[squid-users] setting up cache peering

2015-12-01 Thread Alex Samad
/business/markets-live/markets-live-investors-take-stock-20151201-gld1lu.html -O /dev/null and setting http_proxy to either alc or gsdmz1 I would get a 504 error. wget -d http://www.smh.com.au/business/markets-live/markets-live-investors-take-stock-20151201-gld1lu.html -O /dev/null Setting --output

Re: [squid-users] Time-Based Download Restrictions

2015-12-01 Thread Amos Jeffries
On 1/12/2015 3:56 a.m., Edmonds Namasenda wrote: > Greetings. > > I want to deny access to certain downloads (in str-med.txt) during "WorkHrs" > This is failing miserably as this is not achieved. > > Please look through my files (squid.conf and str-med.txt) below for > pointers to rectify this.

Re: [squid-users] How to use the different Store ID with same url and different proxy port ?

2015-12-01 Thread Amos Jeffries
On 1/12/2015 5:44 p.m., 风声 wrote: > Hi, > > We want to Squid-3 to listen serveral ports (like 3128/3129/3120/...), but > we want reply different cached objects for different ports with same > request (same url), Don't. URL do not work that way. RFC 3986 section 1.1.3: " The term "Uniform

Re: [squid-users] 32bit (i386) squid 3.5 cache dir size

2015-12-01 Thread Amos Jeffries
On 1/12/2015 8:48 a.m., TarotApprentice wrote: > From the Debian repo. Stretch has 3.5.10 at the moment. Jessie has 3.4.8. > Then it should have large-file support IIRC. Amos ___ squid-users mailing list squid-users@lists.squid-cache.org

Re: [squid-users] Looking for ideas on how to use squid in order to protect against a DOS\DDOS.

2015-12-01 Thread Amos Jeffries
On 1/12/2015 8:19 a.m., Eliezer Croitoru wrote: > I was wondering if someone have a nice idea on how to use squid to > protect against DOS\DDOS http\https attacks. > > The basic way I was thinking is rate limiting by counting the client IP > page HITs but I am unsure about it since it can

Re: [squid-users] missing icap respmod request when the web object is found in the cache?

2015-12-01 Thread Giray Simsek
Thanks Alex, this was helpful. > Subject: Re: [squid-users] missing icap respmod request when the web object > is found in the cache? > To: squid-users@lists.squid-cache.org > From: rouss...@measurement-factory.com > CC: giray_sim...@hotmail.com > Date:

Re: [squid-users] Looking for ideas on how to use squid in order to protect against a DOS\DDOS.

2015-12-01 Thread Eliezer Croitoru
On 01/12/2015 12:57, Amos Jeffries wrote: On 1/12/2015 8:19 a.m., Eliezer Croitoru wrote: I was wondering if someone have a nice idea on how to use squid to protect against DOS\DDOS http\https attacks. The basic way I was thinking is rate limiting by counting the client IP page HITs but I am

[squid-users] Question about c-icap and setting X-Next-Services header to empty string

2015-12-01 Thread Giray Simsek
Hi, I have 2 icap response modification services. I have integrated them to squid as in the below config. I am trying to update the adaptation plan dynamically in the first service (service_a_resp)Basically, if a certain condition is met, then I don't want the second service (service_b_resp)

[squid-users] Question about c-icap and setting X-Next-Services header to empty string

2015-12-01 Thread Giray Simsek
Hi, [Sorry for the dupe mail but I forgot to format the previous one as "Plain Text" and it looks bad.] I have 2 icap response modification services. I have integrated them to squid as in the below config.  I am trying to update the adaptation plan dynamically in the first service

Re: [squid-users] 2 way SSL on a non standard SSL Port

2015-12-01 Thread Bart Spedden
Thank you so much Amos! You figured it out! I was able to telnet to those ports from my localhost, but not from the server where squid is installed. I'm working to get those ports opened now. Thanks again! On Mon, Nov 30, 2015 at 7:08 PM, Amos Jeffries wrote: > On

[squid-users] squid 3.4.8 ssl-bump resolve ip in access.log

2015-12-01 Thread LANGLOIS Nicolas
Hi, i'm trying to set up squid 3.4.8 on debian , i want a full transparent proxy, no conf on client side . it's working actually but i 'm ask to report websites access but for https actually i just get this kind of line in my access.log : < TCP_MISS/200 288 CONNECT 64.233.184.106:443 -

Re: [squid-users] squid 3.4.8 ssl-bump resolve ip in access.log

2015-12-01 Thread Amos Jeffries
On 2/12/2015 12:40 a.m., LANGLOIS Nicolas wrote: > Hi, i'm trying to set up squid 3.4.8 on debian , i want a full transparent > proxy, no conf on client side . That is not what "fully transparent" means. The best form of transparent proxy is when clients are auto-configured with explicit-proxy

Re: [squid-users] squid 3.4.8 ssl-bump resolve ip in access.log

2015-12-01 Thread LANGLOIS Nicolas
Thanks Amos for the quick reply, I 'm making lot of mistake around ssl with squid, i 'm following your advice and try to setup with with last squid 3.5 version using tproxy will let you know . Have a good day Nicolas -Message d'origine- De : squid-users

Re: [squid-users] deny_info / url_rewrite_program

2015-12-01 Thread Jens Kallup
Hello, bellow, a Perl script that works for me - it redirect the URL in browser; when i type in "web.de" the result is "www.freenet.de". But the browser don't connect to www.freenet.de, he shows me a Error: redirect-error - this problem can be, when Cookies deactivated or denied. (iceweasel -

Re: [squid-users] Question about c-icap and setting X-Next-Services header to empty string

2015-12-01 Thread Alex Rousskov
On 12/01/2015 08:58 AM, Giray Simsek wrote: > I am trying to update the adaptation plan dynamically in the first > service (service_a_resp) Basically, if a certain condition is met, > then I don't want the second service (service_b_resp) to be called by > Squid. > icap_enable on >