[squid-users] SSL mitm while properly reflecting bad upstream certs?

2016-03-10 Thread Will Rouesnel
Can squid mitm SSL connections, but deliberately generate invalid certs for upstream connections which are self signed or invalid so my browser will flag them? -- Sent from my Android device with K-9 Mail. Please excuse my brevity.___ squid-users

Re: [squid-users] Need advice on some crazy access control requirements

2016-03-10 Thread Eliezer Croitoru
Hey Victor, I do not think it's too crazy. It is a very common statement in the Law of Pharmacy to not operate "heavy" tools when taking a specific medicine. In most cases it is there since the operation of such tools(light\heavy) requires the worker\operator a specific amount of

Re: [squid-users] Need advice on some crazy access control requirements

2016-03-10 Thread Amos Jeffries
On 11/03/2016 4:31 p.m., Victor Sudakov wrote: > Dear Colleagues, > > New Internet access rules are being introduced in our company, among > them there is a requirement to have special groups of Internet users > who are permitted to: > > 1. Download files from the Internet. > That one is

Re: [squid-users] Kerberos (Negotiate) problem with win2008 AD users

2016-03-10 Thread Victor Sudakov
In case anyone reads Russian, I have covered 2 new topics (possible problems) in the Russian Squid+Kerberos Howto: http://tinyurl.com/h68emax -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ squid-users mailing list

Re: [squid-users] Sudden but sustained high bandwidth usage

2016-03-10 Thread Eliezer Croitoru
Hey, I wanted to ask something very specific, how often do you restart the service if at all? what shutdown_flifetime [http://www.squid-cache.org/Doc/config/shutdown_lifetime/] are you using? Eliezer On 09/03/2016 15:17, Heiler Bemerguy wrote: Hi Amos, Now you can help me on tracking it

[squid-users] Need advice on some crazy access control requirements

2016-03-10 Thread Victor Sudakov
Dear Colleagues, New Internet access rules are being introduced in our company, among them there is a requirement to have special groups of Internet users who are permitted to: 1. Download files from the Internet. 2. Use Web forums. 3. Use streaming audio/video. By default users should have

Re: [squid-users] PURGE ERR_TOO_BIG

2016-03-10 Thread Eliezer Croitoru
Sorry I got confused with my email service issue. +1 Alex Eliezer On 11/03/2016 03:13, Alex Rousskov wrote: On 03/10/2016 04:43 PM, joe wrote: trying to purge url squidclient -h192.192.192.212 -p3128 PURGE http://www.oggi.it/global_assets/js/searchform.js Missing squidclient -m option to

Re: [squid-users] PURGE ERR_TOO_BIG

2016-03-10 Thread Amos Jeffries
On 11/03/2016 12:43 p.m., joe wrote: > trying to purge url > squidclient -h192.192.192.212 -p3128 PURGE > http://www.oggi.it/global_assets/js/searchform.js > > > Generated Fri, 11 Mar 2016 00:08:34 GMT by proxy.netgatesss.com > (squid) > > > > debug_options ALL,2 You cannot purge something

Re: [squid-users] pages not being cached

2016-03-10 Thread Amos Jeffries
On 11/03/2016 6:30 a.m., Cindy Cicalese wrote: > Thank you for your response, Eliezer. > > I added the logformat command that you suggested. I needed to modify it > slightly, since I'm running squid 3.1 (I changed %>eui). An example of what I am seeing in /var/log/squid/access.log is: The 'eui'

Re: [squid-users] PURGE ERR_TOO_BIG

2016-03-10 Thread Eliezer Croitoru
squid.conf ... Eliezer On 11/03/2016 01:43, joe wrote: trying to purge url squidclient -h192.192.192.212 -p3128 PURGE http://www.oggi.it/global_assets/js/searchform.js Generated Fri, 11 Mar 2016 00:08:34 GMT by proxy.netgatesss.com (squid) debug_options ALL,2 --- 2016/03/11

Re: [squid-users] ACL processing

2016-03-10 Thread Alex Rousskov
On 03/10/2016 06:12 PM, Alex Samad wrote: > how can I set it up so that specific URL's are not bumped You cannot. Peeking or staring at unencrypted SSL client and server details does not provide Squid with HTTP/URL-level information. Your splicing/bumping decision has to be made based on

Re: [squid-users] PURGE ERR_TOO_BIG

2016-03-10 Thread Alex Rousskov
On 03/10/2016 04:43 PM, joe wrote: > trying to purge url > squidclient -h192.192.192.212 -p3128 PURGE > http://www.oggi.it/global_assets/js/searchform.js Missing squidclient -m option to specify the PURGE _method_. Alex. ___ squid-users mailing list

Re: [squid-users] pages not being cached

2016-03-10 Thread Amos Jeffries
On 11/03/2016 3:22 a.m., Cindy Cicalese wrote: > I am using Squid for caching with Apache and MediaWiki over HTTPS only. > Unfortunately, no pages are being cached; each request is being sent from > Squid to Apache. I would appreciate help figuring out how to get caching to > work. > > My

Re: [squid-users] PURGE ERR_TOO_BIG

2016-03-10 Thread joe
squidclient -h192.192.192.212 -p3128 PURGE http://www.lorientlejour.com/js/owl.carousel/owl.carousel.min.js that one other error it dose not remove it at all stay hit 2016/03/11 02:30:04.517 kid1| 5,2| TcpAcceptor.cc(220) doAccept: New connection on FD 25 2016/03/11 02:30:04.518 kid1| 5,2|

Re: [squid-users] pages not being cached

2016-03-10 Thread Cindy Cicalese
Thank you for your response, Eliezer. I added the logformat command that you suggested. I needed to modify it slightly, since I'm running squid 3.1 (I changed eui). An example of what I am seeing in /var/log/squid/access.log is: 1457630282.410490 172.31.169.175 TCP_MISS/200 4621 GET

Re: [squid-users] pages not being cached

2016-03-10 Thread Eliezer Croitoru
Hey Cindy, I do not have too much experience with MediaWIKI but I ran some test on it in the past for both caching and other things. I am using this logformat to detect couple things that are related to caching: logformat cache_headers %ts.%03tu %6tr %>a %Ss/%03>Hs %%Sh/%h"

[squid-users] pages not being cached

2016-03-10 Thread Cindy Cicalese
I am using Squid for caching with Apache and MediaWiki over HTTPS only. Unfortunately, no pages are being cached; each request is being sent from Squid to Apache. I would appreciate help figuring out how to get caching to work. My configuration is as follows: - Squid is configured to listen

Re: [squid-users] Squid reverse proxy and WebSockets.

2016-03-10 Thread Amos Jeffries
On 11/03/2016 1:02 a.m., Trent Renshaw wrote: > Hi, > > We are able to pass and perform a WebSocket connection upgrade to a backend > server using Nginx without any issue. > > However, we use Squid as a reverse proxy in our a production environment and > cannot find any documentation on how

[squid-users] Squid reverse proxy and WebSockets.

2016-03-10 Thread Trent Renshaw
Hi, We are able to pass and perform a WebSocket connection upgrade to a backend server using Nginx without any issue. However, we use Squid as a reverse proxy in our a production environment and cannot find any documentation on how to pass and/or perform the connection upgrade in Squid.

Re: [squid-users] clientProcessHit

2016-03-10 Thread Amos Jeffries
On 10/03/2016 10:57 p.m., joe wrote: > >> Ah, you said you understood Vary. But this mail indicates that you do >> not quite understand it well enough. > i do understand may be the way sometime i try to explain it goes buggy lol > like those bug any way > >> I prune away the extra headers to

Re: [squid-users] squid crash on restart

2016-03-10 Thread Yuri Voinov
Sounds known :))) I faced this behaviour with 3.5 all time, which is forced me to jump to 4.x. 3.5 dies on my platform every shutdown, so this made it completely unusable in production. But 4.x has the similar issue: http://bugs.squid-cache.org/show_bug.cgi?id=4438 10.03.16 16:16,

Re: [squid-users] clientProcessHit

2016-03-10 Thread joe
>Ah, you said you understood Vary. But this mail indicates that you do >not quite understand it well enough. i do understand may be the way sometime i try to explain it goes buggy lol like those bug any way >I prune away the extra headers to clarify: >>Firefox: >> GET /en_US/embeds.js HTTP/1.1

Re: [squid-users] squid crash on restart

2016-03-10 Thread Amos Jeffries
On 10/03/2016 4:41 p.m., Alex Samad wrote: > Hi > > running > rpm -qa squid > squid-3.5.14-1.el6.x86_64 > > > doing a restart saw this > 2016/03/10 14:36:28 kid1| Squid Cache (Version 3.5.14): Exiting normally. > FATAL: Received Segment Violation...dying. > 2016/03/10 14:36:28 kid1|