Re: [squid-users] Proper Cache Peer Access

On Tue, Dec 13, 2016, at 06:33 PM, Amos Jeffries wrote: > On 14/12/2016 2:10 p.m., creditu wrote: > > Looking for the best way to provide cache peer access for two urls on a > > 3.1 accelerator. For example if a set of backend servers fullfill > > requests for both www.example.com and

Re: [squid-users] Proper Cache Peer Access

On 14/12/2016 2:10 p.m., creditu wrote: > Looking for the best way to provide cache peer access for two urls on a > 3.1 accelerator. For example if a set of backend servers fullfill > requests for both www.example.com and www-legacy.example.com is the > following the correct way to handle them in

Re: [squid-users] squid bind username to same ip but different port

On 14/12/2016 3:18 a.m., --Ahmad-- wrote: > > im not sure if the directive : > > external_acl_type type-name %SRC %LOGIN /path/to/ext_file_userip_acl -f > /path/to/config.file > > will help becuase its description on ip/mask , not ip:port > If you want to write your own helper you could base

Re: [squid-users] Looking for additional information about securing squid

On 14/12/2016 11:44 a.m., Steve Becker wrote: > Hi all, > > > > My background's in networking, I'm very new to unix/linux and server > administration, I don't know a whole lot about security beyond ACLs and > setting up crypto for VPNs. I'm setting up a box at home with CentOS and > squid,

Re: [squid-users] Looking for additional information about securing squid

On Tuesday 13 December 2016 at 23:44:12, Steve Becker wrote: > Hi all, Hi. > My background's in networking, I'm very new to unix/linux and server > administration, I don't know a whole lot about security beyond ACLs and > setting up crypto for VPNs. > > I'm setting up a box at home with CentOS

Re: [squid-users] Transparent HTTPs proxy with Squid 3.5

On 13/12/2016 10:15 p.m., Per Jessen wrote: > Amos Jeffries wrote: > >> On 13/12/2016 5:11 a.m., Fomo Dong wrote: >>> Hi all, >>> >>> For couple of days I'm trying to figure out how to get a transparent >>> HTTPs proxy to work with Squid. What I'm trying to achieve is a proxy >>> that accepts

Re: [squid-users] URL too large??

And you are still using squid? Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: Yuri Voinov [mailto:yvoi...@gmail.com] Sent: Tuesday, December 13, 2016 10:09 PM To: Eliezer Croitoru

Re: [squid-users] URL too large??

It means exactly what it said: URL too long. In Squid's defaults set 8k for URL size. This was reasonable maximum 10 years ago. Now it seems too small (at least 4 times) because of now Internet full of adware bullshit (referrals/trackers/counters etc.) which is often more 8k. You can easy fix

Re: [squid-users] URL too large??

I did not dig deep into it I couldn't scan the access log for it because I had no idea what 'too long' meant. I will ignore it until someone says they're unable to access a website, and they can give me details of what it is. On 13 December 2016 at 19:51, Eliezer Croitoru

Re: [squid-users] URL too large??

On 2016-12-13 22:03, Alex Rousskov wrote: On 12/13/2016 09:51 AM, Eliezer Croitoru wrote: I think that the maximum size was 64k The maximum appears to be 8KB: v3.5/src/defines.h:#define MAX_URL 8192 v4/src/defines.h:#define MAX_URL 8192 v5/src/defines.h:#define MAX_URL 8192 IIRC,

Re: [squid-users] URL too large??

On 12/13/2016 09:51 AM, Eliezer Croitoru wrote: > I think that the maximum size was 64k The maximum appears to be 8KB: v3.5/src/defines.h:#define MAX_URL 8192 v4/src/defines.h:#define MAX_URL 8192 v5/src/defines.h:#define MAX_URL 8192 IIRC, there are many emails discussing this limit

Re: [squid-users] URL too large??

I think that the maximum size was 64k and it's way above this. It should not be an issue if this is some weird application creating some random url which doesn't have meaning. But if you know what is creating such a url it's a whole another story. Can you reproducerecreate this url? Eliezer

Re: [squid-users] FATAL: The userIp helpers are crashing too rapidly, need help!

thank you brother , you have been rock ! > On Dec 13, 2016, at 3:21 PM, FredB wrote: > > > /root/soso/userIP.conf > > Make a try with /tmp > > /tmp/userIP.conf > > Fred > ___ > squid-users mailing list >

Re: [squid-users] FATAL: The userIp helpers are crashing too rapidly, need help!

Now, You should use another directory, less insecure I mean /tmp is r/w for all ... ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] squid bind username to same ip but different port

hey squid users . i have a question . say i have 1 ipv4 and with 100 ports opened with http directive . say i have 100 user/pwd for squid. the question is how can i bind each user to ip:port i mean i don’t want each user to be available on each port .. i just want to bind each port with

Re: [squid-users] Antw: RE: squid-3.3.8-26.el7_2.4.x86_64 using Novell eDirectory with /usr/lib64/squid/digest_edirectory_auth

Which of the helpers are you having issues with? The Group or the user one? I did some experiment with ldap groups which can be found at: http://lists.squid-cache.org/pipermail/squid-users/2015-July/004874.html Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261

Re: [squid-users] FATAL: The userIp helpers are crashing too rapidly, need help!

/root/soso/userIP.conf Make a try with /tmp /tmp/userIP.conf Fred ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] FATAL: The userIp helpers are crashing too rapidly, need help!

hello squid users & hello Amos amos I’m trying to do like 1000 ipv6 binding outgoing usernames but i have the error like helpers are crashed .. I’m not sure if i need to tune some settings before completion to take out the error . here is the config i used for that i needed : auth_param

Re: [squid-users] Transparent HTTPs proxy with Squid 3.5

Amos Jeffries wrote: > On 13/12/2016 5:11 a.m., Fomo Dong wrote: >> Hi all, >> >> For couple of days I'm trying to figure out how to get a transparent >> HTTPs proxy to work with Squid. What I'm trying to achieve is a proxy >> that accepts internet traffic from ports 80 & 443, routes them >>

[squid-users] URL too large??

Hi, Saw this on my cache.log (squid-3.5.22, FreeBSD-9.3,): 2016/12/13 11:47:55| WARNING: no_suid: setuid(0): (1) Operation not permitted 2016/12/13 11:47:55| WARNING: no_suid: setuid(0): (1) Operation not permitted 2016/12/13 11:47:55| HTCP Disabled. 2016/12/13 11:47:55| Finished loading MIME