.squid-cache.org
> 
> 
> >
> >   > http://lists.squid-cache.org/listinfo/squid-users
> >
> >
> >
> > ___
> > squid-users mailing list
> > squid-users@lists.squid-cache.org
> 
> 
> > http://lists.squid-cache.org/listinfo/squid-users
> >
> >
>
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2
>
> iQEcBAEBCAAGBQJXMNRnAAoJENNXIZxhPexGgg4H/2kd0y7hhypCWMlOnvzDUiOq
> otgreU9Z1tnPi/U8b+qmL+woXT6oy2d25CRMBZa8N38le0OS1zkH9e/XiagAJefK
> gv2IWdDlO1F/ibPzhTG4nGMMT4HzXgDYGCdJCLe33E5Q/1nRFCzAeabfHPQeeLwD
> Xl/qbKA6b1gUusmH4PAdl/oANNW10RrPC2X39Ei2k7BQVPXRB/kU599sd13S2F44
> s2RlGIKb4N4eQMkIUM+cffZ8e9URnoad/m7HkKs5ZUrZOb4Ayt67kE5YVt98oyuJ
> +zGafGwOm+A06Hpa/LMbpb21WOajStq3h5hX9QZSROsiL0xsWOPT07pf6sTSfXY=
> =4zKK
> -END PGP SIGNATURE-
>
>
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-09 Thread J Green 
Appreciate the response.  Thought it might work if I added those ports to
the safe list.

If not Squid, any idea how to accomplish this?

Thank you.

On Mon, May 9, 2016 at 10:12 AM, Yuri Voinov  wrote:

>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> Squid is not a proxy server every imaginable the TCP-usage protocol.
>
> AFAIK HTTP/HTTPS/FTP. That's all, folks.
>
>
> 09.05.16 23:07, J Green пишет:
> > Hello all:
> >
> > Can Traffic Management Settings be configured for TCP protocols other
> than HTTP?
> >
> > Would like to limit maximum upload and download sizes for other TCP
> protocols:  SMB, NFS, FTP, and RDP.
> >
> > Is this possible?  If so, how?
> >
> > Thank you.
> >
> >
> >
> >
> > ___
> > squid-users mailing list
> > squid-users@lists.squid-cache.org
> > http://lists.squid-cache.org/listinfo/squid-users
>
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2
>
> iQEcBAEBCAAGBQJXMMUAAAoJENNXIZxhPexGOy8IAMs2DbmNAopj7jqL5Z9KEg6z
> GpRL7y207VkSaz12Bhcdf2PsAy+xCnHzJ6SMeR4MNKeTrfImSQoyJbS4UuFHygcR
> v+9618vUKfpcYaTUc09DTJUh49F0PwJX/lJQxNiDtb/AHEkX+WdDbuFL2S8+AzJm
> ZhNA1FigXzuhGpwaxqhh2uB0zL5wec7IQuSO24POPvBf/hgvzSmBuH6u1SuBLvpp
> RPObRULHTaWhyvMQgufHWm1H0ejpvCZgCqEEcXSW4MbqCatr8DBSmkP28EfweocD
> 4mdpKTWu6HX9EX3ZZ96dKqsOjEBXlKU8BUqlK2irMQgM09IIXCjCRc5W00Qv8tA=
> =v0m2
> -END PGP SIGNATURE-
>
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>
>
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-09 Thread Yuri Voinov 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
 
https://i1.someimage.com/DTMWEmc.png


09.05.16 23:07, J Green пишет:
> Hello all:
>
> Can Traffic Management Settings be configured for TCP protocols other
than HTTP?
>
> Would like to limit maximum upload and download sizes for other TCP
protocols:  SMB, NFS, FTP, and RDP.
>
> Is this possible?  If so, how?
>
> Thank you.
>
>
>
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXMMVpAAoJENNXIZxhPexGxlEIAIofKgK4Q+imEidyjDusR/QA
aQRVSma4gskz1LpHpGt0aK+BVKfKCZNsiX8gEiD/oU29N91Cc5ubixcdPj6bKji6
SqmdCykZp1XLgTPxtQz1sLuw0nlARn6KU6P3RlZTVX2CdRLN3Olm7FM9ywldqP8e
jwJYQXwnWE5xpv7SeGc9T/5/kciAUClJ7rc6Ci3ndHqH0KpWcmzKjIhbgHzhGvIb
PhyNWzhHc2M3sPAlAh47f3QdBZEco4eCgkShRXMiGoZZCVixjSJBZE+YTfCqHa65
84q6CCEw/MtRSIby3bAq6sSYc+JMbJ3buWUq3B4QF6RiNXx2Q5wAfmCd07L+uUU=
=V0iK
-END PGP SIGNATURE-



0x613DEC46.asc
Description: application/pgp-keys
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-09 Thread Yuri Voinov 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
 
Squid is not a proxy server every imaginable the TCP-usage protocol.

AFAIK HTTP/HTTPS/FTP. That's all, folks.


09.05.16 23:07, J Green пишет:
> Hello all:
>
> Can Traffic Management Settings be configured for TCP protocols other
than HTTP?
>
> Would like to limit maximum upload and download sizes for other TCP
protocols:  SMB, NFS, FTP, and RDP.
>
> Is this possible?  If so, how?
>
> Thank you.
>
>
>
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXMMUAAAoJENNXIZxhPexGOy8IAMs2DbmNAopj7jqL5Z9KEg6z
GpRL7y207VkSaz12Bhcdf2PsAy+xCnHzJ6SMeR4MNKeTrfImSQoyJbS4UuFHygcR
v+9618vUKfpcYaTUc09DTJUh49F0PwJX/lJQxNiDtb/AHEkX+WdDbuFL2S8+AzJm
ZhNA1FigXzuhGpwaxqhh2uB0zL5wec7IQuSO24POPvBf/hgvzSmBuH6u1SuBLvpp
RPObRULHTaWhyvMQgufHWm1H0ejpvCZgCqEEcXSW4MbqCatr8DBSmkP28EfweocD
4mdpKTWu6HX9EX3ZZ96dKqsOjEBXlKU8BUqlK2irMQgM09IIXCjCRc5W00Qv8tA=
=v0m2
-END PGP SIGNATURE-



0x613DEC46.asc
Description: application/pgp-keys
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Can Traffic Management Settings be configured for other TCP protocols?

2016-05-09 Thread J Green 
Hello all:

Can Traffic Management Settings be configured for TCP protocols other than
HTTP?

Would like to limit maximum upload and download sizes for other TCP
protocols:  SMB, NFS, FTP, and RDP.

Is this possible?  If so, how?

Thank you.
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users