[squid-users] R: How to definitively disable IPv6

2019-01-28 Thread Troiano Alessio
> > Anyway squid try to connect to the IPv6 address instead of IPv4 and > > I’m not able to reach it: > > > > C:\Users\atroiano>nslookup download.pdfforge.org > > > > Server: espevmd..prv > > > > Address: 172.x.x.x > > > > > > > > Risposta da un server non autorevole: > > > > Nome:

[squid-users] R: How to definitively disable IPv6

2019-01-25 Thread Troiano Alessio
Thank you Bruno for the answer. The DNS returns both IPv6 and IPv4 addresses, but it depends on the request (A or ). Squid should do both and prefer in order the IPv4 answer. I added the IPV6INIT=no on my interface and http_port 172.31.1.68:8080, restarted squid, but same behavior. Il

[squid-users] How to definitively disable IPv6

2019-01-25 Thread Troiano Alessio
Hello, I need to definitively solve the ipv6 (un)reachbility issue. I state I read this topic: http://squid-web-proxy-cache.1019090.n4.nabble.com/dns-v4-first-on-ignored-td4658427.html but not found a solution. Amos wrote “Squid tests for IPv6 ability automatically by opening a socket on a

[squid-users] R: R: Squid does not send request to parent proxy

2019-01-18 Thread Troiano Alessio
Nice! Thank you so much Amos. Il presente messaggio e-mail e ogni suo allegato devono intendersi indirizzati esclusivamente al destinatario indicato e considerarsi dal contenuto strettamente riservato e confidenziale. Se non siete l'effettivo destinatario o avete ricevuto il messaggio e-mail

[squid-users] R: Squid does not send request to parent proxy

2019-01-18 Thread Troiano Alessio
Thank you Amos in this way it works. But that was an example, in my config I should use acl from file, and it doesn't work. So this is the relevant config: acl parentproxyHUBAT dstdomain /etc/squid/hubatsite.acl cache_peer 172.31.3.70 parent 8080 0 no-query default name=HUBATLDB

[squid-users] R: Squid does not send request to parent proxy

2019-01-18 Thread Troiano Alessio
Same result Alex: %SQUID-4: 172.31.0.82 54345 [18/Jan/2019:16:16:10 +0800] "GET http://www.voeazul.com.br/ HTTP/1.1" www.voeazul.com.br - - "/" 403 text/html 726 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:64.0) Gecko/20100101 Firefox/64.0" TCP_MISS:HIER_DIRECT 23.77.9.57 80 40266 Il

[squid-users] Squid does not send request to parent proxy

2019-01-17 Thread Troiano Alessio
Hello all, I'm not able to configure squid for using a parent proxy only for some domain. All the rest should be fetched directly. I tried this configuration: cache_peer 172.31.3.70 parent 8080 0 no-query default name=HUBATLDB acl domainAT dstdomain voeazul.com.br cache_peer_access HUBATLDB allow

[squid-users] R: Is this the next step of SSL encryption? Fwd: Encrypted SNI

2018-10-20 Thread Troiano Alessio
Sorry but, I'm loosing something... Also if client will use ESNI, the server should response with a certificate that will be in clear and has all server information, like alias... So is it possible to know what is the resource the client is looking for. Only with wildcard certificate you can't.

[squid-users] R: R: R: SQUID does not insert server ip and port in logs for CONNECT method when the connection fails (error 503)

2018-09-14 Thread Troiano Alessio
2018 19:22 A: squid-users@lists.squid-cache.org Oggetto: Re: [squid-users] R: R: SQUID does not insert server ip and port in logs for CONNECT method when the connection fails (error 503) On Friday 14 September 2018 at 18:52:46, Troiano Alessio wrote: > I don't understand what I need to do..

[squid-users] R: R: SQUID does not insert server ip and port in logs for CONNECT method when the connection fails (error 503)

2018-09-14 Thread Troiano Alessio
method when the connection fails (error 503) On 09/14/2018 10:06 AM, Troiano Alessio wrote: > Ok, so reverting the question: can you reproduce with the latest version the > same error? Unfortunately, I do not have the free time required to do this testing right now. Please note that

[squid-users] R: SQUID does not insert server ip and port in logs for CONNECT method when the connection fails (error 503)

2018-09-14 Thread Troiano Alessio
fails (error 503) On 09/14/2018 04:33 AM, Troiano Alessio wrote: > In HTTPS connections when the destination server does not answer > (maybe blocked by our firewall because it is malicious) the > destination ip is not logged. If Squid tried to contact the server, then you

[squid-users] SQUID does not insert server ip and port in logs for CONNECT method when the connection fails (error 503)

2018-09-14 Thread Troiano Alessio
Hello, I'm seeing the problem as from subject. I'm interested in log fields %http://sqm.telemetry.microsoft.com and https://sqm.telemetry.microsoft.com . The site is not reachable. Squid.conf: logformat custom_squid %%SQUID-4: %>a %>p [%tl] "%rm %ru HTTP/%rv" %h" "%{User-Agent}>h" %Ss:%Sh

[squid-users] R: Go to intranet server through Squid

2018-05-17 Thread Troiano Alessio
If you do not define any exception all the web requests are forwarded to squid proxy. So, the only thing you have to check is that squid can reach the server 192.168.10.10 (routing and/or firewall policy). Also check that squid uses your local DNS server and resolves the correct IP address.

[squid-users] R: Squid doesn't reload webpage like other clients do

2017-10-31 Thread Troiano Alessio
easurement-factory.com] Inviato: lunedì 30 ottobre 2017 17:22 A: Troiano Alessio <alessio.troi...@leonardocompany.com>; squid-users@lists.squid-cache.org Oggetto: Re: [squid-users] Squid doesn't reload webpage like other clients do On 10/30/2017 03:51 AM, Troiano Alessio wrote: > I've s

[squid-users] Squid doesn't reload webpage like other clients do

2017-10-30 Thread Troiano Alessio
Hello, I've squid 3.5.20 running on RHEL 7.4. I have a problem to access some websites, for example www.nato.int. This website apply an Anti-DDoS system that reset the first connection after the TCP 3-way handshake (SYN/SYN-ACK/ACK/RST-ACK). All subsequent TCP connections are accepted. The