Re: [squid-users] Ubuntu 22.04 LTS repository for Squid 6.9 (rebuilt from sources in Debian)

2024-04-11 Thread Rafael Akchurin
(rebuilt from sources in Debian) 11.04.2024 13:30, Rafael Akchurin пишет: Hello everyone, Online repository with latest Squid 6.9 why not 6.10? ___ squid-users mailing list squid-users@lists.squid-cache.org https://lists.squid-cache.org/listinfo/squid

[squid-users] Ubuntu 22.04 LTS repository for Squid 6.9 (rebuilt from sources in Debian)

2024-04-11 Thread Rafael Akchurin
com/websafety-va/9.0/websafety-hyperv.zip> or even deploy directly on Microsoft Azure<https://azuremarketplace.microsoft.com/en-us/marketplace/apps/diladele.websafety> and Amazon AWS<https://aws.amazon.com/marketplace/pp/prodview-ixvbzugrltcqq>. Hope you will find this useful

[squid-users] Ubuntu 22.04 LTS repository for Squid 6.6 (rebuilt from sources in Debian unstable)

2024-01-19 Thread Rafael Akchurin
com/websafety-va/9.0/websafety-hyperv.zip> or even deploy directly on Microsoft Azure<https://azuremarketplace.microsoft.com/en-us/marketplace/apps/diladele.websafety> and Amazon AWS<https://aws.amazon.com/marketplace/pp/prodview-ixvbzugrltcqq>. Hope you will find this useful

[squid-users] Ubuntu 22.04 LTS repository for Squid 6.5 (rebuilt from sources in Debian unstable)

2023-11-11 Thread Rafael Akchurin
uid65.diladele.com/ubuntu/ jammy main" \ > /etc/apt/sources.list.d/squid65.diladele.com.list # and install apt-get update && apt-get install -y \ squid-common \ squid-openssl \ squidclient \ libecap3 libecap3-dev Hope you will find this useful. Best regards, Rafael

Re: [squid-users] TLS passthrough

2023-09-30 Thread Rafael Akchurin
Helo Fendando, One way to do that is to use policy-based-routing on your gateway. This can be easily done with for example Microtik (see https://docs.diladele.com/tutorials/mikrotik_transparent_squid/index.html) But also with native say Debian (we only have somewhat outdated tutorial with

[squid-users] [icap] rewritten transparent intercept tutorials for squid, mikrotik, ubuntu 20, debian 12 (nftables) and rhel 9 (firewalld)

2023-08-20 Thread Rafael Akchurin
(policy based routing) Hope you will find it useful. Best regards, Rafael Akchurin Diladele B.V. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] squid 6.1 - auth scheme 'ntlm' is not recognized

2023-07-13 Thread Rafael Akchurin
. Linkers are allowed to drop modules that they think are unused. We will need to find a solution to that problem. Alex. > On Thu, Jul 13, 2023 at 1:38 PM Rafael Akchurin > mailto:rafael.akchu...@diladele.com>> wrote: > > Good day everyone, > > We

[squid-users] squid 6.1 - auth scheme 'ntlm' is not recognized

2023-07-13 Thread Rafael Akchurin
was indeed removed from the codebase (see below). May I ask if the NTLM scheme is not needed at all now and we should continue using only Negotiate scheme (letting it handle the NTLM as usual)? Best regards, Rafael Akchurin Diladele B.V. In 5.0 the AuthReg.cc was /** * Initialize the authentication

Re: [squid-users] HSTS in browsers summary, help wanted.

2023-06-28 Thread Rafael Akchurin
Hello Eliezer, Please be sure to clean up the mimicked cert storage of Squid after changing the Root CA for sslbump (if you use one). Best regards, Rafael Diladele B.V. -Original Message- From: squid-users On Behalf Of ngtech1...@gmail.com Sent: Wednesday, June 28, 2023 6:03 PM To:

[squid-users] ClamAV crash in eCAP Adapter

2023-03-01 Thread Rafael Akchurin
Hello everyone, May I ask for your experiences with the latest update of ClamAV with eCAP adapter enabled. Running Squid 5.7 on Ubuntu 20.04. Starting from today (01-March-2023) the following crash stops Squid process. #0 0x7fab13a44ff0 in cli_bm_scanbuff () from

Re: [squid-users] daily usage email reports for hostnames/users/top URLs/blocked URLs

2022-11-28 Thread Rafael Akchurin
Hello Alex, We use our own reporter like in https://docs.diladele.com/administrator_guide_stable/traffic_monitoring/reports.html Disclosure – it requires a license key ☹. Best regards, Rafael From: squid-users On Behalf Of Alex Kimble Sent: Monday, November 28, 2022 2:37 PM To:

Re: [squid-users] ubuntu ecap clamAV adapter

2022-11-24 Thread Rafael Akchurin
Hello Robert, May be this will be of any help – this is how we compile the eCAP for Squid - https://github.com/diladele/websafety/blob/master/core.ubuntu20/03_clamav.sh If you need to compile the Squid too – also look at https://github.com/diladele/squid-ubuntu Best regards, Rafael From:

Re: [squid-users] Kerberos - Cannot decrypt ticket for HTTP

2022-11-18 Thread Rafael Akchurin
Also it might have been related to recent Microsoft Updates. The following article summarizes our issues with Kerberos (note we use a special user in AD with keytab, not joining of proxy into the domain).

Re: [squid-users] How to generate daily usage email reports?

2022-11-17 Thread Rafael Akchurin
Hello Alex, We have something like you seem to be in need of - https://docs.diladele.com/administrator_guide_stable/traffic_monitoring/reports.html But these reports are not Squid analyzer :( sorry. Best regards, Rafael From: squid-users On Behalf Of Alex Kimble Sent: Thursday, November 17,

Re: [squid-users] FW: Encrypted browser-Squid connection errors

2022-10-19 Thread Rafael Akchurin
o at https://webproxy.diladele.com/docs/network/secure_proxy/browsers/ Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users On Behalf Of Grant Taylor Sent: Thursday, October 20, 2022 2:39 AM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] FW: Encrypted bro

[squid-users] Ubuntu 20.04 LTS repository for Squid 5.7 (rebuilt from sources in Debian unstable)

2022-10-13 Thread Rafael Akchurin
e.com/ubuntu/ focal main" \ > /etc/apt/sources.list.d/squid57.diladele.com.list # and install apt-get update && apt-get install -y \ squid-common \ squid-openssl \ squidclient \ libecap3 libecap3-dev Hope you will find this useful. Best regards, Rafael

Re: [squid-users] Squid 4.8+ intercept

2022-08-10 Thread Rafael Akchurin
: ngtech1...@gmail.com<mailto:ngtech1...@gmail.com> Web: https://ngtech.co.il/ My-Tube: https://tube.ngtech.co.il/ From: squid-users mailto:squid-users-boun...@lists.squid-cache.org>> On Behalf Of Rafael Akchurin Sent: Tuesday, 9 August 2022 23:54 To: M K mailto:mohammed.khal...@gmail.com

Re: [squid-users] Squid 4.8+ intercept

2022-08-09 Thread Rafael Akchurin
Hello K, We use https://docs.diladele.com/tutorials/mikrotik_transparent_squid/index.html Best regards, Rafael Op 9 aug. 2022 om 21:29 heeft M K het volgende geschreven:  Hello, I have a setup like this one: | Client | => | Router | => Internet ||

Re: [squid-users] Windows Server 2019-22 Kerberos transparent Windows client authentication help wanted. Try 2

2022-07-30 Thread Rafael Akchurin
Hello Eliezer, We use it all the time - https://docs.diladele.com/administrator_guide_stable/active_directory/index.html Not sure if this satisfies your requirements though. But it seems to be very stable. Best regards, Rafael -Original Message- From: squid-users On Behalf Of

[squid-users] Ubuntu 20.04 LTS repository for Squid 5.5 (rebuilt from sources in Debian unstable)

2022-04-19 Thread Rafael Akchurin
e.com/ubuntu/ focal main" \ > /etc/apt/sources.list.d/squid55.diladele.com.list # and install apt-get update && apt-get install -y \ squid-common \ squid-openssl \ squidclient \ libecap3 libecap3-dev Hope you will find this useful. Best regards, Rafael

Re: [squid-users] How to install squid 5 on ubuntu 18.04

2022-01-19 Thread Rafael Akchurin
Hello Hg, One way we do it is at https://docs.diladele.com/howtos/build_squid_on_ubuntu_20/repository.html Best regards, Rafael From: squid-users On Behalf Of Hg Mi Sent: Thursday, January 20, 2022 6:40 AM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] How to install squid 5

Re: [squid-users] Squid upgrade failure support questions

2021-10-25 Thread Rafael Akchurin
Be sure to also check the actual squid.exe is running - not just the service wrapper, you might be facing the https://github.com/diladele/squid-windows/issues/101 bug (4.14 does not work on older processors) Best regards, Rafael -Original Message- From: squid-users On Behalf Of Amos

[squid-users] Ubuntu 20.04 LTS repository for Squid 5.2 (rebuilt from sources in Debian unstable)

2021-10-11 Thread Rafael Akchurin
uid52.diladele.com/ubuntu/ focal main" \ > /etc/apt/sources.list.d/squid52.diladele.com.list # and install apt-get update && apt-get install -y \ squid-common \ squid-openssl \ squidclient \ libecap3 libecap3-dev Hope you will find this useful. Best regards, Rafael

[squid-users] Ubuntu 20.04 LTS repository for Squid 5.1 (rebuilt from sources in Debian unstable)

2021-09-20 Thread Rafael Akchurin
uid51.diladele.com/ubuntu/ focal main" \ > /etc/apt/sources.list.d/squid51.diladele.com.list # and install apt-get update && apt-get install -y \ squid-common \ squid-openssl \ squidclient \ libecap3 libecap3-dev Hope you will find this useful. Best regards, Rafael

[squid-users] Squid for Windows 4.14 is available

2021-05-17 Thread Rafael Akchurin
Hello everyone, After years of postponing we were finally able to build and pack the Squid 4 for Microsoft Windows. Sorry it took a lot more time and efforts than anticipated. The already existing version 4.15 is also being packed. I will update once again when it is available. The MSI can be

[squid-users] Ubuntu 20.04 LTS repository for Squid 4.13-8 (rebuilt with sslbump support from sources in Debian unstable)

2021-03-21 Thread Rafael Akchurin
will find this useful. Best regards, Rafael Akchurin Diladele B.V. -- The same Squid 4.13 will be part of upcoming Web Safety 7.6 planned for release in June, 2021. This version has the ability to use any header value set by Squid for selecting of web filtering policies in ICAP server as well

[squid-users] Ubuntu 18 LTS repository for Squid 4.13 (rebuilt with sslbump support from sources in Debian unstable)

2020-08-25 Thread Rafael Akchurin
te that older repo of squid412.diladele.com will be taken down today (due to sslbump issues with Chrome fixed in Squid 4.13). Best regards, Rafael Akchurin Diladele B.V. -- The same Squid 4.13 will be part of upcoming Web Safety 7.5 planned for release in November, this version has more

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-24 Thread Rafael Akchurin
specifically desire to use some haproxy's features for l7 loadbalancing. Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users On Behalf Of Klaus Brandl Sent: Friday, July 24, 2020 10:45 AM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-24 Thread Rafael Akchurin
- https://docs.diladele.com/administrator_guide_stable/active_directory_extra/redundancy/haproxy_proxy_protocol.html And yes we do *not* use computer account, we use *user* account instead. See the reasoning in the tutorial. Best regards, Rafael Akchurin Diladele B.V. -Original Message

[squid-users] [icap] Web Safety 7.4 web filter for Squid proxy is available

2020-05-11 Thread Rafael Akchurin
o create an issue<https://github.com/diladele/websafety/issues/new> at our GitHub repository. Thanks to all of you for making this possible. Stay safe. Best regards, Rafael Akchurin Diladele B.V. ___ squid-users mailing list squid-users@lists.squi

[squid-users] Ubuntu 18 LTS repository for Squid 4.11 (rebuilt with sslbump support from sources in Debian unstable)

2020-04-24 Thread Rafael Akchurin
ent Hope you will find this useful. Note that older repo of squid410.diladele.com will be taken down in 1 year. Best regards, Rafael Akchurin Diladele B.V. -- The same Squid 4.11 will be part of upcoming Web Safety 7.4 planned for release in early June, this version has some improvements in the repo

[squid-users] [icap] Web Safety 7.3 web filter for Squid proxy is available

2020-03-10 Thread Rafael Akchurin
adele.websafety> * Microsoft Azure<https://azuremarketplace.microsoft.com/en-us/marketplace/apps/diladele.websafety> appliance (both 7.3 PAYG and BYOL instances) * Amazon AWS<https://aws.amazon.com/marketplace/pp/B07KJHLHKC> appliance (7.3 BYOL instance is being published)

Re: [squid-users] please, can someone help me with the negotiate kerberos?

2020-02-17 Thread Rafael Akchurin
and samba, read: https://wiki.samba.org/index.php/Generating_Keytabs https://wiki.samba.org/index.php/Keytab_Extraction Greetz, Louis > -Oorspronkelijk bericht- > Van: squid-users > [mailto:squid-users-boun...@lists.squid-cache.org] Namens Rafael > Akchurin > Ver

Re: [squid-users] please, can someone help me with the negotiate kerberos?

2020-02-17 Thread Rafael Akchurin
Hello Rafael, There is an easier option *without* joining the Squid machine to the domain, See tutorial at https://docs.diladele.com/administrator_guide_stable/active_directory/index.html (it also applies to vanilla Squid without our UI - just you would need to do more manual steps). Raf

Re: [squid-users] Squid 4.10 for windows

2020-02-13 Thread Rafael Akchurin
Sorry Chris, We still cannot find time to finish compilation of Squid 4 for Windows. The Linux version running within Hyper-V works much better most probably. Why not to try it? Best regards, Rafael Akchurin Diladele B.V. From: squid-users On Behalf Of Latino, Chris Sent: Thursday, 13

[squid-users] Ubuntu 18 LTS repository for Squid 4.10 (rebuilt with sslbump support from sources in Debian unstable)

2020-02-11 Thread Rafael Akchurin
po of squid49.diladele.com will be taken down in 2 years. Best regards, Rafael Akchurin Diladele B.V. -- Please take a look at another our project - DNS Safety filtering server. Sort of Web Safety implemented as DNS Server. Might be interesting in deployments where HTTPS decryption is not po

Re: [squid-users] Need help setting up DD-WRT router to use Squid as a transparent proxy

2020-01-16 Thread Rafael Akchurin
You can try policy based routing if DD-WRT supports that – see https://docs.diladele.com/tutorials/policy_based_routing_squid/index.html From: squid-users On Behalf Of Robert Marshall Sent: Thursday, 16 January 2020 09:30 To: squid-users@lists.squid-cache.org Subject: [squid-users] Need help

Re: [squid-users] unable to get issuer cert locally protocol error

2020-01-14 Thread Rafael Akchurin
Hello Robert, See why it happens - https://docs.diladele.com/faq/squid/fix_unable_to_get_issuer_cert_locally.html Best regards, Rafael Akchurin On 15 Jan 2020, at 03:59, robert k Wild wrote:  hi all, when im trying to go on a web page, squid cant connect and gives me an error page

Re: [squid-users] squid log analyzer

2019-12-20 Thread Rafael Akchurin
if the results are ok. Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users On Behalf Of Vacheslav Sent: Friday, 20 December 2019 11:05 To: squid-users@lists.squid-cache.org Subject: [squid-users] squid log analyzer i searched for a ufdb guard log analyzer

Re: [squid-users] good guide to AntiVirus detection, squid4

2019-12-19 Thread Rafael Akchurin
Hello Robert, Please see scripts at https://github.com/diladele/websafety/tree/release-7.2.0/core.ubuntu18 on how we do that (if you do not need web filtering – just ignore that part). Best regards, Rafael From: squid-users On Behalf Of robert k Wild Sent: Thursday, 19 December 2019 16:03

[squid-users] Ubuntu 18 LTS repository for Squid 4.9 (rebuilt with sslbump support from sources in Debian unstable)

2019-11-13 Thread Rafael Akchurin
for Ubuntu 16 are also available in that repo. Hope you will find this helpful. Note that older repo of squid48.diladele.com will be taken down in 1 year. Best regards, Rafael Akchurin Diladele B.V. P.S. Here are simple instructions how to use the repo. For more information see readme at https

Re: [squid-users] Unsuccessful at using Squid v4 with intercept

2019-11-01 Thread Rafael Akchurin
Hello Sebastian, If you decide to go policy routing way as Amos suggested - please see the tutorial at https://docs.diladele.com/tutorials/policy_based_routing_squid/index.html Or https://docs.diladele.com/tutorials/web_filter_https_squid_cisco_wccp/index.html for WCCP. Best regards, Rafael

Re: [squid-users] Kerberos nad keytab problem

2019-09-25 Thread Rafael Akchurin
/administrator_guide_stable/active_directory/index.html Downside - the password for that designated user needs to be non expiring or you'd be regenerating keytabs everytime the password changes. Which is not difficult anyway too. Best regards, Rafael Akchurin Diladele B.V. From: squid-users On Behalf Of L.P.H

Re: [squid-users] AD user Login + Squid Proxy + Automatic Authentication

2019-08-22 Thread Rafael Akchurin
Hello Randi, You seem to be wishing to setup Single-Sign-On. We have a small guide here that might be of some help. It is proven and it definitely works. It involves Microsoft AD and Kerberos https://docs.diladele.com/administrator_guide_stable/active_directory/index.html The guide involves

Re: [squid-users] HAProxy + Squid

2019-07-22 Thread Rafael Akchurin
Hello Gabriel, We do exactly that in our lab, see docs at https://docs.diladele.com/administrator_guide_7_0/active_directory_extra/redundancy/haproxy_proxy_protocol.html It works perfectly. Best regards, Rafael Akchurin Diladele B.V. From: squid-users [mailto:squid-users-boun...@lists.squid

[squid-users] Ubuntu 18 LTS repository for Squid 4.8 (rebuilt with sslbump support from sources in Debian unstable)

2019-07-19 Thread Rafael Akchurin
for feature-squid-4.8-1 branch). Scripts for Ubuntu 16 will be updated in the near future. Hope you will find this helpful. Note that older repo of squid46.diladele.com will be taken down in two years. Best regards, Rafael Akchurin Diladele B.V. P.S. Here are simple instructions how to use the repo

Re: [squid-users] Debian Buster, Squid 4.6-1 amd64, "Too few negotiateauthenticator processes are running"

2019-07-15 Thread Rafael Akchurin
from client browsers. Best regards, Rafael Akchurin Diladele B.V. -- Need easy to manage DNS filter? See our new project at https://dnssafety.io/ From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of James Zuelow Sent: Monday, July 15, 2019 9:11 PM To: 'squid-users

Re: [squid-users] ACL inside ClamAV?

2019-03-15 Thread Rafael Akchurin
Hello Felipe, We have something like this in our ICAP server. See https://docs.diladele.com/administrator_guide_7_0/web_filter/policies/blocking_file_downloads.html Best regards, Rafael Akchurin Diladele B.V. From: squid-users On Behalf Of Felipe Arturo Polanco Sent: Friday, 15 March 2019 16

Re: [squid-users] problem compiling squid 4 on ubuntu 18.04

2019-02-27 Thread Rafael Akchurin
Hello Alex, Please take a look at how we recompile Squid 4.6 for Ubuntu 18. It compiles and runs nicely without errors. See https://docs.diladele.com/howtos/build_squid_4_on_ubuntu/index.html Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users On Behalf

Re: [squid-users] Squid for Windows Repeatedly Crashing

2019-02-27 Thread Rafael Akchurin
Drew (US - Hermitage) Sent: Wednesday, February 27, 2019 05:51 To: Eliezer Croitoru ; Rafael Akchurin Cc: 'Amos Jeffries' ; squid-users@lists.squid-cache.org Subject: RE: [squid-users] Squid for Windows Repeatedly Crashing Hello folks, and thanks for keeping interest. Today I spent a bit

[squid-users] Ubuntu 18 LTS repository for Squid 4.6 (rebuilt with sslbump support from sources in Debian unstable)

2019-02-26 Thread Rafael Akchurin
will find this helpful. Note that older repo of squid44.diladele.com will be taken down in one year. Best regards, Rafael Akchurin Diladele B.V. P.S. Here are simple instructions how to use the repo. For more information see readme at https://github.com/diladele/squid-ubuntu . # add diladele

Re: [squid-users] Squid for Windows Repeatedly Crashing

2019-02-24 Thread Rafael Akchurin
As far as I know the internal FD limit for Windows build is around 3K - might be being existed and thus unexpected behavior raising its ugly head.. -Original Message- From: squid-users On Behalf Of Van Order, Drew (US - Hermitage) Sent: Sunday, 24 February 2019 14:40 To:

Re: [squid-users] Building Squid 3.5 for Win2k with SSL

2019-02-10 Thread Rafael Akchurin
Hello Amos, Reinhard, Interestingly enough this error does not popup when building Squid on 64-bit Cygwin. Might be some 32-bit installation glitch? Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users On Behalf Of Amos Jeffries Sent: Sunday, 10 February

Re: [squid-users] can't access https://www.finanzamt.bayern.de/ with sslbump (other sites works well)

2019-01-09 Thread Rafael Akchurin
, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users On Behalf Of Amos Jeffries Sent: Wednesday, 9 January 2019 13:25 To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] can't access https://www.finanzamt.bayern.de/ with sslbump (other sites works well) On 9/01/19

[squid-users] [icap] Release Candidate of Web Safety 7.0 web filter for Squid proxy

2018-12-17 Thread Rafael Akchurin
for making this possible! Best regards, Rafael Akchurin Diladele B.V. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] [tutorial] How to rebuild Squid 4.4 on Ubuntu 16 with SSLBump

2018-11-15 Thread Rafael Akchurin
/ubuntu16, hopefully might be helpful for someone. Unfortunately no plans to publish online repo for the DEBs for now (use squid44.diladele.com if you are ok with going to Ubuntu 18). Best regards, Rafael Akchurin Diladele B.V. -- Web Filter deployed in Microsoft Azure? Surely possible, see

Re: [squid-users] Ubuntu 18 LTS repository for Squid 4.4 (rebuilt with sslbump support from sources in Debian unstable)

2018-11-01 Thread Rafael Akchurin
Hello Jose, Latest Squid is already available in Debian unstable, no need to use Ubuntu recompilation. Best regards, Rafael Akchurin > Op 1 nov. 2018 om 21:08 heeft José J. Rodriguez > het volgende geschreven: > > Rafael Akchurin wrote: >> Greeting all, >> The onlin

Re: [squid-users] Ubuntu 18 LTS repository for Squid 4.4 (rebuilt with sslbump support from sources in Debian unstable)

2018-10-31 Thread Rafael Akchurin
Hello Samuel, Yes will make the Docker when 7.0 is in beta stage, now we need to polish it a little. Added issue at https://github.com/diladele/websafety-issues/issues/1030 Best regards, Rafael Akchurin Diladele B.V. From: squid-users On Behalf Of S Irlapati Sent: Wednesday, 31 October 2018

[squid-users] Ubuntu 18 LTS repository for Squid 4.4 (rebuilt with sslbump support from sources in Debian unstable)

2018-10-31 Thread Rafael Akchurin
will find this helpful. Note that older repo of squid43.diladele.com will be taken down in two weeks. Best regards, Rafael Akchurin Diladele B.V. P.S. Here are simple instructions how to use the repo. For more information see readme at https://github.com/diladele/squid-ubuntu . # add diladele

Re: [squid-users] ERROR: NAT/TPROXY lookup failed to locate original IPs on local

2018-10-19 Thread Rafael Akchurin
Yes you can use any ICAP/eCAP server you like, just adjust the docs as required and that is it. From: Uchenna Nebedum Sent: Friday, 19 October 2018 20:17 To: Rafael Akchurin Cc: squid-users@lists.squid-cache.org Subject: Re: [squid-users] ERROR: NAT/TPROXY lookup failed to locate original IPs

Re: [squid-users] ERROR: NAT/TPROXY lookup failed to locate original IPs on local

2018-10-19 Thread Rafael Akchurin
Hello Uchenna, May be this policy based routing with Mikrotik tutorial will be of any use See https://docs.diladele.com/tutorials/mikrotik_transparent_squid/index.html Best regards, Rafael Akchurin Diladele B.V. From: squid-users On Behalf Of Uchenna Nebedum Sent: Friday, 19 October 2018 18

[squid-users] Ubuntu 18 LTS repository for Squid 4.3 (rebuilt with sslbump support from sources in Debian unstable)

2018-10-11 Thread Rafael Akchurin
will find this helpful. Note that older repo of squid42.diladele.com will be taken down in two weeks. Best regards, Rafael Akchurin Diladele B.V. P.S. Here are simple instructions how to use the repo. For more information see readme at https://github.com/diladele/squid-ubuntu . # add diladele

[squid-users] Squid 3.5.28 for Microsoft Windows 64-bit is available

2018-09-06 Thread Rafael Akchurin
t the *MSI installer only* can also be reported to supp...@diladele.com<mailto:supp...@diladele.com> . Best regards, Rafael Akchurin Diladele B.V. https://www.diladele.com ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists

[squid-users] [icap] Web Safety 6.4 web filter plugin for Squid proxy is available

2018-09-04 Thread Rafael Akchurin
Thanks to all of you for making this possible! Best regards, Rafael Akchurin Diladele B.V. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Squid + Squidguard Youtube URL video filtering

2018-08-16 Thread Rafael Akchurin
specifying different allow/deny videos/categories/channels per different group of proxy users. So be sure to get version 6.3. Best regards, Rafael Akchurin Diladele B.V. https://www.diladele.com -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org

Re: [squid-users] splunk 3.5.27-Sec Advisories

2018-08-03 Thread Rafael Akchurin
We are waiting on it. Sorry summer time :) Best regards, Rafael Akchurin > Op 3 aug. 2018 om 21:06 heeft Kumpf, Scott het volgende > geschreven: > > Greetings, > > Checking in to see how the new Squid for Windows build is coming along, is > there an update? Is ther

Re: [squid-users] splunk 3.5.27-Sec Advisories

2018-07-27 Thread Rafael Akchurin
Hello Amos, Scott, Will try building now. Shall be possible by the end of next week I hope. Best regards, Rafael Akchurin > Op 28 jul. 2018 om 07:23 heeft Amos Jeffries het > volgende geschreven: > >> On 28/07/18 08:48, Kumpf, Scott wrote: >> Greetings, >>

Re: [squid-users] squidclient and PROXY procotol enabled http_port (solved)

2018-04-17 Thread Rafael Akchurin
fects from this configuration. Best regards, Rafael Akchurin Diladele B.V. -- Please take a look at https://www.diladele.com - ICAP web filtering plugin for Squid proxy. From: Rafael Akchurin Sent: Saturday, April 14, 2018 10:14 AM To: squid-users (squid-users@lists.squid-cache.org) <squid-user

[squid-users] squidclient and PROXY procotol enabled http_port

2018-04-14 Thread Rafael Akchurin
Greetings to everyone, I have the following deployment: - Several Squid nodes configured with "http_port 3128 require-proxy-header" - One haproxy what relays TCP connections to nodes - squidclient that is run on each node manually Browsers pointing to haproxy are

[squid-users] [icap] Web Safety 6.2 web filter plugin for Squid proxy is Release Candidate

2018-04-13 Thread Rafael Akchurin
early access to next development builds at https://www.diladele.com/community.html . Thanks to all of you for making this possible! Best regards, Rafael Akchurin Diladele B.V. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists

Re: [squid-users] Squid is very slow after moving to production environment

2018-04-09 Thread Rafael Akchurin
Hello Roberto, When Squid is "slow" like users complain first thing to check is always the DNS settings. Also sometimes switching to "IPv4 DNS resolve first" helps. Look for "squidclient mgr:idns" and "dns_v4_first on" on Squid wiki. Hope others ha

[squid-users] multiple log_file_daemon settings in squid.conf

2018-03-20 Thread Rafael Akchurin
in the squid.conf? One (original) would write access_log is usual and another one would parse out pumped bytes and update the ICAP records database. Hope I could explain it :( Thanks in advance for everyone taking time to respond. Best regards, Rafae

Re: [squid-users] Squid Transparent Proxy with Policy Routing in pfSense

2018-03-13 Thread Rafael Akchurin
Hello Antonio, Sorry no pfsense tutorials for now, but these two are *proved* to be working just fine. https://docs.diladele.com/tutorials/policy_based_routing_squid/index.html https://docs.diladele.com/tutorials/mikrotik_transparent_squid/index.html Hope it helps. Best regards, Rafael

[squid-users] [icap] Web Safety 6.1 web filter plugin for Squid proxy is available

2018-03-07 Thread Rafael Akchurin
are welcome at supp...@diladele.com. Next version will include dynamic real-time page categorization using machine learning algorithms. You can join our community to get early access to next development builds at https://www.diladele.com/community.html . Thanks to all of you for m

Re: [squid-users] Squid 3.x or 4.x acting as a transparent http proxy (NOT https)

2018-02-07 Thread Rafael Akchurin
Thats strange. How is your network configured? Your rules indicate you have 2 nics but you later say you have one.. Best regards, Rafael Akchurin > Op 7 feb. 2018 om 23:31 heeft setuid <set...@gmail.com> het volgende > geschreven: > >> On 02/07/2018 04:38 PM, Rafael Akch

Re: [squid-users] Squid 3.x or 4.x acting as a transparent http proxy (NOT https)

2018-02-07 Thread Rafael Akchurin
No unfortunately nothing like this is in our lab for FreeBSD - but default Squid package in pfSense runs transparently without issues I have heard (or with other issues than you have). Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: setuid [mailto:set...@gmail.com

Re: [squid-users] Squid 3.x or 4.x acting as a transparent http proxy (NOT https)

2018-02-07 Thread Rafael Akchurin
and the second one for separate Squid that intercepts traffic re-routed from the router using Policy-Based-Routing. The tutorials are working, I test it with every release of our ICAP web filter. Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users

[squid-users] Policy based routing and Squid transparent interception tutorial

2018-01-21 Thread Rafael Akchurin
please say so. See https://docs.diladele.com/tutorials/policy_based_routing_squid/index.html Best regards, Rafael Akchurin Diladele B.V. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] persistent connections not being utilized with Chrome

2018-01-15 Thread Rafael Akchurin
- so might be a Chrome issue/architecture? Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Brian J. Murrell Sent: Monday, January 15, 2018 4:41 PM To: squid-users@lists.squid-cache.org Subject: Re: [s

[squid-users] [icap] Web Safety RC 6.0 ICAP web filter plugin for Squid proxy is now Release Candidate

2017-12-12 Thread Rafael Akchurin
nclude Google Safe Browsing protection as URL rewriter. Join our community to get early access to next development builds (see https://www.diladele.com/community.html). Thanks to all of you for making this possible! Rafael Akchurin Diladele B.V. ___

Re: [squid-users] net::err_cert_common_name_invalid just in squid page with dstdomain block

2017-12-05 Thread Rafael Akchurin
May it be https://docs.diladele.com/faq/squid/chrome_ssl_filter/dns_does_not_exist.html ? Best regards, Rafael Akchurin Op 5 dec. 2017 om 20:34 heeft erdosain9 <erdosa...@gmail.com<mailto:erdosa...@gmail.com>> het volgende geschreven: Hi, and thanks. But, i dont get it, how this

[squid-users] [icap] Web Safety 5.2 ICAP web filter plugin for Squid is now Release Candidate

2017-10-31 Thread Rafael Akchurin
ect Active Directory Inspector ( see https://github.com/diladele/active-directory-inspector ). Builds of 5.3 for now is in beta stage and thus freely available to Early Adopters community ( https://www.diladele.com/community.html ). Thanks to all of you for making this possible! Best regards, Rafae

Re: [squid-users] Pseudo proxy authentication (mapping of IP address to user name) in intercept mode.

2017-10-17 Thread Rafael Akchurin
group and apply designated filtering policy in our ICAP server. Written above seems to work in the test lab. Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Amos Jeffries Sent: Tuesday, O

Re: [squid-users] Pseudo proxy authentication (mapping of IP address to user name) in intercept mode.

2017-10-17 Thread Rafael Akchurin
Hello Amos, Thanks for your responses. What I do not understand completely - if we have intercept style of deployment, when browsers know nothing about the proxy - how basic (or any other type of authenticator) will work? I always thought browsers will discard proxy-auth responses just

[squid-users] Pseudo proxy authentication (mapping of IP address to user name) in intercept mode.

2017-10-17 Thread Rafael Akchurin
regards, Rafael Akchurin Diladele B.V. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] SSL Bump Failures with Google and Wikipedia

2017-10-05 Thread Rafael Akchurin
Hello Eliezer, From desktop ff/chrome goto youtube. It will be br encoded. Best regards, Rafael Akchurin > Op 6 okt. 2017 om 02:43 heeft Eliezer Croitoru <elie...@ngtech.co.il> het > volgende geschreven: > > Hey Yuri and Rafael, > > I have tried to find a site which

Re: [squid-users] SSL Bump Failures with Google and Wikipedia

2017-09-30 Thread Rafael Akchurin
Hello Jeff, Do not forget Google and YouTube are now using brotli encoding extensively, not only gzip. Best regards, Rafael Akchurin > Op 30 sep. 2017 om 23:49 heeft Jeffrey Merkey <jeffmer...@gmail.com> het > volgende geschreven: > >> On 9/30/17, Eliezer Croitoru

[squid-users] Squid 3.5.27 for Microsoft Windows 64-bit is available

2017-09-19 Thread Rafael Akchurin
Best regards, Rafael Akchurin Diladele B.V. https://www.diladele.com Cloud Guard URL re-writer for Squid proxy We would also like to introduce our new research project - cloud based URL rewriter for Squid proxy. In short it is an URL rewriter that gets integrated with Squid. The rewriter

Re: [squid-users] [squid for windows] article on how to enable sslbump

2017-09-13 Thread Rafael Akchurin
Hello Yuri, We tried building it several times, but it was not clear why it failed.. so we keep postponing :( Best regards, Rafael Akchurin Op 13 sep. 2017 om 18:07 heeft Yuri <yvoi...@gmail.com<mailto:yvoi...@gmail.com>> het volgende geschreven: 13.09.2017 21:32, Rafael Ak

[squid-users] [squid for windows] article on how to enable sslbump

2017-09-13 Thread Rafael Akchurin
at supp...@diladele.com<mailto:supp...@diladele.com> -- Best regards, Rafael Akchurin Diladele B.V. https://www.diladele.com P.S. Build of Squid 3.5.27 for Microsoft Windows is still on the way :( ... ___ squid-users mailing list squid

Re: [squid-users] TLS: 1st time w/intermediate cert: not working; ideas on what I'm doing wrong?

2017-09-07 Thread Rafael Akchurin
/foreign_intermediate_certs.pem So it must be working :) Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of L A Walsh Sent: Thursday, September 7, 2017 11:15 PM To: squid-us...@squid-cache.org

[squid-users] [icap] Web Safety 5.1 ICAP web filter plugin for Squid is Ready

2017-09-04 Thread Rafael Akchurin
m/diladele/websafety-issues/milestones). In the next version we are planning to add antivirus engine ClamAV (and possibly another commercial antivirus) as another ICAP service chain to Admin UI. Best regards, Rafael Akchurin Diladele B.V. https://www.diladele.com -- P.S. Squid 3.5.27 for Windows is

[squid-users] shall squid be stopped in order to run "squid -z"

2017-08-05 Thread Rafael Akchurin
t possible to pass the *new* directory path to "squid -z" and then make a change in the conf followed by "squid -k reconfigure" and erasing the old dir later (how later?). Thanks to all who replies. Best regards, Rafael Akchurin Diladele

Re: [squid-users] Squid as gateway

2017-07-11 Thread Rafael Akchurin
May be this will be of any help - https://docs.diladele.com/tutorials/transparent_proxy_ubuntu/index.html -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of erdosain9 Sent: Tuesday, July 11, 2017 5:41 PM To:

Re: [squid-users] Squid and active directory

2017-07-01 Thread Rafael Akchurin
And this as alternative https://docs.diladele.com/administrator_guide_5_1/active_directory/index.html Raf From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Yuri Sent: Saturday, July 1, 2017 11:28 PM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users]

[squid-users] Squid 3.5.26 for Microsoft Windows 64-bit is available

2017-06-26 Thread Rafael Akchurin
dependencies at GitHub - https://github.com/diladele/squid-windows . Report all issues/bugs/feature requests at GitHub project. Issues about the *MSI installer only* can also be reported to supp...@diladele.com<mailto:supp...@diladele.com> . Best regards, Rafael Akchurin Diladele B.V.

Re: [squid-users] squid sslbump and certificates

2017-05-29 Thread Rafael Akchurin
Hello Vieri, This article tries to explain why it happens. https://docs.diladele.com/faq/squid/fix_unable_to_get_issuer_cert_locally.html#ssl-certificate-test-tool-in-web-safety-5 To fix it - better use what Yuri recommended in

Re: [squid-users] Squid custom error page

2017-05-17 Thread Rafael Akchurin
members may know better if it is possible to do that in Squid directly. Beware of those using your tunnels to pump non http traffic though. Blocking the connect as it is done now in Squid keeps you on safe side. Best regards, Rafael Akchurin Op 17 mei 2017 om 4:04 PM heeft Amos Jeffries <

Re: [squid-users] ssl bump and chrome 58

2017-05-03 Thread Rafael Akchurin
And on 3.5 too? -Original Message- From: Yuri [mailto:yvoi...@gmail.com] Sent: Wednesday, May 3, 2017 12:30 PM To: Rafael Akchurin <rafael.akchu...@diladele.com>; Flashdown <flashd...@data-core.org> Cc: squid-users@lists.squid-cache.org Subject: Re: [squid-users] ssl bump a

Re: [squid-users] ssl bump and chrome 58

2017-05-03 Thread Rafael Akchurin
Sorry disregard - should practice my google fu better - see http://bugs.squid-cache.org/show_bug.cgi?id=4711 -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Rafael Akchurin Sent: Wednesday, May 3, 2017 10:48 AM To: Flashdown <fla

  1   2   3   >