Re: [squid-users] FTP : Squid sending private IP in PASV response

2016-10-20 Thread Garri Djavadyan
On Thu, 2016-10-20 at 14:07 +, Gael Ancelin wrote: > Hello, >   > I have searched in maillist archives but have not seen so far someone > with the > same problem. >   > My Squid's objective is to foward FTP & HTTP requests to a distant > server. >   > Squid is running on CentOS 7.2. > uname -r

Re: [squid-users] Peeking on TLS traffic: unknown cipher returned

2016-10-20 Thread Leandro Barragan
Thanks for your time Alex! I modified my original config based on Amos recommendations, so I think now I have a more consistent peek & splice config: acl TF ssl::server_name_regex -i facebook fbcdn twitter reddit ssl_bump peek all ssl_bump terminate TF ssl_bump splice all As you mentioned,

[squid-users] FTP : Squid sending private IP in PASV response

2016-10-20 Thread Gael Ancelin
Hello, I have searched in maillist archives but have not seen so far someone with the same problem. My Squid's objective is to foward FTP & HTTP requests to a distant server. Squid is running on CentOS 7.2. uname -r : 3.10.0-327.28.3.el7.x86_64 squid -v : Version 3.5.20 I don't have the

Re: [squid-users] Lots of "Vary object loop!"

2016-10-20 Thread Amos Jeffries
On 21/10/2016 12:07 a.m., Anton Kornexl wrote: > Hello, > > i also had many of these messages in cache.log > > we do filtering with squidguard (redirect http://www..xx ) > > It is possible that the same url is redirected for one user but not for > another (different filter rules per

Re: [squid-users] Lots of "Vary object loop!"

2016-10-20 Thread Garri Djavadyan
On Thu, 2016-10-20 at 13:07 +0200, Anton Kornexl wrote: > Hello, >   > i also had many of these messages in cache.log >   > we do filtering with squidguard (redirect http://www..xx ) >   > It is possible that the same url is redirected for one user but not > for another (different filter

Re: [squid-users] Lots of "Vary object loop!"

2016-10-20 Thread Anton Kornexl
Hello, i also had many of these messages in cache.log we do filtering with squidguard (redirect http://www..xx ) It is possible that the same url is redirected for one user but not for another (different filter rules per user) Are the redirected objects saved in cache:dir ? Can i

Re: [squid-users] Peeking on TLS traffic: unknown cipher returned

2016-10-20 Thread Alex Rousskov
On 10/19/2016 10:12 PM, Jason Haar wrote: > This is a complex situation for most people (myself included), can you > tell us how to "peek and make a decision based on SNI"? I have (long time ago) in the "Peek at SNI and Bump" and other examples at