Re: [squid-users] squid reverse proxy infront of exchange 2010

2015-12-07 Thread Alex Samad
Hi Any suggestions on how to debug this... I wouldn't mind rolling forward to 3.5 again On 2 December 2015 at 20:39, Alex Samad wrote: > Just to add to this I have a lot of these in the log file > > TCP_MISS_ABORTED/000 0 RPC_IN_DATA > TCP_MISS_ABORTED/200 4322 RPC_OUT_DATA >

Re: [squid-users] Squid with NTLM auth behind netscaler

2015-12-07 Thread Fabio Bucci
Thanks Amos. So, what do you suggest? Implement kerberos authetication instead NTLM one? I have to check if netscaler is able to perform that kind hack you wrote before. Thanks again, Fabio 2015-12-05 7:22 GMT+01:00 Amos Jeffries : > On 5/12/2015 5:39 a.m., Fabio Bucci

Re: [squid-users] Deny Access based on SSL-Blacklists (SHA1-Fingerprint) with ssl_bump

2015-12-07 Thread Alex Rousskov
On 12/07/2015 04:37 AM, Ralf Hildebrandt wrote: > * Alex Rousskov : >> Please note that if you do not want to bump anything, then the following >> should also work (bugs notwithstanding): >> >> ssl_bump splice whitelist >> ssl_bump peek all >> ssl_bump

Re: [squid-users] Deny Access based on SSL-Blacklists (SHA1-Fingerprint) with ssl_bump

2015-12-07 Thread Ralf Hildebrandt
* Alex Rousskov : > Please consider adding this fine example to the SslPeekAndSplice wiki > page at http://wiki.squid-cache.org/Features/SslPeekAndSplice > > > Please note that if you do not want to bump anything, then the following > should also work (bugs

Re: [squid-users] Problems with ldap authentication

2015-12-07 Thread Marcio Demetrio Bacci
I have changed my authentication block as below, but is not working. The proxy user is a Read Only Domain Controller member. The password is correct. Samba4, krb5-user and winbindd are installed and work perfectly. Do I need install any other package? How can I test in command line? Have

Re: [squid-users] Deny Access based on SSL-Blacklists (SHA1-Fingerprint) with ssl_bump

2015-12-07 Thread Tom Tom
The configuration provided by Alex works for me (squid 3.5.11) if: * the http_port-directive is configured with ssl-bump and a certificate (ex. http_port 3128 ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/usr/local/certs/myCA.pem) * the SHA1-fingerprint in the file

Re: [squid-users] Deny Access based on SSL-Blacklists (SHA1-Fingerprint) with ssl_bump

2015-12-07 Thread Alex Rousskov
On 12/07/2015 02:05 PM, Tom Tom wrote: > The configuration provided by Alex works for me (squid 3.5.11) Thank you for testing and helping expose problems. > if: > * the http_port-directive is configured with ssl-bump and a > certificate (ex. http_port 3128 ssl-bump

Re: [squid-users] http request header must use hostname

2015-12-07 Thread Walter H.
On 07.12.2015 08:49, Amos Jeffries wrote: On 7/12/2015 5:41 p.m., Walter H. wrote: On 07.12.2015 00:21, Amos Jeffries wrote: Getting complicated... So xxiao8, why does one want to censor these requests anyway? Amos try to connect natively with the IP-Address instead of the hostname ... the

[squid-users] [squid-announce] Squid 3.5.12 is available

2015-12-07 Thread Amos Jeffries
The Squid HTTP Proxy team is very pleased to announce the availability of the Squid-3.5.12 release! This release is a bug fix release resolving issues found in the prior Squid releases. The major changes to be aware of: * Bug #4374: refresh_pattern config parser (%) For some time the

[squid-users] [squid-announce] Squid 4.0.3 beta is available

2015-12-07 Thread Amos Jeffries
The Squid HTTP Proxy team is very pleased to announce the availability of the Squid-4.0.3 release! This release is a beta release resolving issues found in the prior Squid releases. The major changes to be aware of: * Several regression bugs - Bug 4372: missing template files - Bug 4371:

Re: [squid-users] Problems with ldap authentication

2015-12-07 Thread Amos Jeffries
On 8/12/2015 7:47 a.m., Marcio Demetrio Bacci wrote: > My LDAP Authentication do not work in Squid. I have already saw many > tutorials, but nothing solve this problem. > I have installed Squid 3.4 on Debian 8. My DC is a* Samba 4.2.* > In /var/log/squid3/cache.log appear the message: >

[squid-users] Problems with ldap authentication

2015-12-07 Thread Marcio Demetrio Bacci
My LDAP Authentication do not work in Squid. I have already saw many tutorials, but nothing solve this problem. I have installed Squid 3.4 on Debian 8. My DC is a* Samba 4.2.* In /var/log/squid3/cache.log appear the message: *squid_ldap_auth: WARNING, could not bind to binddn 'Invalid