Re: [squid-users] HEAD over HTTPS

2016-02-25 Thread Amos Jeffries
On 26/02/2016 11:47 a.m., Dick Visser wrote: > Hi > > I'm trying to set up an acl to allow a link checker tool to do its > work through squid. > This tool is a Wordpress plugin. > The whole reason I have squid is so that Wordpress itself cannot > retrieve random stuff from the Internet. > > I

Re: [squid-users] SSL Bump matching Subject Alternative Names

2016-02-25 Thread Amos Jeffries
On 26/02/2016 12:38 a.m., Cohen-Rose, Adam wrote: > We¹re trying to use SSL bump to splice traffic from a CDN (cdn.teads.tv) > > The CDN server certificate uses Subject Alternative Names in its > certificate to identify the cdn.teads.tv domain rather than the Common > Name (which is set to

Re: [squid-users] Youtube "challenges"

2016-02-25 Thread Amos Jeffries
On 26/02/2016 6:54 a.m., xxiao8 wrote: > One month ago I asked in youtube's support forum on the possibility that > they have http for youtube.com in parallel with https, no response though. > > Other than the login page, I don't see why video streaming from youtube > can not use http in the same

Re: [squid-users] Optimizing squid

2016-02-25 Thread Alex Rousskov
On 02/25/2016 01:19 PM, Heiler Bemerguy wrote: >>> /2016/02/25 13:42:19 kid1| WARNING: swapfile header inconsistent with >>> available data >> I do not know what causes these in your environment. Do you see them >> when _not_ using any optional options on the cache_dir lines and not >> sending

Re: [squid-users] Optimizing squid

2016-02-25 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Eh. Looks like bug. 26.02.16 2:19, Heiler Bemerguy пишет: > > > Em 25/02/2016 16:29, Alex Rousskov escreveu: >>> Then: >>> /2016/02/25 13:42:19 kid1| WARNING: swapfile header inconsistent with >>> available data >> I do not know what causes these

Re: [squid-users] Optimizing squid

2016-02-25 Thread Alex Rousskov
On 02/25/2016 12:32 PM, Heiler Bemerguy wrote: > BTW, I just wiped out the caches again, put only one cache_dir and > started it again.. (killed everything, squid -z, then ./squid.rc start) In addition to previous suggestions, please make sure that your ./squid.rc does not [incorrectly] run

Re: [squid-users] Optimizing squid

2016-02-25 Thread Alex Rousskov
On 02/25/2016 09:58 AM, Heiler Bemerguy wrote: > So, to start from the start, after seeing squid was totally stable and > fast, running with NO cache_dirs, I tried to add only 2 rockstore > cache_dirs to test. > cache_dir rock /cache2/rock1 2 min-size=0 max-size=4096 slot-size=2048 >

Re: [squid-users] Optimizing squid

2016-02-25 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hm. What array does itself this time? 26.02.16 0:44, Heiler Bemerguy пишет: > > Since it started with both cache_dirs... > > > Em 25/02/2016 15:32, Yuri Voinov escreveu: >> > Don't think so. > > This messages floods all time? > > 26.02.16 0:17,

Re: [squid-users] Optimizing squid

2016-02-25 Thread Heiler Bemerguy
Since it started with both cache_dirs... Em 25/02/2016 15:32, Yuri Voinov escreveu: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Don't think so. This messages floods all time? 26.02.16 0:17, Heiler Bemerguy пишет: > > I waited squid -z to finish.. did a "ps auxw |grep squid" a dozen

Re: [squid-users] Optimizing squid

2016-02-25 Thread Heiler Bemerguy
I waited squid -z to finish.. did a "ps auxw |grep squid" a dozen times to check.. THEN I started it. It may have tried to serve something, as lots of users we're already conecting to it right after it started, but I'm still seeing a flood of warnings on error.log: /2016/02/25 15:06:38

Re: [squid-users] Youtube "challenges"

2016-02-25 Thread xxiao8
One month ago I asked in youtube's support forum on the possibility that they have http for youtube.com in parallel with https, no response though. Other than the login page, I don't see why video streaming from youtube can not use http in the same time, will someone wiretap this

Re: [squid-users] Squid 3.5.2 will only start if cache directory is empty

2016-02-25 Thread Matus UHLAR - fantomas
On 24.02.16 15:12, HawtDogFlvrWtr wrote: chmod 777 /dev/shm shouldn't that be 1777? That fixed it for me... even root didn't have permissions to access /dev/shm... root has always permissions by definition (they are not checked). unless you use SElinux, in which case problem lies in

Re: [squid-users] Optimizing squid

2016-02-25 Thread Amos Jeffries
On 26/02/2016 5:58 a.m., Heiler Bemerguy wrote: > > Hi Alex, Eliezer, Yuri, Amos.. > > So, to start from the start, after seeing squid was totally stable and > fast, running with NO cache_dirs, I tried to add only 2 rockstore > cache_dirs to test. > > conf: > /cache_dir rock /cache2/rock1 2

Re: [squid-users] Optimizing squid

2016-02-25 Thread Heiler Bemerguy
Hi Alex, Eliezer, Yuri, Amos.. So, to start from the start, after seeing squid was totally stable and fast, running with NO cache_dirs, I tried to add only 2 rockstore cache_dirs to test. conf: /cache_dir rock /cache2/rock1 2 min-size=0 max-size=4096 slot-size=2048// //cache_dir rock

Re: [squid-users] Squid None Aborted problem

2016-02-25 Thread secoonder
Amos Thank you very Much for your answer. The firewall rule full accept. """Do you have ICMP/ICMPv6 disabled on your network?""" i changed the line at down root@adana:/etc/squid3# more /etc/sysctl.conf | grep ipv6 net.ipv6.conf.all.forwarding=1 But the result is still the same.Or a made from other

Re: [squid-users] [squid 3.5.5] security Update Advisory SQUID-2016:2

2016-02-25 Thread Ralf Hildebrandt
* Ralf Hildebrandt : > > Maybe yes, maye no. It seems to be one of those things that passes all > > testing, then hits in production. > > > > A few people seem to encounter it immediately, though I dont have a > > clear picture yet about whether it affects everybody

Re: [squid-users] [squid 3.5.5] security Update Advisory SQUID-2016:2

2016-02-25 Thread Eliezer Croitoru
I have a testing package ready for CentOS 7 and will try to see if it affects my local installation just out of the box. Eliezer On 25/02/2016 17:16, Amos Jeffries wrote: Maybe yes, maye no. It seems to be one of those things that passes all testing, then hits in production. A few people

Re: [squid-users] [squid 3.5.5] security Update Advisory SQUID-2016:2

2016-02-25 Thread Amos Jeffries
On 25/02/2016 11:17 p.m., Paul Martin wrote: > Hello, > > 3.5.15 is it really stable ? > > http://www.spinics.net/lists/squid/msg79997.html > says 3.5.15 crash ... > Maybe yes, maye no. It seems to be one of those things that passes all testing, then hits in production. A few people seem to

Re: [squid-users] Squid 3.5.15 for Microsoft Windows 64-bit is available

2016-02-25 Thread Eliezer Croitoru
Great to hear Rafael! Debian and Ubuntu squid debs will help many to upgrade their systems easily. Eliezer On 25/02/2016 12:02, Rafael Akchurin wrote: NOTE1: we also plan to backport recompilation of 3.5.15 version of Squid to Ubuntu 14.04 LTS. The repo will be made available on

Re: [squid-users] Youtube "challenges"

2016-02-25 Thread Steve Hill
On 25/02/16 03:52, Darren wrote: The user visits a page on my server with the YouTube links. Visiting this page triggers a state based ACL (something like the captive portal login). The user then clicks a YouTube link and squid checks this ACL to see if the user is originating the request from