Re: [squid-users] hsc-dynamic-cache: relied on storeID rules? Removed in 3.5.20?

2017-03-27 Thread Eliezer Croitoru
raphy is creating the plain url's these days. Hope It helped, Eliezer * For youtube to be cached the best way is to learn more about content adaptation and to have a look at some youtube video downloaders scripts. Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngte

Re: [squid-users] URL list from a URL

2017-03-24 Thread Eliezer Croitoru
-full-mirrolist-rb Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Eliezer Croitoru Sent: Friday, March 24, 2017 5:59 PM

Re: [squid-users] URL list from a URL

2017-03-24 Thread Eliezer Croitoru
if it fills the gaps. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Eliezer Croitoru Sent: Friday, March 24, 2017 4:33 PM

Re: [squid-users] URL list from a URL

2017-03-24 Thread Eliezer Croitoru
/bin/centos-extacl.rb /etc/squid/centosrepos.txt acl centos_mirror_check_acl external centos_mirror_check htttp_access allow !CONNECT centos_mirror_check_acl Let me know if this is not enough or there is a need for some tweaks. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5

Re: [squid-users] URL list from a URL

2017-03-24 Thread Eliezer Croitoru
scripts: 1 - update by a crontab 2 - external_acl helper Will update later. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf

Re: [squid-users] Why do we have to set pinger_enable to off to get Squid to work

2017-03-24 Thread Eliezer Croitoru
Hey Gui, The right way to allow pinger to work is to use the setuid bit ie: $ chwon root.root /pinger_path/pinger $ chmod +s /pinger_path/pinger This will allow pinger to start as a root use by any of the machine users and in this case squid. There might be another restriction by the OS but I

Re: [squid-users] Squid stopped working after cache.log and access.log rotation

2017-03-23 Thread Eliezer Croitoru
There is another option! The log rotate script is doing something nasty or the systemd service file start up squid in a weird way. The output of: $ systemctl status squid $ top -n1 -b $ ps aux $ df -h $ netstat -ntulp $ lsof -n|egrep "proxy|squid" How many clients this system has? Is the system

Re: [squid-users] URL list from a URL

2017-03-22 Thread Eliezer Croitoru
the list in the "DB file". If it matches either return OK or ERR depends on the intention of the helper. ...The X code have almost everything needed so just convert it. I am offering to convert it if there is some interest in it. Eliezer ---- Eliezer Croitoru Linux System Administrator Mobi

Re: [squid-users] URL list from a URL

2017-03-22 Thread Eliezer Croitoru
Hey Alex, I didn't meant by convert the StoreID helper to convert it into an external_acl helper It has both OK and ERR and a "checklist" which would be a match or not. Eliezer ---- Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ng

Re: [squid-users] URL list from a URL

2017-03-21 Thread Eliezer Croitoru
The current StoreID helper can be converted pretty fast into what he needs. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf

Re: [squid-users] SSL

2017-03-20 Thread Eliezer Croitoru
What mobile devices are you using? Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of turgut kalfao?lu Sent: Monday, March 20

Re: [squid-users] Squid Authentication with HTTP REST API

2017-03-20 Thread Eliezer Croitoru
at Koroglu [mailto:serhatkoro...@outlook.com] Sent: Monday, March 20, 2017 8:49 AM To: Eliezer Croitoru <elie...@ngtech.co.il>; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Squid Authentication with HTTP REST API Sorry for late reply. I have find a suitable solution for validation th

Re: [squid-users] SMP and AUFS

2017-03-19 Thread Eliezer Croitoru
I believe that some admins do not have enough time to sit and find the documentation. I have seen it more than once that an admin just don't want to read the docs since it's like the "ocean" or something similar. Eliezer ---- Eliezer Croitoru Linux System Administrator Mobile: +972-

Re: [squid-users] SMP and AUFS

2017-03-19 Thread Eliezer Croitoru
I think that some warning message like "WARNING: be sure you know that UFS\AUFS doesn't support SMP\MultiWorkers" should be added to the stderr or cache.log. Eliezer ---- Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Origin

Re: [squid-users] Squid Authentication with HTTP REST API

2017-03-15 Thread Eliezer Croitoru
to put up together an ICAP server as an example. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Amos Jeffries Sent

Re: [squid-users] CentOS 7 -- Squid 3.5.20

2017-03-14 Thread Eliezer Croitoru
As the maintainer of the *external*CentOS repository I believe that there is some confusion. You should read the note in the wiki about my repository: http://wiki.squid-cache.org/KnowledgeBase/CentOS#Pre-Built_Binary_Packages You cannot install squid-helpers rpm without the squid rpm from the

Re: [squid-users] Wiki outage - solved

2017-03-14 Thread Eliezer Croitoru
ve forward and thrive from this towards a better future. All The Bests, Eliezer Croitoru http://ngtech.co.il/lmgtfy/ Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Kinkie Sent: Tues

Re: [squid-users] debugging squid memory

2017-03-13 Thread Eliezer Croitoru
releases? Thanks, Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Matus UHLAR - fantomas Sent: Sunday, March 12, 2017 5:35 PM

Re: [squid-users] cachemgr CGI version compatibility

2017-03-11 Thread Eliezer Croitoru
The title of the email was: "squid-4.0.18 error when running" Eliezer ---- Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Amo

Re: [squid-users] squid-4.0.18 error when running

2017-03-11 Thread Eliezer Croitoru
What OS are you using? http://ngtech.co.il/lmgtfy/ Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of sothy shan Sent: Tuesday, March 7, 2017 4:06 PM To:

Re: [squid-users] Data usage reported in log files

2017-03-11 Thread Eliezer Croitoru
to squid will not match from squid to clients. If you can send me or share with others your squid.conf we might be able to understand if something there might cause such an issue. Thanks, Eliezer * Feel free to contact me directly by skype or phone Eliezer Croitoru Linux System

Re: [squid-users] debugging squid memory

2017-03-11 Thread Eliezer Croitoru
Hey, Just asking loud, is there any chance you will give run an upgrade from 3.4.8 to 3.5.24? Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid

Re: [squid-users] squid workers question

2017-03-10 Thread Eliezer Croitoru
able to let couple squid instances that runs on the same machine to be able to utilize aufs\ufs better(taking into account that there is an overhead to this whole setup..) for some places. Eliezer ---- Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.c

Re: [squid-users] Can't start Squid with workers via systemd on CentOS 7

2017-03-09 Thread Eliezer Croitoru
I can test it locally but it will take me couple days to get there. Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of ?? Sent

Re: [squid-users] anonymous squid setup on digital ocean centos 6 but my IP still detected

2017-03-06 Thread Eliezer Croitoru
Hey Alex, First goes first: If you spin any version of CentOS these days I recommend to use CentOS 7 and not 6. This is also based on many use cases which proved(to me and many others) that the kernel and many other components improved performance. If you already spinoff a server to mask your

Re: [squid-users] Ssl bump tunneling connection by using Common Name

2017-03-06 Thread Eliezer Croitoru
Hey, There was something about it but I believe it's only on squid version 4.0.X. The other options for such a thing is to use an external_acl helper that will try to initiate a connection to the destination host (like what is done in the happy eyeballs) to and to inspect the certificate to

Re: [squid-users] squid errors in error.log and slow internet from squid

2017-03-04 Thread Eliezer Croitoru
Two things: First change the: quick_abort_min -1 or remove it since it can do much harm on many cases and is useful only for specific ones. Also try to remove all the refresh_pattern lines except for the defaults just to make sure they do not cause the server to move slow. To understand the

Re: [squid-users] squid 3.5.2==> HTTPS FATAL: The ssl_crtd helpers are crashing too rapidly, need help!

2017-03-04 Thread Eliezer Croitoru
will be one step smarter and one step closer to a satisfying solution rather then the currently used options. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: Alex Rousskov [mailto:rouss...@measurement

Re: [squid-users] squid 3.5.2==> HTTPS FATAL: The ssl_crtd helpers are crashing too rapidly, need help!

2017-03-03 Thread Eliezer Croitoru
To: Yuri Voinov <yvoi...@gmail.com> Cc: Eliezer Croitoru <elie...@ngtech.co.il>; squid-users@lists.squid-cache.org Subject: Re: [squid-users] squid 3.5.2==> HTTPS FATAL: The ssl_crtd helpers are crashing too rapidly, need help! @ eliezer i was using children as 10 ans faced the proble

Re: [squid-users] squid 3.5.2==> HTTPS FATAL: The ssl_crtd helpers are crashing too rapidly, need help!

2017-03-02 Thread Eliezer Croitoru
Hey Yuri, This issue is not 100% squid but I think it's related to the way ssl_crtd works. I am not sure if it has some locking or other things to prevent such issues. The first solution is to somehow defend the DB from corruption, like in a case that more then a dozen identical requests are

Re: [squid-users] Username not passed to url_rewrite_program

2017-03-02 Thread Eliezer Croitoru
nding 'http://clients1.google.com/ocsp 127.0.0.1/localhost - POST myip=127.0.0.1 myport=3129 ' to the redirector helper" IE without a username. Is it the case? ( I will write the rest in the bug report) ---- Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ng

Re: [squid-users] squid 3.5.2==> HTTPS FATAL: The ssl_crtd helpers are crashing too rapidly, need help!

2017-03-02 Thread Eliezer Croitoru
Really??? sslcrtd_children 1000 startup=1 idle=1 Are you series? You don't need to google. And before you delete the directory you need to save it first so you would be able to analyze what happen wrong with it. There is a reason for these helpers to crash. If they crash it's because of

[squid-users] Squid 3.5.24 is available - Article and new Binaries

2017-02-27 Thread Eliezer Croitoru
Binaries packages repo [http://ngtech.co.il/repo/] Eliezer Croitoru Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Amos Jeffries

Re: [squid-users] Two dns record fqdn pointing to different squid servers

2017-02-27 Thread Eliezer Croitoru
Did you got it resolved? Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of erdosain9 Sent: Wednesday, February 1, 2017 9:06

Re: [squid-users] SSL-Bump: NAT/TPROXY lookup failed to locate original IPs

2017-02-26 Thread Eliezer Croitoru
OpenVPN between the local router to the remote AWS instance. All The Bests, Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: Test User [mailto:tuser6...@gmail.com] Sent: Sunday, February 26, 2017 8:38 AM

Re: [squid-users] SSL-Bump: NAT/TPROXY lookup failed to locate original IPs

2017-02-25 Thread Eliezer Croitoru
will be available it will be much simpler to understand what is the root for some of the issues you are having. All The Bests, Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid

Re: [squid-users] My Squid stop working WITHOUT any reason.

2017-02-23 Thread Eliezer Croitoru
What do you mean by stopped working? 100% CPU? If so please try to add as the last line of squid: cache deny all and see if it happens again. All The Bests, Eliezer http://ngtech.co.il/lmgtfy/ Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il From:

Re: [squid-users] question about : NOTICE: Authentication not applicable onintercepted requests.

2017-02-20 Thread Eliezer Croitoru
Hey, What you see is not a misconfiguration in the general meaning. Squid and any other proxy cannot authenticate without some kind of special tricks on an Intercept mode and port. There are products which offers transparently to hijack the web traffic and authenticate with the windows

Re: [squid-users] Squid on separate box and it can't see packets

2017-02-20 Thread Eliezer Croitoru
then without(with some distros and some specific kernels). Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Amos Jeffries Sent

Re: [squid-users] Configure squid 3.5 to use different parent proxies for different listening ports

2017-02-20 Thread Eliezer Croitoru
And forgot to add also: nonhierarchical_direct off Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Eliezer Croitoru Sent: Monday

Re: [squid-users] Configure squid 3.5 to use different parent proxies for different listening ports

2017-02-20 Thread Eliezer Croitoru
You can try the next: http_port 3128 name=one http_port 3127 name=two acl port_3128 myportname one acl port_3127 myportname two always_direct deny port_3128 always_direct deny port_3127 never_direct allow port_3128 never_direct allow port_3127 # 3128 cache_peer proxy01 parent 3128 0 no-query

Re: [squid-users] Squid 3.5.24 - Exclude https sites from ssl_bump in Transparent Mode

2017-02-19 Thread Eliezer Croitoru
What is the content of: /etc/squid/exfiles.conf And did you tried using: ssl::server_name_regex -i "/etc/squid/doms.nobump" /etc/squid/doms.nobump: ##START OF FILE update\.microsoft\.com$ update\.microsoft\.com\.akadns\.net$ v10\.vortex\-win\.data\.microsoft.com$

Re: [squid-users] Squid on separate box and it can't see packets

2017-02-13 Thread Eliezer Croitoru
Hey, There are couple missing pieces(in my eyes) in order to understand the picture. Is this squid box a router or just a proxy? What tcpdump command did you ran? What is the networks that are involved? What is the gateway and dhcp for this network? If the client is a linux box then we need the

Re: [squid-users] internal image call busted? /squid-internal-static/icons/SN.png

2017-02-12 Thread Eliezer Croitoru
Let me know if this is the package which I have released. I am using Squid-Cache daily with my RPM's and I have not encountered such an issue. Let me know if I can help with it. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il

Re: [squid-users] Basic HTTPS filtering via CONNECT in Squid

2017-02-12 Thread Eliezer Croitoru
Hey Varun, Filtering content based on the URL level\layer of the connection is not possible without SSL-bump. There for you must use for some aspect of the connections SSL-bump. However you can selectively choose which destinations would be bumped and which are not. Most of the current browsers

Re: [squid-users] Transparent Squid issue with Appstore in MacOS Sierra

2017-02-08 Thread Eliezer Croitoru
Can you give me\us a link to instructions how you have installed the certificate on MAC OS? I know how to do it on Windows and Linux but not MAC OS. Also, have you tried using peek and splice? From your email it seems you have not tried to use these.(If you need instructions I would be happy to

Re: [squid-users] SSL_bump and source IP

2017-02-02 Thread Eliezer Croitoru
with your radius server and usernames that will allow some clients((by IP) to be bypassed based on an external acl helper. What do you think? Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid

Re: [squid-users] SSL_bump and source IP

2017-02-02 Thread Eliezer Croitoru
ors by MAC address based on: https://github.com/royhills/arp-scan/blob/master/get-oui https://github.com/joemiller/mac-to-vendor Eliezer ---- Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-

Re: [squid-users] High utilization of CPU squid-3.5.23, squid-3.5.24

2017-02-01 Thread Eliezer Croitoru
The Bests, Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Vitaly Lavrov Sent: Wednesday, February 1, 2017 10:56 PM To: squid

Re: [squid-users] Antivirus for squid

2017-02-01 Thread Eliezer Croitoru
Thanks. Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: Yuri Voinov [mailto:yvoi...@gmail.com] Sent: Wednesday, February 1, 2017 6:16 PM To: Eliezer Croitoru <elie...@ngtech.co.il> Cc: squid-users@lists

Re: [squid-users] Not all html objects are being cached

2017-02-01 Thread Eliezer Croitoru
n't know or do not understand take couple minutes to find the right document or tutorial(textual or video). If you cannot reach these we are here for the rescue to help if needed. Just ask!!! The answers will be there sooner or later in the thread. All The Bests, Eliezer Eliezer Croitoru Lin

Re: [squid-users] Antivirus for squid

2017-02-01 Thread Eliezer Croitoru
Hey Yuri, What wiki article? Thanks, Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Yuri Voinov Sent: Wednesday, February

Re: [squid-users] ssl_bump - peek & splice logging IP rather than server name

2017-01-26 Thread Eliezer Croitoru
and browse at: http://www1.ngtech.co.il/repo/ If what you are running is not there let me know and I will try to build a binary for it. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users

[squid-users] BUG Notification. RE: Squid 3.5.23 is available - Article and new tools by NgTech

2017-01-23 Thread Eliezer Croitoru
external acl helper and the ICAP service in the next 24-48 hours. Thanks and Sorry, Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf

Re: [squid-users] external acl helper

2017-01-22 Thread Eliezer Croitoru
An example for a helper in python. You will need to remove the whole memcache stuff and this is the basic structure: http://wiki.squid-cache.org/EliezerCroitoru/SessionHelper/Python http://ngtech.co.il/lmgtfy/ Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il

Re: [squid-users] HTTP CONNECT ipv6

2017-01-21 Thread Eliezer Croitoru
Hey Vladimir, It supports IPV6 for a very long time.(3.2 and up) Regards, Eliezer http://ngtech.co.il/lmgtfy/ Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Vladimir

[squid-users] Squid 3.5.23 is available - Article and new tools by NgTech

2017-01-19 Thread Eliezer Croitoru
://wiki.squid-cache.org/KnowledgeBase/CentOS#Squid-3.5] Eliezer Croitoru * If you need some help with the new tools contact me. Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users

Re: [squid-users] A bunch of SSL errors I am not sure why

2017-01-18 Thread Eliezer Croitoru
then a simple script that will run the openssl tools to fetch the certificates and add them to the system can be useful for those which are running 3.5 and yet to jump into the 4.0 testing. I can write the script that will do come of the work for these admins. Eliezer Eliezer Croitoru

Re: [squid-users] A bunch of SSL errors I am not sure why

2017-01-15 Thread Eliezer Croitoru
est Squid-4, which can auto-download intermediate certificates. Is squid-4 stable for production? Thank you, Sameh Onaissi Sol Cable Visión Cel: 316-3023424 Email: mailto:sameh.onai...@solcv.com Piensa en el medio ambiente antes de imprimir este email. On Jan 14, 2017, at 12:07 PM, El

Re: [squid-users] A bunch of SSL errors I am not sure why

2017-01-14 Thread Eliezer Croitoru
non-intercepted ones? Thanks, Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Amos Jeffries Sent: Saturday, January 14, 2017 6

Re: [squid-users] A bunch of SSL errors I am not sure why

2017-01-12 Thread Eliezer Croitoru
Try removing: cipher=ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:AES128-SHA:RC4-SHA:HIGH:!aNULL:!MD5:!ADH From the ssl-bump line and see what happens. http://ngtech.co.il/lmgtfy/ Linux System Administrator Mobile: +972-5-28704261 Email:

Re: [squid-users] TCP 403 Denied on new squid build out

2017-01-11 Thread Eliezer Croitoru
Try the next: Remove: never_direct allow all And add at the first line of the file http_access allow all And see if it let you surf. If so then something is twisted in the config file order. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie

Re: [squid-users] Squid Memory Problems

2017-01-11 Thread Eliezer Croitoru
There was a report about an issue and the claim was Ubuntu Kernel issue. I believe that the first step would be to find out if a kernel downgrade or upgrade (to xenial one) helps with the issue. Eliezer http://ngtech.co.il/lmgtfy/ Linux System Administrator Mobile: +972-5-28704261 Email:

Re: [squid-users] Problem building Squid4

2017-01-10 Thread Eliezer Croitoru
. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of matg2s Sent: Sunday, January 8, 2017 11:32 AM To: squid-users@lists.squid

Re: [squid-users] Problem building Squid4

2017-01-08 Thread Eliezer Croitoru
With hope I will have time I will try to build a tar.xz of latest 4 branch on 16.04. The last I have built was 4.0.14. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users

Re: [squid-users] Squid memory leak on ubuntu 14.04

2017-01-06 Thread Eliezer Croitoru
it worked well). Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Amos Jeffries Sent: Friday, January 6, 2017 12:41 PM To: squid

Re: [squid-users] ssl_bump with intermediate CA

2017-01-06 Thread Eliezer Croitoru
discussion section.. But I do understand that there are wars which needs to be left alone. All The Bests, Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cac

Re: [squid-users] ssl_bump - peek & splice logging IP rather than server name

2017-01-03 Thread Eliezer Croitoru
) I do not know but there might be a code that can report the SNI if exists in the logs. Alex is better then me in this but I believe it should be possible as an addition to the IP+PORT and not replacing them. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email

Re: [squid-users] Intercept mode failing

2017-01-03 Thread Eliezer Croitoru
If you get stuck with things contact me and I will see if I can sort things out so you would be able to grasp couple basics. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid

Re: [squid-users] Intercept mode failing

2017-01-03 Thread Eliezer Croitoru
Hey, There is also another option. You can open a tunnel (IPIP, GRE, OTHER) between the proxy and the router to make it possible to directly route traffic to the proxy. If you need some help with it let me know. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261

Re: [squid-users] Squid Websocket Issue

2017-01-02 Thread Eliezer Croitoru
hardikdan...@gmail.com [mailto:hardikdan...@gmail.com] On Behalf Of Hardik Dangar Sent: Monday, January 2, 2017 6:50 PM To: Eliezer Croitoru <elie...@ngtech.co.il> Cc: Squid Users <squid-users@lists.squid-cache.org> Subject: Re: [squid-users] Squid Websocket Issue Hey Eliezer, The i

Re: [squid-users] Squid Websocket Issue

2017-01-02 Thread Eliezer Croitoru
Can we start from 0. Currently when squid knows about the Connection being a one with websocket support it is already too late to do anything about this specific connection. The only option for now is to identify these using some ICAP service that will for example redirect the request after a

Re: [squid-users] Problem with ssl_crtd

2016-12-28 Thread Eliezer Croitoru
Depends on what is causing the issue. What bug report are you writing about? Do you have a specific one that you have seen? Also if you can disable CONNECT requests from url_rewrite it might solve an issue or two. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5

[squid-users] SNAT BASED on tos. Anyone tried it?

2016-12-28 Thread Eliezer Croitoru
0x02 !some_users Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] squid 4.0.17 accept-encoding.. sending gzip?!

2016-12-27 Thread Eliezer Croitoru
ot; header of the object. or am I wrong? -- Best Regards, Heiler Bemerguy Network Manager - CINBESA 55 91 98151-4894/3184-1751 Em 27/12/2016 14:26, Eliezer Croitoru escreveu: May I ask how did you manager to tell squid to cache a no-cache object? From the dump it states: Cache-Control: max-age=0

Re: [squid-users] squid 4.0.17 accept-encoding.. sending gzip?!

2016-12-27 Thread Eliezer Croitoru
May I ask how did you manager to tell squid to cache a no-cache object? >From the dump it states: Cache-Control: max-age=0, no-cache, no-store, must-revalidate Which means it should not be cached.. Eliezer ---- Eliezer Croitoru <http://ngtech.co.il/lmgtfy/> Linux System Admi

Re: [squid-users] Squid keep using one parent proxy while I have multiple parent proxies

2016-12-26 Thread Eliezer Croitoru
Can you give a bash example with curl to replicate this issue? Thanks, Eliezer http://ngtech.co.il/lmgtfy/ Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of wei Sent: Monday,

Re: [squid-users] Bypassed Proxy

2016-12-23 Thread Eliezer Croitoru
and page: http://www.linuxhomenetworking.com/wiki/index.php/Quick_HOWTO_:_Ch14_:_Linux_Firewalls_Using_iptables Gives a better understanding to iptables and also on networking. If you need more guidance let me know. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261

Re: [squid-users] Bypassed Proxy

2016-12-21 Thread Eliezer Croitoru
http://ngtech.co.il/lmgtfy/ Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il From: Sameh Onaissi [mailto:sameh.onai...@solcv.com] Sent: Thursday, December 22, 2016 12:20 AM To: Eliezer Croitoru <elie...@ngtech.co.il> Cc: squid-users@lists.squid-cache.org Subject:

Re: [squid-users] Pre-Built Binary Packages: squid_ldap_auth: (2) No such file or directory

2016-12-21 Thread Eliezer Croitoru
d location in your squid.conf using: # ln -s /usr/lib64/squid/basic_ldap_auth /usr/lib64/squid/squid_ldap_auth Let me know if something is missing( I have yet to force the repository version update but will do so in the next hours), Eliezer Eliezer Croitoru Linux System Administrator Mobil

Re: [squid-users] Bypassed Proxy

2016-12-21 Thread Eliezer Croitoru
How does squid.conf looks now? It’s probably a typo or some settings exception. You need to debug and check first if squidguard receives the request details and what it does with it. To see the relevant details you will need to use squid debug_options:

Re: [squid-users] squidcliente stopped working!

2016-12-20 Thread Eliezer Croitoru
to the squid.conf paste. Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Sameh Onaissi Sent: Tuesday, December 20, 2016 6:16 PM Cc: squid

Re: [squid-users] squidcliente stopped working!

2016-12-20 Thread Eliezer Croitoru
5:40 PM To: Eliezer Croitoru <elie...@ngtech.co.il> Cc: squid-users@lists.squid-cache.org Subject: Re: [squid-users] squidcliente stopped working! Hi Eliezer, Thanks for the reply. changing /etc/hosts made no difference, the new log just showed the ipv4 localhost: verbosity level se

Re: [squid-users] squidcliente stopped working!

2016-12-20 Thread Eliezer Croitoru
It looks like your acls are denying access to the localhost because it's trying to access the proxy using ipv6. Try to comment the "::1 localhost" line from /etc/hosts and try to see if it's the same. If it's still not working you will need to write couple rules at the top of the squid.conf

Re: [squid-users] Antw: CentOS Linux 7 / Squid Cache: Version 3.5.20 / ecap clamav

2016-12-20 Thread Eliezer Croitoru
Can you share what was the issue and how did you managed to resolve it? Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf

Re: [squid-users] r14088 crash on FreeBSD 11

2016-12-20 Thread Eliezer Croitoru
Hey Simon, Just to clear out things for me since the bug report is a bit confusing in the Bugzilla. What should I do to replicate the bug in my lab? 1. install FreeBSD 11 stable 2. Compile squid latest And what then? Just use the proxy? Thanks, Eliezer Eliezer Croitoru Linux System

Re: [squid-users] Squid freeze each hour.

2016-12-20 Thread Eliezer Croitoru
) to this email? Thanks, Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of David Touzeau Sent: Tuesday, December 20, 2016 1:53 PM

Re: [squid-users] Squid Websocket Issue

2016-12-19 Thread Eliezer Croitoru
; to match the required domains for whatsapp to be spliced. If nobody will try it before me it's on my todo list for this release (3.5.23, 4.0.17). Eliezer ---- Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: s

Re: [squid-users] Missing cache files

2016-12-19 Thread Eliezer Croitoru
...@gmail.com] Sent: Monday, December 19, 2016 1:37 PM To: Eliezer Croitoru <elie...@ngtech.co.il> Cc: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Missing cache files Hi, I have added details.txt and also fixed perms on cache.log On 19 December 2016 at 14:10, Eliezer Cr

Re: [squid-users] squid.conf blocking live video stream

2016-12-18 Thread Eliezer Croitoru
aside the specific headers “allowed” approach. Also, have you tried to disable the virus scan to verify if it’s the culprit for the streaming issue? Please give one example so I and maybe others would be able to grasp the issue in some way. Thanks, Eliezer Eliezer Croitoru <h

Re: [squid-users] Crash: every 1-2 hour: kernel: Out of memory: Kill process (squid)

2016-12-15 Thread Eliezer Croitoru
or not. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Amos Jeffries Sent: Thursday, December 15, 2016 6:52 AM To: squid-users

Re: [squid-users] Antw: RE: Antw: RE: squid-3.3.8-26.el7_2.4.x86_64 using Novell eDirectory with /usr/lib64/squid/digest_edirectory_auth

2016-12-14 Thread Eliezer Croitoru
What have you tried to test the helpers by themselves? Let say you run from the command line the command which squid runs and like in the example in the mailing list which I attached, What happens? Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie

Re: [squid-users] Crash: every 1-2 hour: kernel: Out of memory: Kill process (squid)

2016-12-14 Thread Eliezer Croitoru
and iptables accordingly. Are you working based on some tutorial? If so please attach the link to it. Notice that port 3130 is officially a port which should not be used for interception but for other purposes. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email

Re: [squid-users] URL too large??

2016-12-13 Thread Eliezer Croitoru
And you are still using squid? Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: Yuri Voinov [mailto:yvoi...@gmail.com] Sent: Tuesday, December 13, 2016 10:09 PM To: Eliezer Croitoru <e

Re: [squid-users] URL too large??

2016-12-13 Thread Eliezer Croitoru
Eliezer Croitoru Linux System Administrator Mobile+WhatsApp: +972-5-28704261 Email: elie...@ngtech.co.il On Tue, Dec 13, 2016 at 11:08 AM, Odhiambo Washington wrote: Hi, Saw this on my cache.log (squid-3.5.22, FreeBSD-9.3,): 2016/12/13 11:47:55| WARNING: no_suid: setuid(0): (1) Operation

Re: [squid-users] Antw: RE: squid-3.3.8-26.el7_2.4.x86_64 using Novell eDirectory with /usr/lib64/squid/digest_edirectory_auth

2016-12-13 Thread Eliezer Croitoru
Which of the helpers are you having issues with? The Group or the user one? I did some experiment with ldap groups which can be found at: http://lists.squid-cache.org/pipermail/squid-users/2015-July/004874.html Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261

Re: [squid-users] squid-3.3.8-26.el7_2.4.x86_64 using Novell eDirectory with /usr/lib64/squid/digest_edirectory_auth

2016-12-12 Thread Eliezer Croitoru
AP/ And we are also missing the squid.conf. Try find out if there some helper in the /usr/lib64/squid/ directory which contains ldap. Let me know if we are on the right direction. Eliezer ---- Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il ---

Re: [squid-users] "store-stale" sending original "expires" header may be breaking windows update?

2016-12-08 Thread Eliezer Croitoru
. Hope it Helps, Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Heiler Bemerguy Sent: Tuesday, December 6, 2016 6:04 PM

Re: [squid-users] squid SMP notes

2016-12-07 Thread Eliezer Croitoru
May I ask about the purpose of the proxy? Caching or ACL? Eliezer http://ngtech.co.il/lmgtfy/ Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of senor Sent: Thursday, December 1,

Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S

2016-12-07 Thread Eliezer Croitoru
2016 10:11 PM To: Eliezer Croitoru <elie...@ngtech.co.il> Cc: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Skype for Business behind a transparent squid (TProxy) HTTP/S iptables is the same.. here is after I ran the script twice (with and without proxy) http://pastebin.com/YFtbG6S

<    1   2   3   4   5   6   7   8   9   10   >