[squid-users] NAT/TPROXY lookup failed to locate original IPs

2016-01-06 Thread dbrb2
Hi, I'm not sure if this is a Mint issue, a Squid issue, a bit of both, or neitherbut here goes: I am trying to build squid on Mint 17.3 kernel 3.19.0-32 geeric Squid 3.5.12 Alls seems to have built OK, Squid launches without errors, and the proxy works OK for HTTP requests.However

Re: [squid-users] NAT/TPROXY lookup failed to locate original IPs

2016-01-06 Thread Ben Barker
Thanks Amos - good points - thanks. Both now fixed - thought I still seem to be getting errors...sorry to be a bit inept here! squid -v Squid Cache: Version 3.5.12 Service Name: squid configure options: '--prefix=/usr' '--localstatedir=/var' '--libexecdir=/lib/squid' '--datadir=/share/squid'

Re: [squid-users] Host header forgery policy in service provider environment

2016-01-06 Thread Amos Jeffries
On 6/01/2016 10:10 p.m., Garri Djavadyan wrote: >> On 2015-12-31 00:01, Garri Djavadyan wrote: >>> Hello Squid members and developers! >>> >>> First of all, I wish you a Happy New Year 2016! >>> >>> The current Host header forgery policy effectively prevents a cache >>> poisoning. But also, I

Re: [squid-users] NAT/TPROXY lookup failed to locate original IPs

2016-01-06 Thread dbrb2
Squid version and config options: Squid Cache: Version 3.5.12 Service Name: squid configure options: '--prefix=/usr' '--localstatedir=/var' '--libexecdir=/lib/squid' '--datadir=/share/squid' '--sysconfdir=/etc/squid' '--with-default-user=proxy' '--with-logdir=/var/log/squid'

Re: [squid-users] NAT/TPROXY lookup failed to locate original IPs

2016-01-06 Thread Amos Jeffries
On 6/01/2016 10:50 p.m., dbrb2 wrote: > Squid version and config options: > > Squid Cache: Version 3.5.12 > Service Name: squid > configure options: '--prefix=/usr' '--localstatedir=/var' > '--libexecdir=/lib/squid' '--datadir=/share/squid' > '--sysconfdir=/etc/squid' '--with-default-user=proxy'

Re: [squid-users] Host header forgery policy in service provider environment

2016-01-06 Thread Garri Djavadyan
>On 2015-12-31 00:01, Garri Djavadyan wrote: >> Hello Squid members and developers! >> >> First of all, I wish you a Happy New Year 2016! >> >> The current Host header forgery policy effectively prevents a cache >> poisoning. But also, I noticed, it deletes verified earlier cached >> object. Is

Re: [squid-users] confused over ipv6 failing on ipv4-only network

2016-01-06 Thread Amos Jeffries
On 6/01/2016 7:29 p.m., Jason Haar wrote: > On 06/01/16 17:39, Amos Jeffries wrote: >> On 6/01/2016 5:04 p.m., Jason Haar wrote: >>> Hi there >>> >>> Weird - several times in the past couple of months I have found I cannot >>> get to http://wiki.squid-cache.org/ - I get the error below from my >>>

Re: [squid-users] NAT/TPROXY lookup failed to locate original IPs

2016-01-06 Thread Amos Jeffries
On 7/01/2016 1:08 a.m., Ben Barker wrote: > Thanks Amos - good points - thanks. Both now fixed - thought I still seem > to be getting errors...sorry to be a bit inept here! > > squid -v > Squid Cache: Version 3.5.12 > Service Name: squid > configure options: > '--prefix=/usr'

[squid-users] kerberos authentication with a machine account doesn't work

2016-01-06 Thread LYMN
Hi, We have been using kerberos authentication against Active Directory here for a long time by using a SPN attached to a user account and exporting the keytab. The issue we have is that security policy mandates that the password on the user account be changed which means we have to go and

Re: [squid-users] problem with squidGuard redirect page after upgrading squid

2016-01-06 Thread Eliezer Croitoru
On 07/01/2016 04:31, Jason Haar wrote: On 06/01/16 00:04, Amos Jeffries wrote: Yes. Squid always has been able to given enough RAM. Squid stores most ACLs in memory as Splay trees, so entries are sorted by frequency of use which is dynamically adapted over time. Regex are pre-parsed and

Re: [squid-users] problem with squidGuard redirect page after upgrading squid

2016-01-06 Thread Jason Haar
On 06/01/16 00:04, Amos Jeffries wrote: > Yes. Squid always has been able to given enough RAM. Squid stores most > ACLs in memory as Splay trees, so entries are sorted by frequency of use > which is dynamically adapted over time. Regex are pre-parsed and > aggregated together for reduced matching

[squid-users] R: Problem with Squid 3.4.4 and NTLM authentication

2016-01-06 Thread Job
Hello Amos and thank you! >> sinec i upgraded two Squid proxy servers to the Squid-3.4.4 versions, we >> have some huges bottleneck with ahtenticated ntlm (old style!) users. >> If i disable authentication and enable per-ip surf, it works fine. >From what earlier version? I did upgrade from