Re: [squid-users] TOS squid-3.5.0.4

2015-05-31 Thread Amos Jeffries
On 31/05/2015 11:38 p.m., Marcel Fossua wrote: Hi All let see if some of you can help me troubleshoot the issue I have with squid-3.5.0.4 Please upgrade. 3.5.5 was released the other day, and Eliezer has new CentOS 6/7 packages available already. on centos 6.6 configure with tproxy in fact

Re: [squid-users] TOS squid-3.5.0.4

2015-05-31 Thread Amos Jeffries
On 1/06/2015 11:35 a.m., Marcel Fossua wrote: HI Amos thanks for your reply I just upgrade to 3.5.5 but compiling from source to get --enable-ecap but I can't figure out what you means exactly concerning the TOS part did you means what I set is ok or not? qos_flows tos The above line does

Re: [squid-users] TOS squid-3.5.0.4

2015-05-31 Thread Marcel Fossua
No luck Still not getting result at all I think the issue could be with my Mikrotik box # Marking packets with DSCP (for Mikrotik 6.x) for cache hit content coming from SQUID Proxy /ip firewall mangle add action=mark-packet chain=prerouting disabled=no dscp=12

Re: [squid-users] ssl_bump and SNI

2015-05-31 Thread Nathan Hoad
Hello, Here are some excerpts of what I've used, and an example Python helper: https_port 60099 intercept ssl-bump tcpkeepalive cert=/path/to/cert.pem key=/path/to/key.pem options=NO_SSLv2,NO_SSLv3 generate-host-certificates=on external_acl_type sni ttl=30 concurrency=X children-max=Y

[squid-users] Ssl-bump deep dive (intercept last post and final thoughts)

2015-05-31 Thread James Lay
So this has been REALLY good! The tl;dr: ssl-bumping is pretty easy even with intercept, ssl-bumping with access control is a little more difficult...jump to the config to skip the chit chat. My goal has always been to a content filter based on url regex. This works just fine for http traffic,

Re: [squid-users] Ssl-bump deep dive (intercept last post and final thoughts)

2015-05-31 Thread James Lay
On Mon, 2015-06-01 at 13:00 +1200, Amos Jeffries wrote: On 1/06/2015 11:56 a.m., James Lay wrote: So this has been REALLY good! The tl;dr: ssl-bumping is pretty easy even with intercept, ssl-bumping with access control is a little more difficult...jump to the config to skip the chit

Re: [squid-users] TOS squid-3.5.0.4

2015-05-31 Thread Marcel Fossua
Thanks Amos I will try it. Rgds -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/TOS-squid-3-5-0-4-tp4671459p4671465.html Sent from the Squid - Users mailing list archive at Nabble.com. ___ squid-users mailing list

Re: [squid-users] Ssl-bump deep dive (intercept last post and final thoughts)

2015-05-31 Thread Amos Jeffries
On 1/06/2015 11:56 a.m., James Lay wrote: So this has been REALLY good! The tl;dr: ssl-bumping is pretty easy even with intercept, ssl-bumping with access control is a little more difficult...jump to the config to skip the chit chat. My goal has always been to a content filter based on url

Re: [squid-users] Conditional question

2015-05-31 Thread Amos Jeffries
On 31/05/2015 10:24 a.m., James Lay wrote: On Sun, 2015-05-31 at 08:45 +1200, Amos Jeffries wrote: On 31/05/2015 4:48 a.m., James Lay wrote: Per the docs: # Conditional configuration # # If-statements can be used to make configuration directives # depend on conditions: # #

[squid-users] TOS squid-3.5.0.4

2015-05-31 Thread Marcel Fossua
Hi All let see if some of you can help me troubleshoot the issue I have with squid-3.5.0.4 on centos 6.6 configure with tproxy in fact the issue is relate to qos stuff i just set things according to manual qos_flows tos local-hit=0x30 qos_flows mark local-hit=0x30 qos_flows tos sibling-hit=0x31