Re: [squid-users] TCP_DENIED/403

2014-11-05 Thread Antony Stone
On Wednesday 05 November 2014 at 10:39:19 (EU time), navari.lore...@gmail.com wrote: I'm configuring a Squid Web Proxy Cache and I apply the deny policy to some sites. This is the problem: when people access sites with GET they have the right html error page ERR_ACCES_DENIED (LOG =

Re: [squid-users] TCP_DENIED/403

2014-11-05 Thread Rafael Akchurin
Hello Navari, Just my two cents - http://docs.diladele.com/faq/squid.html#why-i-see-cannot-connect-to-site-using-https-browser-message-instead-of-usual-site-is-blocked Raf -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of

[squid-users] Fwd: Re: TCP_DENIED/403

2014-11-05 Thread Lorenzo
thank for replay SO = CentOS 7 squid-3.4.6-1.el7.centos.x86_64 = [root@lv-034-005 squid]# cat squid.conf # # Recommended minimum configuration: # #Default: debug_options ALL,1 #more: debug_options ALL,1 33,2 28,9 debug_options ALL,1

Re: [squid-users] TCP_DENIED/403

2014-11-05 Thread navari.lore...@gmail.com
thank for replay SO = CentOS 7 squid-3.4.6-1.el7.centos.x86_64 = [root@lv-034-005 squid]# cat squid.conf # # Recommended minimum configuration: # #Default: debug_options ALL,1 #more: debug_options ALL,1 33,2 28,9 debug_options ALL,1 28,3

Re: [squid-users] Correctly implementing peak-splice

2014-11-05 Thread Christos Tsantilas
On 11/04/2014 02:26 PM, James Lay wrote: Thanks a bunch Christos, That list of IP's is things like apple.com, textnow.me, and windows updates...IP's that simply don't bump well. My setup is a linux box that's a router...one NIC internal IP, the other external IP. Via iptables redirect, I'm

Re: [squid-users] TCP_DENIED/403

2014-11-05 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 5/11/2014 10:39 p.m., navari.lore...@gmail.com wrote: Good day today. I' m configuring a Squid Web Proxy Cache and I apply the deny policy to some sites l this is the problem: when people accesses sites with GET they have the right html error

Re: [squid-users] Correctly implementing peak-splice

2014-11-05 Thread James Lay
On Wed, 2014-11-05 at 12:24 +0200, Christos Tsantilas wrote: On 11/04/2014 02:26 PM, James Lay wrote: Thanks a bunch Christos, That list of IP's is things like apple.com, textnow.me, and windows updates...IP's that simply don't bump well. My setup is a linux box that's a router...one

[squid-users] could sslbump handle client certs better?

2014-11-05 Thread Jason Haar
I haven't tested this so I may be embarrassing myself, but I doubt client certs and sslbump play nicely together as the end-server would never see any possible client cert interaction I was wondering how quickly the need of a client cert is announced? Could/does squid notice the server

[squid-users] Behind enemy lines (squid behind proxy)

2014-11-05 Thread doc . holliday
Ive searched through the internets and tried various things... to no avail. Hopefully someone here can point me in the right direction. I am sitting behind a proxy, which accepts http/https. Everything else is blocked. If I instruct my browser to use this proxy, everything works dandy. Both

[squid-users] Behind enemy lines (squid behind proxy)

2014-11-05 Thread doc . holliday
[plain text version; sorry for the inconvenience] I've searched through the internets and tried various things... to no avail. Hopefully someone here can point me in the right direction.   I am sitting behind a proxy, which accepts http/https. Everything else is blocked. If I instruct my

Re: [squid-users] Behind enemy lines (squid behind proxy)

2014-11-05 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 6/11/2014 2:33 p.m., doc.holli...@usa.com wrote: I've searched through the internets and tried various things... to no avail. Hopefully someone here can point me in the right direction. I am sitting behind a proxy, which accepts http/https.

[squid-users] true sizeof squid cache

2014-11-05 Thread Riccardo Castellani
I'm installing new machine as Squid server and I need to understand what criteria to estimate the 'cache size', I'm not speaking about extra space for swap/temporary files or fragmentation but I'm saying about the cache of size that is 3rd cache_dir argument. Server will receive requests from