Re: [squid-users] Problems with Squid3 Authentication

2015-09-29 Thread Amos Jeffries
On 30/09/2015 12:35 p.m., Marcio Demetrio Bacci wrote: > I have configured a Squid 3 proxy server on Debian 7, integrated with Samba > 4 domain. > > For windows machines integrated in the domain, Squid uses the network user > credential to allow navigation. > > On Linux stations, even in the doma

Re: [squid-users] squid with SMP registeration time out when i use 10K opened sessions

2015-09-29 Thread Amos Jeffries
Scalable Multi-Process (SMP) Squid is multi-process. What you are doing here is running 5x collections (instances) of Squid processes (plural!). squid1.conf cpu_affinity_map process_numbers=1,2 cores=1,1 squid2.conf cpu_affinity_map process_numbers=1,2 cores=2,2 squid3.conf cpu_affinity_map

Re: [squid-users] Squid 3.5.9 RPM are available

2015-09-29 Thread Amos Jeffries
On 30/09/2015 2:34 a.m., Veiko Kukk wrote: > On 24/09/15 03:00, Eliezer Croitoru wrote: >> Since it's a security release I will not write an article this time. >> But I am happy to release the new RPMs for squid cache 3.5.9. > > Since there are no new rpm-s in 3.4 branch after 3.4.10, I decided to

Re: [squid-users] after changed from 3.4.13 to 3.5.8 sslbump doesn't work for the site https://banking.postbank.de/

2015-09-29 Thread Alex Rousskov
On 09/29/2015 05:02 PM, HackXBack wrote: > i dont know, but if connection cant bump .. if connection cant established , > then squid bypass this connection directly ... > this is how ... The pinning client (not Squid!) decides that the [successfully bumped from Squid point of view] connection is

[squid-users] Problems with Squid3 Authentication

2015-09-29 Thread Marcio Demetrio Bacci
I have configured a Squid 3 proxy server on Debian 7, integrated with Samba 4 domain. For windows machines integrated in the domain, Squid uses the network user credential to allow navigation. On Linux stations, even in the domain, when is opened the browser, the user's password is requested. Whe

Re: [squid-users] after changed from 3.4.13 to 3.5.8 sslbump doesn't work for the site https://banking.postbank.de/

2015-09-29 Thread HackXBack
i dont know, but if connection cant bump .. if connection cant established , then squid bypass this connection directly ... this is how ... -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/after-changed-from-3-4-13-to-3-5-8-sslbump-doesn-t-work-for-the-site-h

Re: [squid-users] after changed from 3.4.13 to 3.5.8 sslbump doesn't work for the site https://banking.postbank.de/

2015-09-29 Thread Antony Stone
On Tuesday 29 September 2015 at 23:50:15, HackXBack wrote: > i dont say that we want to bump pinned connection , > why squid not automatically bypass pinned connection with out decryption ?? How can Squid know that the client is using pinning? Antony. -- BASIC is to computer languages what Rom

Re: [squid-users] after changed from 3.4.13 to 3.5.8 sslbump doesn't work for the site https://banking.postbank.de/

2015-09-29 Thread HackXBack
Its Okay, i dont say that we want to bump pinned connection , why squid not automatically bypass pinned connection with out decryption ?? if this happen then all problems solved .. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/after-changed-from-3-4-13-to-

Re: [squid-users] squid with SMP registeration time out when i use 10K opened sessions

2015-09-29 Thread Ahmad Alzaeem
Amos , when I run process # 1 by Squid -n squi1 I see process # 1 mapped to core 3 When I run instance # 2 by Squid -n squid2 I see 2015/09/29 19:03:14 kid1| WARNING: 'cpu_affinity_map' has non-existing process number(s) That mean all processes are run as process # 1 !!! This is my issue

Re: [squid-users] squid with SMP registeration time out when i use 10K opened sessions

2015-09-29 Thread Ahmad Alzaeem
Hi amos I did , but can u tell me why that happened ?? Look @ my cpu cores for squid when it has high traffic : 1 [*100.0%] Tasks: 29, 4 thr; 6 running 2 [ 0.0%] Load average: 2.53 0.

Re: [squid-users] analyzing cache in and out files

2015-09-29 Thread Eliezer Croitoru
On 29/09/2015 20:51, Leonardo Rodrigues wrote: That's i was afraid, there's no tools to analyze the data. Anyway, thanks for the answer. These can be written. First there is a need to actually write the goal of the tool. Then learn the structure of the log.. then write a small app. I can t

Re: [squid-users] analyzing cache in and out files

2015-09-29 Thread Leonardo Rodrigues
Em 28/09/15 17:55, Amos Jeffries escreveu: The store.log is the one recording what gets added and removed from cache. It is just that there are no available tools to do the analysis you are asking for. Most admin (and thus tools aimed at them) are more concerned with whether cached files are re-u

Re: [squid-users] after changed from 3.4.13 to 3.5.8 sslbump doesn't work for the site https://banking.postbank.de/

2015-09-29 Thread Alex Rousskov
On 09/29/2015 03:16 AM, Amos Jeffries wrote: > On 29/09/2015 5:20 p.m., Yuri Voinov wrote: >> Don't think so we can detect pinned apps automatically. You need find it >> manually this time AFAIK. > Correct. There is no way for Squid to know that some app running on a > separate client device, ins

Re: [squid-users] analyzing cache in and out files

2015-09-29 Thread Leonardo Rodrigues
Em 29/09/15 10:46, Matus UHLAR - fantomas escreveu: hmm, when did this change? IIRC that was big problem since updates use huge files and fetch only parts of them, which squid wasn't able to cache. But i'm off for a few years, maybe M$ finally fixed that up... i'm not a squid expert, b

[squid-users] warning store.cc

2015-09-29 Thread N V
Hi! I'm using squid 3.4.8 and i'm seeing many warnings in the cache.log like this: kid1| WARNING: store.cc:601: found KEY_PRIVATE I can't found anything similar in the web , any ideas? Thanks in advance! Nicolás. ___ squid-users mailing list squid-use

Re: [squid-users] Squid 3.5.9 RPM are available

2015-09-29 Thread Eliezer Croitoru
Hey Veiko, I am not a SELINUX expert but something might be wrong on your system settings or permissions. What OS exactly are you using? What version of CentOS? I am using CentOS 7 with latest updates and it seems to work fine. From the information you have supplied it seems that SELINUX eithe

Re: [squid-users] analyzing cache in and out files

2015-09-29 Thread Matus UHLAR - fantomas
On 28.09.15 15:59, Leonardo Rodrigues wrote: I have a running squid that, until some weeks ago, was not doing any kind of cache, it was just used for access controle rules. Now i have enabled it for windows updateand some specificURLs caching and it's just working fine. Em 29/09/15 07:42,

Re: [squid-users] Squid 3.5.9 RPM are available

2015-09-29 Thread Veiko Kukk
On 24/09/15 03:00, Eliezer Croitoru wrote: Since it's a security release I will not write an article this time. But I am happy to release the new RPMs for squid cache 3.5.9. Since there are no new rpm-s in 3.4 branch after 3.4.10, I decided to try/upgrade to 3.5.9. Squid does not start, fails

Re: [squid-users] analyzing cache in and out files

2015-09-29 Thread Leonardo Rodrigues
Em 29/09/15 07:42, Matus UHLAR - fantomas escreveu: On 28.09.15 15:59, Leonardo Rodrigues wrote: I have a running squid that, until some weeks ago, was not doing any kind of cache, it was just used for access controle rules. Now i have enabled it for windows updateand some specificURLs cachi

Re: [squid-users] analyzing cache in and out files

2015-09-29 Thread Matus UHLAR - fantomas
On 28.09.15 15:59, Leonardo Rodrigues wrote: I have a running squid that, until some weeks ago, was not doing any kind of cache, it was just used for access controle rules. Now i have enabled it for windows updateand some specificURLs caching and it's just working fine. windows updates are

Re: [squid-users] after changed from 3.4.13 to 3.5.8 sslbump doesn't work for the site https://banking.postbank.de/

2015-09-29 Thread Amos Jeffries
On 29/09/2015 5:20 p.m., Yuri Voinov wrote: > Don't think so we can detect pinned apps automatically. You need find it > manually this time AFAIK. Correct. There is no way for Squid to know that some app running on a separate client device, installed a random time earlier via another network conta