Re: [squid-users] Protecting squid

2021-03-21 Thread Amos Jeffries
On 18/03/21 2:54 am, Ben Goz wrote: Hi Amos, Sounds interesting. Maybe I should modify the external_acl_type to talk with internal API inside my system. You do not need to modify any Squid code. You provide a helper process to translate between Squid APIs and some internal system API. see

Re: [squid-users] Protecting squid

2021-03-17 Thread Ben Goz
By the help of God. Hi Amos, Sounds interesting. Maybe I should modify the external_acl_type to talk with internal API inside my system. Can you please point me to some code examples and documentation? Also if you can please point me to squid code that invokes the external ACL program?

Re: [squid-users] Protecting squid

2021-03-15 Thread Amos Jeffries
On 15/03/21 2:26 am, Ben Goz wrote: Can I configure squid authentication TTL per only source IP and ignores other parameters so authentication will be requested only once in TTL for all the sessions? Not with just authentication. You will need to use a slightly more complicated system

Re: [squid-users] Protecting squid

2021-03-15 Thread Eliezer Croitoru
Support Mobile: +972-5-28704261 Email: ngtech1...@gmail.com Zoom: Coming soon -Original Message- From: squid-users On Behalf Of Ben Goz Sent: Sunday, March 14, 2021 3:26 PM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Protecting squid On 12/03/2021 7:13, Amos Jeffries

Re: [squid-users] Protecting squid

2021-03-14 Thread Ben Goz
On 12/03/2021 7:13, Amos Jeffries wrote: On 12/03/21 3:56 am, Ben Goz wrote: On 11/03/2021 16:44, Amos Jeffries wrote: On 12/03/21 3:37 am, Ben Goz wrote: On 11/03/2021 15:50, Antony Stone wrote: On Thursday 11 March 2021 at 14:41:11, Ben Goz wrote: Tell about your network setup and what

Re: [squid-users] Protecting squid

2021-03-11 Thread Amos Jeffries
On 12/03/21 3:56 am, Ben Goz wrote: On 11/03/2021 16:44, Amos Jeffries wrote: On 12/03/21 3:37 am, Ben Goz wrote: On 11/03/2021 15:50, Antony Stone wrote: On Thursday 11 March 2021 at 14:41:11, Ben Goz wrote: Tell about your network setup and what you are trying to achieve - we might be

Re: [squid-users] Protecting squid

2021-03-11 Thread Alex Rousskov
On 3/11/21 9:37 AM, Ben Goz wrote: > End users machine using some client application while their system proxy > points to the above squid proxy server. Client certificate-based authentication may be the best option if their system proxy supports it and you do not need to bump user traffic with

Re: [squid-users] Protecting squid

2021-03-11 Thread Ben Goz
On 11/03/2021 16:44, Amos Jeffries wrote: On 12/03/21 3:37 am, Ben Goz wrote: On 11/03/2021 15:50, Antony Stone wrote: On Thursday 11 March 2021 at 14:41:11, Ben Goz wrote: Tell about your network setup and what you are trying to achieve - we might be able to suggest solutions. End

Re: [squid-users] Protecting squid

2021-03-11 Thread Amos Jeffries
On 12/03/21 3:37 am, Ben Goz wrote: On 11/03/2021 15:50, Antony Stone wrote: On Thursday 11 March 2021 at 14:41:11, Ben Goz wrote: Tell about your network setup and what you are trying to achieve - we might be able to suggest solutions. End users machine using some client application

Re: [squid-users] Protecting squid

2021-03-11 Thread Ben Goz
On 11/03/2021 15:50, Antony Stone wrote: On Thursday 11 March 2021 at 14:41:11, Ben Goz wrote: I tried to open squid with some special port other than the default 3128 port. Obscurity is not equivalent to security. But after a while I saw that my squid was being abused by unknown IP

Re: [squid-users] Protecting squid

2021-03-11 Thread Antony Stone
On Thursday 11 March 2021 at 14:41:11, Ben Goz wrote: > I tried to open squid with some special port other than the default 3128 > port. Obscurity is not equivalent to security. > But after a while I saw that my squid was being abused by unknown IP > addresses I'm assuming this means your

Re: [squid-users] Protecting squid against ddos attacks

2019-09-26 Thread Amos Jeffries
On 23/09/19 1:59 am, Chirayu Patel wrote: > Hi Amos, > > Thanks a lot for giving some amazing insights.. > > So currently I am using Squid to achieve 2 things : > a) Content Filtering - by checking the url against an external db and > allow and block it accordingly. (using url_rewriter).  > b)

Re: [squid-users] Protecting squid against ddos attacks

2019-09-22 Thread Chirayu Patel
ge: 1 > Date: Sat, 21 Sep 2019 12:19:18 +1200 > From: Amos Jeffries > To: squid-users@lists.squid-cache.org > Subject: Re: [squid-users] Protecting squid against ddos attacks > Message-ID: <835c4d02-4246-8c65-f9ce-cf91c7dd9...@treenet.co.nz> > Content-Type: text/plain; cha

Re: [squid-users] Protecting squid against ddos attacks

2019-09-20 Thread Amos Jeffries
On 21/09/19 1:03 am, Chirayu Patel wrote: > --> I have installed squid in a wifi access point which will in many > cases behave as an edge gateway as well.. So basically it itself is the > firewall. There is nothing in front to protect it. > --> There are 4 ports that are opened.. If someone