Re: [squid-users] Squid + Squidguard Youtube URL video filtering

2018-08-16 Thread Alex K
On Thu, Aug 16, 2018, 22:51 Roberto Carna wrote: > Dear Amos, I've tried to sniff the HTTP requests when I ask for: > > https://www.youtube.com/embed/ff9sDLGtnK8?rel=0=0 > > After that I've created a Squidguard exception list as below: > > ytimg.com > googlevideo.com > googleapis.com >

Re: [squid-users] Squid and ICMP

2018-08-07 Thread Alex K
Thanx Amos, It is clear. Alex On Tue, Aug 7, 2018 at 9:20 PM, Amos Jeffries wrote: > On 08/08/18 04:56, Alex K wrote: > > Hi all, > > > > I have a box with fairly restrictive firewall. > > I see that the box blocks connections of squid to the requested sites > &g

[squid-users] Squid and ICMP

2018-08-07 Thread Alex K
Hi all, I have a box with fairly restrictive firewall. I see that the box blocks connections of squid to the requested sites when squid tries to reach/send ICMP to them: 2018/08/07 16:51:57| Error sending to ICMP packet to 213.133.127.247. ERR: (1) Operation not permitted 2018/08/07 16:51:59|

Re: [squid-users] Squid File descriptors warning

2018-08-07 Thread Alex K
On Tue, Aug 7, 2018 at 11:26 AM, Amos Jeffries wrote: > On 07/08/18 19:45, Alex K wrote: > > Hi all, > > > > I observed the following warning at squid cache logs: > > > > WARNING! Your cache is running out of filedescriptors > > > > Googlin

[squid-users] Squid File descriptors warning

2018-08-07 Thread Alex K
Hi all, I observed the following warning at squid cache logs: WARNING! Your cache is running out of filedescriptors Googling around I tried to increase the default file descriptors of the system (I am runnign Debian9 x64 bit), by setting at /etc/sysctl.conf: fs.file-max=802762 Restarted

Re: [squid-users] Bounces

2018-08-04 Thread Alex K
my setting to "accept all", I have drops from various mailing lists due to bounces. Why? No idea. Thanks and regards Goetz R. Schultz On 04/08/18 16:48, Matus UHLAR - fantomas wrote: > On 04.08.18 18:29, Alex K wrote: >> I have been receiving lately the following from th

[squid-users] Bounces

2018-08-04 Thread Alex K
Hi all, I have been receiving lately the following from the list: Your membership in the mailing list squid-users has been disabled due to excessive bounces Any known issues with the list? Alex ___ squid-users mailing list

Re: [squid-users] PID file /var/run/squid.pid not readable AND Supervising process XXX which is not our child

2018-06-09 Thread Alex K
After proceeding with using the shipped service file, then systemctl daemon-reload I do not experience any stuck reboots at the moment. Alex On Sat, Jun 9, 2018 at 4:30 PM, Alex K wrote: > Getting back to this, I face also issues that seems to be related with how > systemd handles

Re: [squid-users] PID file /var/run/squid.pid not readable AND Supervising process XXX which is not our child

2018-06-09 Thread Alex K
Getting back to this, I face also issues that seems to be related with how systemd handles squid. Frequently when I try restart the VM the VM is stuch at stopping squid and it never restarts. Checking the differences between the autogenerated service file and the one shipped with squid I see:

Re: [squid-users] Squid configuration sanity check

2018-05-16 Thread Alex K
Ok, clear. Thank you Amos. Alex On Wed, May 16, 2018 at 3:33 PM, Amos Jeffries <squ...@treenet.co.nz> wrote: > On 16/05/18 18:17, Alex K wrote: > > Hi again, > > > > With this config I get: > > > > ERROR: No forward-proxy ports configured. > > &

Re: [squid-users] Squid configuration sanity check

2018-05-16 Thread Alex K
, May 8, 2018 at 7:49 PM, Amos Jeffries <squ...@treenet.co.nz> wrote: > On 08/05/18 22:36, Alex K wrote: > > Correction: > > > > On Tue, May 8, 2018 at 1:35 PM, Alex K wrote: > > > > Hi Amos, > > > > On Tue, May 8, 2018 at 8:55 AM, Amos Jeffri

Re: [squid-users] Collecting squid logs to DB

2018-05-13 Thread Alex K
> > Eliezer Croitoru > Linux System Administrator > Mobile: +972-5-28704261 > Email: elie...@ngtech.co.il > > > > *From:* Alex K <rightkickt...@gmail.com> > *Sent:* Sunday, May 13, 2018 01:56 > *To:* Eliezer Croitoru <elie...@ngtech.co.il> > *Cc:* squid-u

Re: [squid-users] Collecting squid logs to DB

2018-05-12 Thread Alex K
; > Eliezer Croitoru > Linux System Administrator > Mobile: +972-5-28704261 > Email: elie...@ngtech.co.il > > > > *From:* squid-users <squid-users-boun...@lists.squid-cache.org> *On > Behalf Of *Alex K > *Sent:* Saturday, May 5, 2018 01:20 > *To:* squid-use

Re: [squid-users] Help with WCCP: Cisco 1841 to Squid 3.5.25 on Ubuntu 16

2018-05-08 Thread Alex K
t > made a difference.. but same result. > > > > > Sent: Wednesday, May 09, 2018 at 2:37 PM > From: "Alex K" <rightkickt...@gmail.com> > To: "Ilias Clifton" <adili...@gmx.com> > Cc: squid-users@lists.squid-cache.org > Subject: Re: [squid-users] Hel

Re: [squid-users] Help with WCCP: Cisco 1841 to Squid 3.5.25 on Ubuntu 16

2018-05-08 Thread Alex K
Hi, At the wccp0 interface do you see bidirectional http traffic? If the squid box has multiple interfaces, do you see traffic on its wan interface? That traffic might need NATing. Also I would check if squidbox drops any packages in case you have firewall configured on it. Alex On Wed, May

Re: [squid-users] Squid configuration sanity check

2018-05-08 Thread Alex K
Correction: On Tue, May 8, 2018 at 1:35 PM, Alex K <rightkickt...@gmail.com> wrote: > Hi Amos, > > On Tue, May 8, 2018 at 8:55 AM, Amos Jeffries <squ...@treenet.co.nz> > wrote: > >> On 08/05/18 04:56, Alex K wrote: >> > Hi Amos, >> > >&

Re: [squid-users] Squid configuration sanity check

2018-05-08 Thread Alex K
Hi Amos, On Tue, May 8, 2018 at 8:55 AM, Amos Jeffries <squ...@treenet.co.nz> wrote: > On 08/05/18 04:56, Alex K wrote: > > Hi Amos, > > > > On Mon, May 7, 2018 at 7:30 PM, Amos Jeffries wrote: > > > > On 08/05/18 00:24, Alex K wrote: > > >

Re: [squid-users] Squid configuration sanity check

2018-05-07 Thread Alex K
Hi Amos, On Mon, May 7, 2018 at 7:30 PM, Amos Jeffries <squ...@treenet.co.nz> wrote: > On 08/05/18 00:24, Alex K wrote: > > Hi all, > > > > I wanted to check with your accumulated wisdom the following squid > > configuration. > > > >

[squid-users] Squid configuration sanity check

2018-05-07 Thread Alex K
Hi all, I wanted to check with your accumulated wisdom the following squid configuration. The config is working both for splice or bump (by commenting/uncommenting the respective line) using TPROXY. It is a config ported form an old installation of squid 3.1 for the new 3.5 and although I did

[squid-users] Collecting squid logs to DB

2018-05-04 Thread Alex K
Hi all, I had a previous setup on Debian 7 with squid and I was using mysar to collect squid logs and store them to DB and provide some browsing report at the end of the day. Now at Debian 9, trying to upgrade the whole setup, I see that mysar does not compile. Checking around I found mysar-ng

Re: [squid-users] Squid with squidguard

2018-04-26 Thread Alex K
ufdbguard as it seems promising. Thanx, Alex On Thu, Apr 26, 2018 at 4:02 AM, Amos Jeffries <squ...@treenet.co.nz> wrote: > On 25/04/18 23:44, Alex K wrote: > > Hi all, > > > > I was using a squid (3.1.20) + squidguard setup (to filter out several > > site cate

[squid-users] Squid with squidguard

2018-04-25 Thread Alex K
Hi all, I was using a squid (3.1.20) + squidguard setup (to filter out several site categories) on Debian 7 and the setup worked. The squidguard was invoked from squid.conf as below: redirect_program /usr/bin/squidGuard -c /etc/squidguard/squidGuard.conf redirect_children 7 I am now testing the

Re: [squid-users] tproxy first time implementation on squid.

2017-10-22 Thread Alex K
You might be missing a NAT at last node before the packet is left to Internet otherwise you need a public IP at the windows client. On Oct 22, 2017 19:08, "Hanoch Hanoch K" wrote: > Hi > I am trying to configure tproxy to expose the ip address i am using to > internet

Re: [squid-users] Enable tproxy in Squid 3.5 running on Debian 9

2017-10-05 Thread Alex K
You will need to transpareny redirect the traffic and not explicitly pointing your browser to squid. Seems that the mentioned firewall rules are correct. You will need a policy route also for the marked traffic. On Oct 5, 2017 7:54 PM, "xpro6000" wrote: I'm back to square