Re: [squid-users] squid3.4 - MySQL, PHP script - block websites

2015-11-15 Thread Jens Kallup
Hello, Now, I use the follow script. But, it ends in endless search - web browser site search. #!/usr/bin/python import sys import time def grant (): sys.stdout.write( 'OK\n' ) def deny (): sys.stdout.write( 'ERR\n' ) while True: line = sys.stdin.readline() if

Re: [squid-users] squid3.4 - MySQL, PHP script - block websites

2015-11-15 Thread Antony Stone
On Sunday 15 November 2015 at 15:53:56, Jens Kallup wrote: > Hello, > > Now, I use the follow script. > But, it ends in endless search - web browser site search. > > #!/usr/bin/python > > import sys > import time > > def grant (): >sys.stdout.write( 'OK\n' ) > > def deny (): >

Re: [squid-users] ACL and http_access

2015-11-15 Thread Magic Link
Thank you, i'll test it tomorrow. My boss needs this because of his limited bandwith. And he really needs to limit the access during two crucial periods where the bandwith's availability is very important. Enrique > From: antony.st...@squid.open.source.it > To: squid-users@lists.squid-cache.org

Re: [squid-users] ACL and http_access

2015-11-15 Thread Antony Stone
On Thursday 12 November 2015 at 15:55:10, Magic Link wrote: > I want people don't have access to Internet, except one hour twice a day > with only some urls.listed in a file On 14/11/2015 11:23 p.m., Magic Link wrote: > I 've made a mistake so what i want is users can access Internet, except >

Re: [squid-users] squid3.4 - MySQL, PHP script - block websites

2015-11-15 Thread Eliezer Croitoru
Hey Jens, PHP failed long time ago to work nicely with squid. Do you think that SquidBlocker can fit your needs? You can understand what it is at: http://ngtech.co.il/squidblocker/ I think it might feet your needs just right. Python\perl\php will fit to a very small services while not utilizing

Re: [squid-users] sslBump adventures in enterprise production environment

2015-11-15 Thread Alex Rousskov
On 11/15/2015 12:03 PM, Eugene M. Zheganin wrote: > It's not even a HTTPS, its a tunneled HTTP CONNECT. But > squid for some reason thinks there shoudl be a HTTPS inside. Hello Eugene, Squid currently supports two kinds of CONNECT tunnels: 1. A regular opaque tunnel, as intended by HTTP

Re: [squid-users] sslBump adventures in enterprise production environment

2015-11-15 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 16.11.15 1:39, Alex Rousskov пишет: > On 11/15/2015 12:03 PM, Eugene M. Zheganin wrote: >> It's not even a HTTPS, its a tunneled HTTP CONNECT. But >> squid for some reason thinks there shoudl be a HTTPS inside. > > > Hello Eugene, > > Squid

Re: [squid-users] squid3.4 - MySQL, PHP script - block websites

2015-11-15 Thread Luis Daniel Lucio Quiroz
I think it is better to translate this code to c. Contact me, having c will give you speed and memory savings. Le 13 nov. 2015 8:22 PM, "Jens Kallup" a écrit : > Hello, > > I have problems to block web sites listet in mysql database. > When i start the script below, it works,

Re: [squid-users] Problem with squid3 authentication

2015-11-15 Thread Amos Jeffries
On 16/11/2015 7:17 a.m., Marcio Demetrio Bacci wrote: > Hi, > > My problem is as follows: > > The Windows stations in the domain are automatically authenticated on the > proxy, though the Linux stations ask for the password twice, even if the > password is entered correctly the first time. > >

Re: [squid-users] sslBump adventures in enterprise production environment

2015-11-15 Thread Alex Rousskov
On 11/15/2015 01:00 PM, Yuri Voinov wrote: > 16.11.15 1:39, Alex Rousskov пишет: >> Squid currently supports two kinds of CONNECT tunnels: >> 1. A regular opaque tunnel, as intended by HTTP specifications. >> 2. An inspected tunnel containing SSL/TLS-encrypted HTTP traffic. >> Opaque

Re: [squid-users] sslBump adventures in enterprise production environment

2015-11-15 Thread Eugene M. Zheganin
Hi. On 16.11.2015 00:14, Yuri Voinov wrote: > It's common knowledge. Squid is unable to pass an unknown protocol on > the standard port. Consequently, the ability to proxy this protocol does > not exist. > > If it was simply a tunneling ... It is not https. And not just > HTTP-over-443. This is

[squid-users] Problem with squid3 authentication

2015-11-15 Thread Marcio Demetrio Bacci
Hi, My problem is as follows: The Windows stations in the domain are automatically authenticated on the proxy, though the Linux stations ask for the password twice, even if the password is entered correctly the first time. Does somebody has an idea? Follow my squid.conf file ###

Re: [squid-users] sslBump adventures in enterprise production environment

2015-11-15 Thread Eugene M. Zheganin
Hi. On 15.11.2015 0:43, Walter H. wrote: > On 13.11.2015 14:53, Yuri Voinov wrote: >> There is no solution for ICQ with Squid now. >> >> You can only bypass proxying for ICQ clients. > from where do the ICQ clients get the trusted root certificates? > maybe this is the problem, that e.g. the

Re: [squid-users] sslBump adventures in enterprise production environment

2015-11-15 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-ICQ-contest-td4673938.html 16.11.15 1:03, Eugene M. Zheganin пишет: > Hi. > > On 15.11.2015 0:43, Walter H. wrote: >> On 13.11.2015 14:53, Yuri Voinov wrote: >>> There is no solution for

Re: [squid-users] sslBump adventures in enterprise production environment

2015-11-15 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 It's common knowledge. Squid is unable to pass an unknown protocol on the standard port. Consequently, the ability to proxy this protocol does not exist. If it was simply a tunneling ... It is not https. And not just HTTP-over-443. This is more