Re: [squid-users] About SSL peek-n-splice/bump configurations

2018-09-19 Thread Julian Perconti
I reply to myself due to a bounce and I have to re-enable the membership to list at least 3 times at month. Maybe a problem with Yahoo. >>> Alex: After a splice rule is applied, SslBump is over. No more rules are >>> checked. No more loops are iterated. Squid simply "exits" the SslBump >>>

Re: [squid-users] About SSL peek-n-splice/bump configurations

2018-09-19 Thread Alex Rousskov
On 09/19/2018 10:23 AM, Julian Perconti wrote: >> Alex: After a splice rule is applied, SslBump is over. No more rules are >> checked. No more loops are iterated. Squid simply "exits" the SslBump >> feature (and becomes a TCP tunnel). > What about the meaning of the ACL's at step1 when

[squid-users] Any suggestions or comments about my configuration? squid 3.5.20

2018-09-19 Thread Service MV
Dear Ones, the more I use Squid the more I realize how powerful it is. And like all powerful software it can be complex at first. I would like to share my settings and if possible listen (read actually) your comments and suggestions. My goals of using squid: - Transparent authentication of my AD

Re: [squid-users] Help: squid restarts and squidGuard die

2018-09-19 Thread Donald Muller
Amos, So instead of using squidguard are you saying you should use something like the following? acl ads dstdomain -i "/etc/squid/squid-ads.acl" acl adult dstdomain -i "/etc/squid/squid-adult.acl" http_access deny ads http_access deny adult Do the lists need to be sorted in alphabetical

Re: [squid-users] Help: squid restarts and squidGuard die

2018-09-19 Thread Marcus Kool
On 18/09/18 23:03, Amos Jeffries wrote: On 19/09/18 1:54 AM, neok wrote: Thank you very much Amos for putting me in the right direction. I successfully carried out the modifications you indicated to me. Regarding ufdbGuard, if I understood correctly, what you recommend is to use the

Re: [squid-users] About SSL peek-n-splice/bump configurations

2018-09-19 Thread Julian Perconti
>After a splice rule is applied, SslBump is over. No more rules are >checked. No more loops are iterated. Squid simply "exits" the SslBump >feature (and becomes a TCP tunnel). How is that? What about the meaning of the ACL's at step1 when splice? e.g.: There only these two rules for ssl_bump

Re: [squid-users] Squid Cache Server

2018-09-19 Thread Mujtaba Hassan Madani
Hi Amos, thanks for your concern, as I informed you Iam looking to install Squid on Ubuntu Linux server for Caching purpose once I kickoff i will notify you to have your assistant. regards Mujtaba H, From: squid-users on behalf of Amos Jeffries Sent:

Re: [squid-users] Help: squid restarts and squidGuard die

2018-09-19 Thread Enrico Heine
Thank you for this information Amos! :) I had ufdbguard as possible replacement in my list, your info about it beeing a fork, is the reason that I will switch to it soon. Thanks :) Am 19. September 2018 04:03:39 MESZ schrieb Amos Jeffries : >On 19/09/18 1:54 AM, neok wrote: >> Thank you very

Re: [squid-users] TCP_MISS/502 - audio stream - none default http ports

2018-09-19 Thread Dörfler , Andreas
Am Mittwoch, den 19.09.2018, 14:38 +1200 schrieb Amos Jeffries: > This statement is false, and very bad security practice. Squid handles > HTTP-level access controls. Firewalls handle network-layer access > control. Either way multiple layers of security that work together are > better than one -