[squid-users] SSL-bump certificate issues (mostly on Chrome, when accessing Google websites)

2015-02-05 Thread Luis Miguel Silva
Dear all, I recently compiled squid-3.4.9 with ssl-bump support and, although it is working for the most part, I'm having some issues accessing some websites. The behavior is REALLY weird so I'm going to try and describe it the best I can: - If i access https://www.google.com/ in Chrome, I could

Re: [squid-users] help with regard to http/https filtering

2015-02-05 Thread Pavel Kazlenka
Hi Rajkumar, You probably need something like acl NoUpload method POST acl NoUpload method UPLOAD ssl_bump deny NoUpload Best wishes, Pavel On 02/06/2015 05:20 AM, Rajkumar Prasad wrote: Hi Pavel, Thanks for your help. I did this additional configs and now http http filterings

[squid-users] benefits of using ext_kerberos_ldap_group_acl instead of ext_ldap_group_acl

2015-02-05 Thread Simon Staeheli
Amos Jeffries wrote in message news:54BE3B5C.8040800 at treenet.co.nz... -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 20/01/2015 11:31 p.m., Simon Stäheli wrote: Are there any other benefits in using ext_kerberos_ldap_group_acl instead of ext_ldap_group_acl except the Netbios name to

Re: [squid-users] Blocking hotshield vpn

2015-02-05 Thread Daniel Greenwald
Yuri- Why can't he just block the dstdomain? --- Daniel I Greenwald On Thu, Feb 5, 2015 at 7:32 AM, Yuri Voinov yvoi...@gmail.com wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 No way. Only before Squid - using Cisco or something like. Either Cisco acl's, or NBAR

Re: [squid-users] Hypothetically comparing SATA\SAS to NAS\SAN for squid.

2015-02-05 Thread Eliezer Croitoru
Hey Omid, Before buying any NAS or SAN solution you will need to take in account couple things. Squid has an in memory objects index which requires ram and reduces the amount of in memory objects you can store. You will need to first verify that your current machine memory usage can allow you

Re: [squid-users] Problems with squid 3.5.1

2015-02-05 Thread FredB
Stefano, are using identification helper ? And which version of browser ? Regards, Fred http://numsys.eu http://e2guardian.org ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Custom requirement from Squid proxy logs

2015-02-05 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hm. AFAIK, Google Analythics has web-site monitoring capability for webmasters. In doubt about username logging capabilities (I've used it years ago). 06.02.2015 2:59, l...@technomicssolutions.com пишет: Thank you Yuri. Can you suggest any

Re: [squid-users] Custom requirement from Squid proxy logs

2015-02-05 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I think, you can't. The single alternative I see - using Web-application capabilities. 06.02.2015 2:01, l...@technomicssolutions.com пишет: Hi all, I am having a custom requirement. I am monitoring my websites Google Analytics from proxy logs.

Re: [squid-users] Custom requirement from Squid proxy logs

2015-02-05 Thread leo
Thank you Yuri. Can you suggest any of the web application framework or method to get this done.. Can I do the same with web application if I don't have access to the website hosted server. In between, I found the following from squid config file. ===  Defined

Re: [squid-users] Custom requirement from Squid proxy logs

2015-02-05 Thread leo
Actually, I have multiple websites and some using Google Analytics and some uses Adobe. That is why I concentrated on SquidProxy as it logs corresponding entries for all types of analytics. Just to make a analytics independent, can we have any sort of solution.. Thanks for the advise, Leo

Re: [squid-users] Problems with squid 3.5.1

2015-02-05 Thread Stefano Ansaloni
@FrebB: I really don't know what identification helper is (I'm not a squid guru, please explain or drop a link). I'm on firefox 31.4.0esr (slackware linux 13.1). @Eliezer: As FredB said, the issue comes up randomly for both http and https sites (fun fact: if I try to reload a couple of times the

[squid-users] Blocking hotshield vpn

2015-02-05 Thread Job
Hello, is there a way to block Hot Shield VPN with Squid, maybe in conjunction with something else? I made some tries but is seems very difficult to block with Squid+Iptables. Thank you, best best regards! Francesco ___ squid-users mailing list

Re: [squid-users] help with regard to http/https filtering

2015-02-05 Thread Rajkumar Prasad
Hi Pavel, Thanks for your help. I did this additional configs and now http http filterings working well for HTTPS enabled sites as well. I have another requirement wherin i need to filter http POST methods, which i am able to do for http sites. Is there a way we can achieve the same for

Re: [squid-users] Problems with squid 3.5.1

2015-02-05 Thread FredB
Is it happening on all websites? or a specific one? I am using 3.4.11 for most of my daily uses now. In order to reproduce it I will need the OS and version, and if I assume it is a self compiled so the squid -v details. Eliezer Hi, I'm just testing and writing some codes for

[squid-users] Custom requirement from Squid proxy logs

2015-02-05 Thread leo
Hi all, I am having a custom requirement. I am monitoring my websites Google Analytics from proxy logs. My website users will be given with my Squid login details and once they login and visit my website, I can get sample logs like this from squid log. ===