Re: [squid-users] websockets through Squid

2020-10-16 Thread Amos Jeffries
On 17/10/20 3:07 am, Vieri wrote: > Hi, > > I think I found something in the cache.log I posted before. > > sendRequest: HTTP Server conn* local=PUB_IPv4_ADDR_3 > ... > sendRequest: HTTP Server conn* local=PUB_IPv4_ADDR_2 > > It seems that Squid sometimes connects to the remote HTTP server with

Re: [squid-users] allow certian user ips to access only 2 domains and disallow everything

2020-10-16 Thread Amos Jeffries
On 16/10/20 10:21 pm, simon ben wrote: > I have squid running perfectly fine on centos 7 64 bit with no issues > I want to allow certain user ips to access a few sites and block > everything else so below is the config > the sites are  > 1) paloaltonetworks.com > 2) redcloak.secureworks.com > Not

Re: [squid-users] websockets through Squid

2020-10-16 Thread Vieri
On Friday, October 16, 2020, 4:48:55 PM GMT+2, Alex Rousskov wrote: > tcp_outgoing_address. OK, I fixed the "local" address issue, but I'm still seeing the same behavior. I pinpointed one particular request that's failing: 2020/10/16 16:56:37.250 kid1| 85,2| client_side_request.cc(745) cl

[squid-users] websockets through Squid

2020-10-16 Thread Vieri
BTW how does Squid decide which IP address to use for "local" here below? sendRequest: HTTP Server conn* local= I tried specifying a bind address in http_port and https_port as well as routing traffic from that address out through just one ppp interface, but that doesn't seem to change the way

[squid-users] websockets through Squid

2020-10-16 Thread Vieri
Hi, I think I found something in the cache.log I posted before. sendRequest: HTTP Server conn* local=PUB_IPv4_ADDR_3 ... sendRequest: HTTP Server conn* local=PUB_IPv4_ADDR_2 It seems that Squid sometimes connects to the remote HTTP server with either one of the available addresses on the Squid

Re: [squid-users] websockets through Squid

2020-10-16 Thread Alex Rousskov
On 10/16/20 10:41 AM, Vieri wrote: > BTW how does Squid decide which IP address to use for "local" here below? > > sendRequest: HTTP Server conn* local= By default, Squid does not make that decision. The OS does it for Squid. You can try to force Squid to bind to a specific source address for out

Re: [squid-users] websockets through Squid

2020-10-16 Thread Alex Rousskov
On 10/16/20 3:35 AM, Vieri wrote: > squid-5.0.4-20200825-rf4ade365f/src/cf.data.pre contains: >     Usage: http_upgrade_request_protocols allow|deny [!]acl ... > >     The required "protocol" parameter is either an all-caps word OTHER or > an >     explicit protocol name (e.g. "WebSo

[squid-users] allow certian user ips to access only 2 domains and disallow everything

2020-10-16 Thread simon ben
I have squid running perfectly fine on centos 7 64 bit with no issuesI want to allow certain user ips to access a few sites and block everything else so below is the configthe sites are 1) paloaltonetworks.com2) redcloak.secureworks.com in squid.conf---acl userlist src "/etc/squid

Re: [squid-users] websockets through Squid

2020-10-16 Thread Vieri
On Thursday, October 15, 2020, 5:28:03 PM GMT+2, Alex Rousskov wrote: >> In other words, I do not need to be specific with >> 'http_upgrade_request_protocols WebSocket allow all' unless I want >> to, right? > > Just in case somebody else starts copy-pasting the above rule into their > configu