Re: [squid-users] SSL Bump Failures with Google and Wikipedia [SOLVED]

2017-09-30 Thread Jeffrey Merkey
On 9/30/17, Jeffrey Merkey wrote: > On 9/30/17, Rafael Akchurin wrote: >> Hello Jeff, >> >> Do not forget Google and YouTube are now using brotli encoding >> extensively, >> not only gzip. >> >> Best regards, >> Rafael Akchurin >> >>> Op 30 sep. 2017 om 23:49 heeft Jeffrey Merkey het >>> volgend

Re: [squid-users] Make all IPv6 ips on system to be used as a proxy

2017-09-30 Thread Eliezer Croitoru
Then he doesn't need Squid but a customized proxy for ipv6 and ipv4.. Right? Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf O

Re: [squid-users] Content injection

2017-09-30 Thread Jeffrey Merkey
On 9/30/17, Amos Jeffries wrote: > On 01/10/17 16:12, Alex Rousskov wrote: >> On 09/30/2017 07:44 PM, stern0m1 wrote: >> >>> I am looking for a proxy that can inject content easily. Static content >>> to >>> every HTML document. >>> Can I do this easily with squid? >> >> You can inject some "HTML

Re: [squid-users] Content injection

2017-09-30 Thread Amos Jeffries
On 01/10/17 16:12, Alex Rousskov wrote: On 09/30/2017 07:44 PM, stern0m1 wrote: I am looking for a proxy that can inject content easily. Static content to every HTML document. Can I do this easily with squid? You can inject some "HTML documents" using Squid combined with an eCAP or ICAP conte

Re: [squid-users] Make all IPv6 ips on system to be used as a proxy

2017-09-30 Thread Amos Jeffries
On 01/10/17 10:21, Eliezer Croitoru wrote: Anyone mentioned tproxy? It works for me... It serves if none wants the same IP on both incoming and outgoing traffic. But the question was only for determining static IPs on outgoing based on Squids listening *ports*, ignoring client IP - more lik

Re: [squid-users] Content injection

2017-09-30 Thread Alex Rousskov
On 09/30/2017 07:44 PM, stern0m1 wrote: > I am looking for a proxy that can inject content easily. Static content to > every HTML document. > Can I do this easily with squid? You can inject some "HTML documents" using Squid combined with an eCAP or ICAP content adaptation service, but it is not

Re: [squid-users] SSL Bump Failures with Google and Wikipedia [SOLVED]

2017-09-30 Thread Jeffrey Merkey
On 9/30/17, Rafael Akchurin wrote: > Hello Jeff, > > Do not forget Google and YouTube are now using brotli encoding extensively, > not only gzip. > > Best regards, > Rafael Akchurin > >> Op 30 sep. 2017 om 23:49 heeft Jeffrey Merkey het >> volgende geschreven: >> >>> On 9/30/17, Eliezer Croitoru

[squid-users] Content injection

2017-09-30 Thread stern0m1
I am looking for a proxy that can inject content easily. Static content to every HTML document. Can I do this easily with squid? Is there another proxy that can do this easily? Thanks -- Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html

Re: [squid-users] SSL Bump Failures with Google and Wikipedia

2017-09-30 Thread Yuri
I guess in HTTP headers. =-O :-D 01.10.2017 7:05, Eliezer Croitoru пишет: > Hey Rafael, > > Where have you seen the details about brotli being used? > > Thanks, > Eliezer > > > Eliezer Croitoru > Linux System Administrator > Mobile: +972-5-28704261 > Email: elie...@ngtech.co.il > > > > -

Re: [squid-users] SSL Bump Failures with Google and Wikipedia

2017-09-30 Thread Eliezer Croitoru
Hey Rafael, Where have you seen the details about brotli being used? Thanks, Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: Rafael Akchurin [mailto:rafael.akchu...@diladele.com] Sent: Sunday, Octob

Re: [squid-users] SSL Bump Failures with Google and Wikipedia

2017-09-30 Thread Jeffrey Merkey
On 9/30/17, Rafael Akchurin wrote: > Hello Jeff, > > Do not forget Google and YouTube are now using brotli encoding extensively, > not only gzip. > > Best regards, > Rafael Akchurin > >> Op 30 sep. 2017 om 23:49 heeft Jeffrey Merkey het >> volgende geschreven: >> >>> On 9/30/17, Eliezer Croitoru

Re: [squid-users] SSL Bump Failures with Google and Wikipedia

2017-09-30 Thread Rafael Akchurin
Hello Jeff, Do not forget Google and YouTube are now using brotli encoding extensively, not only gzip. Best regards, Rafael Akchurin > Op 30 sep. 2017 om 23:49 heeft Jeffrey Merkey het > volgende geschreven: > >> On 9/30/17, Eliezer Croitoru wrote: >> Hey Jeffrey, >> >> What happens when y

Re: [squid-users] SSL Bump Failures with Google and Wikipedia

2017-09-30 Thread Jeffrey Merkey
On 9/30/17, Jeffrey Merkey wrote: > On 9/30/17, Eliezer Croitoru wrote: >> Hey Jeffrey, >> >> What happens when you disable the next icap service this way: >> icap_service service_avi_resp respmod_precache >> icap://127.0.0.1:1344/cherokee bypass=0 >> adaptation_access service_avi_resp deny all >

Re: [squid-users] SSL Bump Failures with Google and Wikipedia

2017-09-30 Thread Jeffrey Merkey
On 9/30/17, Eliezer Croitoru wrote: > Hey Jeffrey, > > What happens when you disable the next icap service this way: > icap_service service_avi_resp respmod_precache > icap://127.0.0.1:1344/cherokee bypass=0 > adaptation_access service_avi_resp deny all > > Is it still the same? > What I suspect i

Re: [squid-users] Make all IPv6 ips on system to be used as a proxy

2017-09-30 Thread Eliezer Croitoru
Anyone mentioned tproxy? It works for me... Eliezer http://ngtech.co.il/lmgtfy/ Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of xpro6000 Sent: Saturday, September 30, 2017 00:0

Re: [squid-users] SSL Bump Failures with Google and Wikipedia

2017-09-30 Thread Eliezer Croitoru
Hey Jeffrey, What happens when you disable the next icap service this way: icap_service service_avi_resp respmod_precache icap://127.0.0.1:1344/cherokee bypass=0 adaptation_access service_avi_resp deny all Is it still the same? What I suspect is that the requests are defined to accept gzip compr

[squid-users] SSL Bump Failures with Google and Wikipedia

2017-09-30 Thread Jeffrey Merkey
Hello All, I have been working with the squid server and icap and I have been running into problems with content cached from google and wikipedia. Some sites using https, such as Centos.org work perfectly with ssl bumping and I get the decrypted content as html and it's readable. Other sites, such