Re: [squid-users] squid 3.1 ldap authentication

2016-01-28 Thread Eliezer Croitoru
Hey Nando, Can you test something? On 25/01/2016 17:52, nando mendonca wrote: external_acl_type ldap_group %LOGIN /usr/local/squid1/libexec/ext_ldap_group_acl -R -b "ou=groups,dc=gcsldap,dc=corp,dc=domain,dc=com" -D

Re: [squid-users] Is jesred still compatible with squid 4.x?

2016-02-28 Thread Eliezer Croitoru
uests from but if it works then it is. All The Bests, Eliezer On 29/02/2016 02:34, Karl-Philipp Richter wrote: Hi, Am 29.02.2016 um 01:13 schrieb Eliezer Croitoru: I do not remember if I have tried to work with such a setup in the past but, can you give some technical details on the desired setu

Re: [squid-users] Is jesred still compatible with squid 4.x?

2016-02-28 Thread Eliezer Croitoru
Hey Kalle, I do not remember if I have tried to work with such a setup in the past but, can you give some technical details on the desired setup? Are there any written documentations about such a setup already? if so can you redirect me to one of these? Basically the jesred program as far as

Re: [squid-users] [squid 3.5.5] security Update Advisory SQUID-2016:2

2016-02-25 Thread Eliezer Croitoru
I have a testing package ready for CentOS 7 and will try to see if it affects my local installation just out of the box. Eliezer On 25/02/2016 17:16, Amos Jeffries wrote: Maybe yes, maye no. It seems to be one of those things that passes all testing, then hits in production. A few people

Re: [squid-users] Squid 3.5.15 for Microsoft Windows 64-bit is available

2016-02-25 Thread Eliezer Croitoru
Great to hear Rafael! Debian and Ubuntu squid debs will help many to upgrade their systems easily. Eliezer On 25/02/2016 12:02, Rafael Akchurin wrote: NOTE1: we also plan to backport recompilation of 3.5.15 version of Squid to Ubuntu 14.04 LTS. The repo will be made available on

Re: [squid-users] IIS error with one website

2016-02-29 Thread Eliezer Croitoru
Can you send me or the list your squid.conf? Also are you using SSl-BUMP? is this a https site? Eliezer On 01/03/2016 00:36, Ryan Slick wrote: Hi Guys, So here is an issue I am having, there is a external website some of our users need to access. When accessing via the Squid proxy, the site

Re: [squid-users] IIS error with one website

2016-02-29 Thread Eliezer Croitoru
ich amount to be over 2000 dir. cache_dir null c:/ClientSiteProxy coredump_dir c:/clientsiteproxy/var/cache http_port 80 http_port 8080 On Tuesday, 1 March 2016 11:49 AM, Eliezer Croitoru <elie...@ngtech.co.il> wrote: Can you send me or the list your squid.conf? Also are you using SSl-BUMP? is t

Re: [squid-users] squidclient can't connect to localhost

2016-01-19 Thread Eliezer Croitoru
On 19/01/2016 14:38, Henri Wahl wrote: So what is Squid logging during startup/reconfigure about that IPv6 port ? What kernel and OS are you using? Also did you tried to start squid with default settings? Also what is the output of "squid -v"? Eliezer

Re: [squid-users] Capitive portal with squid just to put small info then have internet

2016-01-20 Thread Eliezer Croitoru
Hey, It depends on how you identify your clients\users. If you do have a way to distinguish them then it would might be possible. Eliezer On 20/01/2016 11:58, Drvirus wrote: Hi , Im wondering if what I need is possible or not . I need to have my customers connect over ip:port to my squid

[squid-users] Squid 4.0.5 beta RPMs for: Oracle Linux EL7, CentOS EL7, SLES 12SP1 are available.

2016-02-14 Thread Eliezer Croitoru
SLES 12sp1 repositories at: http://ngtech.co.il/repo/sles/12sp1/beta/SRPMS/ http://ngtech.co.il/repo/sles/12sp1/beta/x86_64/ Oracle Linux EL7 repositories at: http://ngtech.co.il/repo/oracle/7/beta/SRPMS/ http://ngtech.co.il/repo/oracle/7/beta/x86_64/ CentOS EL7 repositories at:

Re: [squid-users] Rock datastore, CFLAGS and a crash that (may be) known

2016-02-16 Thread Eliezer Croitoru
Before digging into the details of the issue, can you supply the OS details? What OS are you using? What distribution? 32 or 64 bit? can you also add the output of "squid -v" for both 3.5.14 and 3.5.13 ? Thanks, Eliezer On 16/02/2016 16:32, Jester Purtteman wrote: Greetings Squid users, With

Re: [squid-users] Delay Pools and HTTPS on Squid 3.x

2016-02-16 Thread Eliezer Croitoru
Hey Martin, I was wondering if you had the chance of trying to enforce some QOS policy on the OS level? Also what OS and distribution are you using? Eliezer On 17/02/2016 03:37, Hery Martin wrote: Hello everybody: Since a few months ago I'm using squid to provide a solution as small

Re: [squid-users] crash with squid 3.5.5

2016-02-17 Thread Eliezer Croitoru
Hey Paul, First there are missing parts to the picture such as squid.conf OS details and "squid -v". Second you are using squid 3.5.5 which is at least half a year old and since I am using 3.5.14 and it works fine I would assume that it should work for you the same. Eliezer On 17/02/2016

Re: [squid-users] Rock datastore, CFLAGS and a crash that (may be) known

2016-02-17 Thread Eliezer Croitoru
erformance then custom-compiling and flagging. I have not built a Debian\Ubuntu deb package for a very long time but I had a plan to do so. Maybe I will do it one day. All The Bests, Eliezer Croitoru On 17/02/2016 15:36, Jester Purtteman wrote: Dear Eliezer, Amos and Marcus, Thank you, and sorry fo

Re: [squid-users] Delay Pools and HTTPS on Squid 3.x

2016-02-20 Thread Eliezer Croitoru
On 18/02/2016 04:02, Hery Martin wrote: @Eliezer I'm using Ubuntu Server 14.04 (not especial decision, because I use to deploy different distros in a Citrix XenServer test environment) Have you any guide to implements QOS+Squid? As I said, I saw in many articles that you have to mark the traffic

Re: [squid-users] IIS error with one website

2016-02-29 Thread Eliezer Croitoru
for HTTP/1.1. If you have a specific environment feel free to share it with me publicly or privately to see if there is a smooth upgrade path for your environment. Eliezer On 01/03/2016 03:13, Amos Jeffries wrote: On 1/03/2016 12:26 p.m., Eliezer Croitoru wrote: >Hey Ryan, > >

Re: [squid-users] pages not being cached

2016-03-10 Thread Eliezer Croitoru
Hey Cindy, I do not have too much experience with MediaWIKI but I ran some test on it in the past for both caching and other things. I am using this logformat to detect couple things that are related to caching: logformat cache_headers %ts.%03tu %6tr %>a %Ss/%03>Hs %%Sh/%h"

Re: [squid-users] Sudden but sustained high bandwidth usage

2016-03-14 Thread Eliezer Croitoru
Thanks, I'm with you no this but it's not clear to many sys\cache admins that caching windows updates is the "tiny" bit of the wide Internet. Eliezer On 14/03/2016 17:37, Heiler Bemerguy wrote: My colleagues here asked me the same question but I prefer to really FIX the caching of

Re: [squid-users] Sudden but sustained high bandwidth usage

2016-03-15 Thread Eliezer Croitoru
Hey, Your words describe the BUG in his wildest and simplest form. Please file a bug report to follow the progress. Writing here more and more will not be really a good help as it is. Eliezer On 15/03/2016 19:51, Heiler Bemerguy wrote: Hi joe, Eliezer, Amos.. today I saw something different

Re: [squid-users] HTTPS interception and filtering?

2016-03-13 Thread Eliezer Croitoru
Are you referring to: http://thread.gmane.org/gmane.comp.web.squid.general/114384/focus=114389 Eliezer On 12/03/2016 15:58, James Lay wrote: On Sun, 2016-03-13 at 00:09 +1100, Tim Bates wrote: Is it possible to do this: * Intercept HTTPS and send it via Squid? * Apply ACLs to the intercepted

Re: [squid-users] Sudden but sustained high bandwidth usage

2016-03-12 Thread Eliezer Croitoru
Hey, Thanks for the debug!. I do not know the exact reason but I can say for sure that it's not the NetAPP or any other OS level issue since the AUFS\UFS cache_dir works fine in the same system and in a similar situation. I will try to replicate it locally. I do understand the issue and I

Re: [squid-users] Sudden but sustained high bandwidth usage

2016-03-12 Thread Eliezer Croitoru
OK it's pretty simple to reproduce on any machine what so ever on 3.5.15-2. open two terminals on two machines more or less. Then run on one the next command watch -n 0.2 "http_proxy=http://IP_OP_PROXY:3128/ curl --silent --range 20-40 http://ngtech.co.il/squid/videos/sosp2011_27.mp4 | wc -c"

Re: [squid-users] Squid with ICAP filter?

2016-03-19 Thread Eliezer Croitoru
Hey Mike, What do you mean by black box to us? who is us? Eliezer On 17/03/2016 21:52, Mike Summers wrote: Thanks Alex. You are correct, the message bodies are compressed (gzip). For reasons unknown the ICAP service can't or won't deal with compressed data. Also correct, the ICAP service is

Re: [squid-users] PURGE ERR_TOO_BIG

2016-03-10 Thread Eliezer Croitoru
squid.conf ... Eliezer On 11/03/2016 01:43, joe wrote: trying to purge url squidclient -h192.192.192.212 -p3128 PURGE http://www.oggi.it/global_assets/js/searchform.js Generated Fri, 11 Mar 2016 00:08:34 GMT by proxy.netgatesss.com (squid) debug_options ALL,2 --- 2016/03/11

Re: [squid-users] Sudden but sustained high bandwidth usage

2016-03-10 Thread Eliezer Croitoru
Hey, I wanted to ask something very specific, how often do you restart the service if at all? what shutdown_flifetime [http://www.squid-cache.org/Doc/config/shutdown_lifetime/] are you using? Eliezer On 09/03/2016 15:17, Heiler Bemerguy wrote: Hi Amos, Now you can help me on tracking it

Re: [squid-users] PURGE ERR_TOO_BIG

2016-03-10 Thread Eliezer Croitoru
Sorry I got confused with my email service issue. +1 Alex Eliezer On 11/03/2016 03:13, Alex Rousskov wrote: On 03/10/2016 04:43 PM, joe wrote: trying to purge url squidclient -h192.192.192.212 -p3128 PURGE http://www.oggi.it/global_assets/js/searchform.js Missing squidclient -m option to

Re: [squid-users] Squid 3.5.15-1 is available for Ubuntu 14.04 LTS (online repo ubuntu.diladele.com)

2016-03-09 Thread Eliezer Croitoru
First thanks! Will it be possible to add another version of squid to other versions of ubuntu? Eliezer On 10/03/2016 00:00, Rafael Akchurin wrote: Hello all, We have rebuilt the Debian (testing) package for Squid 3.5.15-1 for Ubuntu 14.04 LTS with libecap3. If you need to install the

Re: [squid-users] SSL Peek and Splice with SIP over TCP

2016-03-09 Thread Eliezer Croitoru
On 09/03/2016 21:31, Jason Haar wrote: Or use socat. I have used it to allow ancient SSLv3-only clients to communicate with TLS-only servers. Jason Would it be possible to put haproxy as a SSL termination proxy and pass the TCP request to squid? which will results in a similar situation to

Re: [squid-users] Need advice on some crazy access control requirements

2016-03-10 Thread Eliezer Croitoru
Hey Victor, I do not think it's too crazy. It is a very common statement in the Law of Pharmacy to not operate "heavy" tools when taking a specific medicine. In most cases it is there since the operation of such tools(light\heavy) requires the worker\operator a specific amount of

Re: [squid-users] after i checked via firebug ( firefox addon) , i found waiting time is very high via monitor hit small object , how i do reduce the waiting time for hit object ??

2016-03-14 Thread Eliezer Croitoru
Hey There, I am not sure what is causing it and there might be some network related issue but I am not sure what the issue is. Can you please share the related access.log output for these requests? Are you testing internally or against the Internet? Eliezer On 14/03/2016 15:57, johnzeng

Re: [squid-users] Sudden but sustained high bandwidth usage

2016-03-14 Thread Eliezer Croitoru
Hey, I have a question, in your scenario, if you would be able to statically cache all these updates using nginx, or another cache_peer, would it sound OK? or good enough? Eliezer On 14/03/2016 16:32, Heiler Bemerguy wrote: Hi Eliezer and Joe!!! Thank you very much for your support. I

Re: [squid-users] Squid 4: Cloudflare SSL connection problem

2016-04-12 Thread Eliezer Croitoru
What "dig www.cloudflare.com" results with? Also what OS are you using? I am using CentOS 7 up to date... Eliezer On 12/04/2016 21:39, Yuri Voinov wrote: root @ cthulhu /patch # openssl s_client -cipher 'ECDHE-ECDSA-AES128-GCM-SHA256' -connect

Re: [squid-users] Squid 4: Cloudflare SSL connection problem

2016-04-12 Thread Eliezer Croitoru
Hey Yuri, I will try to test it with couple versions of 4.0.x. But it's weird... The reason it's weird is since some kind of trust or understand this test: https://www.ssllabs.com/ssltest/analyze.html?d=www.cloudflare.com=198.41.214.162 I am not an SSL

Re: [squid-users] squid-cache.org misconfigured

2016-04-10 Thread Eliezer Croitoru
Hey Yuri, I filled a bug report about this couple times and the answer that I received and is the actual case is: There is a sync process to the squid-cache mirror\cache web servers. Since the synchronization "reset" the permissions of the files apache cannot access the web page files. Due to

Re: [squid-users] squid-cache.org misconfigured

2016-04-10 Thread Eliezer Croitoru
Hey Yuri, I will try to put up a "status" page for some of the project web services in order to describe\explain the current status of the down time. How long is it "long enough" that you mean\know? If for example the project page would be down for a

Re: [squid-users] squid-cache.org misconfigured

2016-04-10 Thread Eliezer Croitoru
work times are different for me and the other project voluntaries and announces\releases. Eliezer On 10/04/2016 14:56, Yuri Voinov wrote: 10.04.16 17:54, Eliezer Croitoru пишет: > Hey Yuri, > > I will try to put up a &qu

Re: [squid-users] squid-cache.org misconfigured

2016-04-10 Thread Eliezer Croitoru
the bugzilla report later to have this info with hope that it will be resolved. Eliezer From: Yuri Voinov [mailto:yvoi...@gmail.com] Sent: Sunday, April 10, 2016 2:58 PM To: Eliezer Croitoru; squid-users@lists.squid-cache.org Subject: Re: [squid-users] squid-cache.org misconfigured

Re: [squid-users] FATAL: Ipc::Mem::Segment::create failed to shm_open(/squid-cf__metadata.shm): (13) Permission denied

2016-04-11 Thread Eliezer Croitoru
Hey, There are couple things which are unclear about both the system you are running and the situation. In the post mentioned a CentOS 6.5 and SElinux policy for a specific thing. The specific policy in the post seems "sensible" but the default policy for

Re: [squid-users] TCP RDP on squid Pfsense not woking

2016-04-11 Thread Eliezer Croitoru
Did you tried to enable all traffic as I suggested in the other email? Eliezer On 11/04/2016 23:54, --Ahmad-- wrote: On Apr 11, 2016, at 9:40 AM, --Ahmad--

Re: [squid-users] Sudden but sustained high bandwidth usage

2016-03-07 Thread Eliezer Croitoru
Thanks for the Interpretation. I didn't found any bug report that is related to the subject. I will try to add it into the bugzilla later. Eliezer On 08/03/2016 04:00, Amos Jeffries wrote: On 8/03/2016 10:00 a.m., Eliezer Croitoru wrote: I do not know exactly what this means from the info

Re: [squid-users] squid with sslbump blocking Netflix

2016-03-02 Thread Eliezer Croitoru
In some places the law can prohibit the usage of pinned certificates. Eliezer On 02/03/2016 21:09, Yuri Voinov wrote: Nobody can fight SSL pinning in proprietary apps. The only way I see is to put Netflex under splice ACL and do not do SSL bump for all Netflex CDN.

Re: [squid-users] Bizarrely slow, timing out DNS only via Squid :D

2016-03-03 Thread Eliezer Croitoru
This is where you need to share your squid.conf.. Also what was the result of the query I mentioned? Another one to try is: http://www.squid-cache.org/Doc/config/dns_v4_first/ try adding to the end of squid.conf dns_v4_first on All The Bests, Eliezer On 04/03/2016 00:42, Dan Charlesworth

Re: [squid-users] Bizarrely slow, timing out DNS only via Squid :D

2016-03-06 Thread Eliezer Croitoru
If you want to somehow use a skype\irc session to see what can be done without all the hassle of emails back and forth let me know. Eliezer On 06/03/2016 13:55, Dan Charlesworth wrote: For what it's worth, I've now tried disabling IPv6 via sysctl and it didn't make any difference. Appreciate

Re: [squid-users] Survey on assertions: When the impossible happens

2016-03-01 Thread Eliezer Croitoru
Hey Eray, Indeed all of these are good and sysadmins should be able to handle them but.. in specific cases it's not easy. The cases I know about are: - SAT links (slow or costly) - Sensitive acl\security systems - Very low quality distance wireless links In the case of ACLs system bypass or

Re: [squid-users] squid with sslbump blocking Netflix

2016-03-02 Thread Eliezer Croitoru
On 02/03/2016 21:33, Yuri Voinov wrote: Yes, and in some places the law prohibit SSL bump completely But AFAIK here is technical list, not lawer, is it?;) Yuri, You are right but since some of us do have legal obligations to some laws and do not live in a desert on the moon or the sun

Re: [squid-users] Bizarrely slow, timing out DNS only via Squid 

2016-03-02 Thread Eliezer Croitoru
Hey Dan, What dig+nslookup queries did you tested for? Eliezer On 03/03/2016 07:39, Dan Charlesworth wrote: Right now we have 1 squid box (out of a lot), running 3.5.13, which does something like this for every request, taking about 10 seconds: 2016/03/03 16:30:48.883 kid1| 78,3|

Re: [squid-users] Bizarrely slow, timing out DNS only via Squid 

2016-03-02 Thread Eliezer Croitoru
6s user0m0.004s sys 0m0.001s On 3 Mar 2016, at 4:55 PM, Eliezer Croitoru <elie...@ngtech.co.il> wrote: Hey Dan, What dig+nslookup queries did you tested for? Eliezer On 03/03/2016 07:39, Dan Charlesworth wrote: Right now we have 1 squid box (out of a lot), running 3.5.13,

Re: [squid-users] Squid 3.5.x install problem

2016-03-03 Thread Eliezer Croitoru
On 03/03/2016 14:35, Jorgeley Junior wrote: to install squid in /etc use "--prefix=/etc/squid" The standard way is: ./configure --prefix=/usr/local/squid and it's also normal in some systems to use the /opt such as ./configure --prefix=/opt/squid Permissions and users you will need to set

Re: [squid-users] Bizarrely slow, timing out DNS only via Squid :D

2016-03-07 Thread Eliezer Croitoru
dig +trace results against ISP+other dns services shows 65000+ ms response time which means that there is something wrong outside of squid. Eliezer On 07/03/2016 06:50, Dan Charlesworth wrote: Alright, we’re getting somewhere. A plain curl is about as slow as a default squid config curl:

Re: [squid-users] Sudden but sustained high bandwidth usage

2016-03-07 Thread Eliezer Croitoru
Sorry about the confusion\misunderstanding.. my brains cache is kind of tiny\short and I am not sure but was it you that asked about the big NETAPP cache a question not long ago? or was it someone else? I am maybe confusing because the other one had more clients but a similar issue. I will

Re: [squid-users] Sudden but sustained high bandwidth usage

2016-03-07 Thread Eliezer Croitoru
On 07/03/2016 22:08, Yuri Voinov wrote: 90 Gb first, 300 Gb second. Thanks but... Wouldn't it be much simpler and cheaper to just use WSUS instead all of the hassle??(if it's a closed business environment) And when does the TCP_SWAPFAIL_MISS happens? always? And a little tweak for the

Re: [squid-users] Sudden but sustained high bandwidth usage

2016-03-07 Thread Eliezer Croitoru
On 07/03/2016 16:29, Heiler Bemerguy wrote: We're still getting all these SWAPFAIL and our link is skyrocketing.. please help! I think it didn't happen on older versions (.14 and below) Hey, What do you mean by skyrocketing?? like in the graph?? Also it is not clear to me something about

Re: [squid-users] Sudden but sustained high bandwidth usage

2016-03-07 Thread Eliezer Croitoru
On 08/03/2016 00:08, Heiler Bemerguy wrote: I don't know how to explain these FD numbers. I'm using EXT4 and I don't know what are vmware cache disks. Since it's a VM, there are couple options for a DATASTORE in vmware ESXi. A description about the different options is at:

Re: [squid-users] Sudden but sustained high bandwidth usage

2016-03-09 Thread Eliezer Croitoru
On 09/03/2016 10:54, L.P.H. van Belle wrote: No, Aufs : cache_dir aufs /var/spool/squid 9216 16 256 max-size=100663296 Then the cases are different by nature... you have 9GB and he uses 90+++ GB, you are using AUFS which is a FS based and he is using ROCK which is a DB structure. The

Re: [squid-users] Sudden but sustained high bandwidth usage

2016-03-09 Thread Eliezer Croitoru
On 09/03/2016 09:59, L.P.H. van Belle wrote: With the settings i already told you. Today is ms update day and hee.. its caching my windows updates .. so go try them out. Are you using ROCK cache_dir ?? Eliezer ___ squid-users mailing list

Re: [squid-users] videos caching over https

2016-04-03 Thread Eliezer Croitoru
I am unsure what you want to achieve. Do you want to cache one specific url or a set of urls? Also are you targeting one host\url and\or also one client or more? It will depend on the level of control that you have on the client side. If you are in a position to Intercept all the traffic it

[squid-users] What are the chunks per request limits in squid? if at all? and Is there any client that comply with Retry-After response?

2016-05-23 Thread Eliezer Croitoru
wondering about squid compliance to "Retry-After" RFC, is there any known client which actually implements support for that feature? Eliezer ---- Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il ___

[squid-users] What are the chunks per request limits in squid? if at all? and Is there any client that comply with Retry-After response?

2016-05-23 Thread Eliezer Croitoru
lso wondering about squid compliance to "Retry-After" RFC, is there any known client which actually implements support for that feature? Eliezer Eliezer Croitoru <http://ngtech.co.il/lmgtfy/> Linux System Administrator Mobile: +972-5-2870426

[squid-users] Would it be possible to run a http to https gateway using squid?

2016-05-10 Thread Eliezer Croitoru
ld it be reasonable to write and publish such a tool? Or is it a security risk to publish such a tool to the public? Eliezer Eliezer Croitoru <http://ngtech.co.il/lmgtfy/> Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il

Re: [squid-users] SSL-Bump and generated certificates ...

2016-05-16 Thread Eliezer Croitoru
Hey Walter, I am not sure if it's the ssl_crtd which does such a thing but this is my main suspect. If you can extract the ssl_crtd binary from 3.4.X(newest) and test it before maybe Alex will respond then it will verify some of the doubt. Eliezer Eliezer Croitoru Linux System

Re: [squid-users] Would it be possible to run a http to https gateway using squid?

2016-05-15 Thread Eliezer Croitoru
2016 08:40, Amos Jeffries wrote: On 11/05/2016 9:25 a.m., Eliezer Croitoru wrote: I was wondering to myself, If I can generate certificates and bump the connection, I can use a 302\308 to redirect all traffic from https to a http(intercepatble) connection. Then on the http interceptor rewrite t

Re: [squid-users] New StoreID helper: squid_dedup

2016-05-15 Thread Eliezer Croitoru
Thanks for sharing! I didn't had enough time to understand the tool structure since I am not a python expert but, This is the first squid helper I have seen which is based on python and implements concurrency. Thanks!! Eliezer Croitoru On 10/05/2016 00:56, Hans-Peter Jansen wrote: Hi, I'm

Re: [squid-users] Are there any distros with SSL Bump compiled by default?

2016-05-16 Thread Eliezer Croitoru
32+64 bit This is a part of my trial to somehow publish a binary version of squid per release. I hope to have some time and to make it possible so also squid 4.X will also get the same attention. Eliezer ---- Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ng

Re: [squid-users] Squid and AD => That' s don't work !

2016-05-11 Thread Eliezer Croitoru
Hey Oliver, What version of AD are you trying to authenticate against? What is the client Operating System? The more details you will give on the system the more possible you will get an answer(in general not from me specifically..) Eliezer Eliezer Croitoru <h

Re: [squid-users] Only listening to ipv6 (bug) still present? http_port

2016-05-03 Thread Eliezer Croitoru
Hey Tory, I am not aware of such changes from 3.5.16 to 3.5.17. I have not tested for this case yet and it seems a bit weird for me to see such behavior from squid. I will be able to add it to the set of tests I already have later, until now 3.5.17 looks pretty working to me and without known

Re: [squid-users] Squid 4: Cloudflare SSL connection problem

2016-04-17 Thread Eliezer Croitoru
For me it works. ... The first thing to do is publish the squid.conf with a bug report and all other related info. *NIX doesn't mean CentOS since on CentOS this specific issue doesn't exit. I assume that if it works on CentOS it will work almost the same for

Re: [squid-users] Routing Internally And/Or Externally?

2016-04-19 Thread Eliezer Croitoru
Hey There, In general what you want is possible but couple things are not clear to me yet. The config you mentioned has couple issues: ##START OF INFO acl localnetPAC src 192.168.0.0/24#resource within my network acl localnetPAC src internal.resources.com

Re: [squid-users] Squid 4: Cloudflare SSL connection problem

2016-04-20 Thread Eliezer Croitoru
Hey Yuri, I think that the bug solution or identification is requiring a full tcpdump trace for a single request as was mentioned on the bug report: http://bugs.squid-cache.org/show_bug.cgi?id=4497#c39 http://bugs.squid-cache.org/show_bug.cgi?id=4497#c40

[squid-users] Peer2Peer Url categorizing, black\white lists, can it work?

2016-07-25 Thread Eliezer Croitoru
would be possible to share and generate a list of public domains which are known compared to the current state which many parts of the web is "unknown". If you wish to participate in any of the above ideas please contact me here or privately. Eliezer Eliezer Croitoru <http://ng

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2016-07-14 Thread Eliezer Croitoru
f you need some help with it. Eliezer ---- Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Omid Kosari Sent: Thursday, July 14, 20

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2016-07-25 Thread Eliezer Croitoru
Hey Omid, I will comment inline. And there are couple details which we need to understand couple issues. Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid

Re: [squid-users] cachemgr.cgi on embedded system

2016-07-24 Thread Eliezer Croitoru
://mycache.example.com:3128/squid-internal-mgr/menu and for the info page from the menu: http://mycache.example.com:3128/squid-internal-mgr/info So unless you have a special need for the cache manger cgi you should use the http one. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5

Re: [squid-users] Peer2Peer Url categorizing, black\white lists, can it work?

2016-07-26 Thread Eliezer Croitoru
ode that handles dns blacklist queries in golang: https://github.com/jersten/ipchk (for me to remember later) I will try to calculate couple things and then I will move on. Eliezer ---- Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Origi

Re: [squid-users] squid 3.3.8 https (Yuri Voinov)

2016-08-10 Thread Eliezer Croitoru
addresses to limit access towards. I can write a log "follower" script that will update an IPTSET iptables target. Do you have any experience with CentOS QOS or rate limiting? I will be able to write the script only next week if it will help you. Eliezer ---- Eliezer Croitoru Linux

Re: [squid-users] how can I coplete this squid tutorial?

2016-08-10 Thread Eliezer Croitoru
? Basic caching or filtering or just access control? Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of james82 Sent: Wednesday

Re: [squid-users] Range header is a hit ratio killer

2016-08-10 Thread Eliezer Croitoru
t that some objects do not worth the code invested in them. Hope it clears the picture\words and meanings, Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: k simon [mailto:chio1...@gmail.com] Sent: Tu

Re: [squid-users] squid 3.3.8 https (Yuri Voinov)

2016-08-10 Thread Eliezer Croitoru
you should consider the options first since maybe even with newer versions of squid you would need a combination to get a full match for your needs. Eliezer Eliezer Croitoru <http://ngtech.co.il/lmgtfy/> Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech

Re: [squid-users] time based range_offset_limit

2016-07-13 Thread Eliezer Croitoru
Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Heiler Bemerguy Sent: Wednesday, July 13, 2016 6:35 PM To: squid-users@lists.squid

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2016-07-20 Thread Eliezer Croitoru
to be used by the web-service but you will need to update to the latest version of the fetcher and to use the right cli option(don't remember now) or to use the command under a "true" pipe such as "true | /location/fetcher ..." to avoid any "pause" which it will cause. Than

Re: [squid-users] cache peer communication about HIT/MISS between squid and and non-squid peer

2016-07-17 Thread Eliezer Croitoru
I read your email but now I am a bit busy. Later today or tomorrow I will respond. All The Bests, Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2016-07-18 Thread Eliezer Croitoru
About the mismatch log output I cannot say a thing since I have not researched it. And about an option to add a HIT HEADER you can use the next script: https://gist.github.com/elico/ac58073812b8cad14ef154d8730e22cb Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261

Re: [squid-users] rep_header not working

2016-07-18 Thread Eliezer Croitoru
y: I do not know what to tell you! I can try to research and read code but there are others which can answer better then me on this one. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users

Re: [squid-users] Skype+intercept+ssl_bump

2016-07-18 Thread Eliezer Croitoru
of bumping exceptions - Using some no-bump external_acl helper I have a specific model for doing such a thing with Linux ipset and I only need couple domains to evaluate the concept. Eliezer ---- Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il ---

Re: [squid-users] rep_header not working

2016-07-18 Thread Eliezer Croitoru
Well I cannot say a thing until I will study the subject. One thing I was thinking about was: Can you analyze the squid access.log and to reduce from the account\user the HIT traffic? If so then I can recommend some log format special log to give you the needed details. Eliezer Eliezer

Re: [squid-users] how to change public IP to access website on proxy squid?

2016-07-20 Thread Eliezer Croitoru
change\add the above squid settings ie: via off forwarded_for delete And see if it helps you. All The Bests, Eliezer ---- Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid

Re: [squid-users] how to change public IP to access website on proxy squid?

2016-07-20 Thread Eliezer Croitoru
And to just illustrate what can be extracted by a single JavaScript: http://myip.net.il/ Thanks, Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2016-07-16 Thread Eliezer Croitoru
ere is a real technical\functional need for that in a long term usage. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Omid Kosari Sent:

Re: [squid-users] NOTICE: Authentication not applicable on intercepted requests.

2016-07-05 Thread Eliezer Croitoru
approach I have seen in products is to install some kind of authentication Daemon per DESKTOP which will extend a 60 seconds authorization and registration every 15-30-45 seconds using the AD or LDAP user. Eliezer ---- Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 E

Re: [squid-users] Skype, SSL bump and go.trouter.io

2016-07-06 Thread Eliezer Croitoru
re. I have not tried to use skype in a transparent environment for a very long time but I can try to test it later. Eliezer ---- Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@l

Re: [squid-users] host_verify_strict and wildcard SNI

2016-07-06 Thread Eliezer Croitoru
it. Eliezer <http://ngtech.co.il/lmgtfy/> Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il From: Yuri Voinov [mailto:yvoi...@gmail.com] Sent: Wednesday, July 6, 2016 11:49 PM To: Eliezer Croitoru; squid-users@lists.squid-cache.org S

Re: [squid-users] host_verify_strict and wildcard SNI

2016-07-06 Thread Eliezer Croitoru
will always change. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Yuri Voinov Sent: Wednesday, July 6, 2016 10:43 PM To: squid

Re: [squid-users] host_verify_strict and wildcard SNI

2016-07-06 Thread Eliezer Croitoru
Admins do not need to swear on something like "do not harm" and I think it's a good aspect on things. I am still looking for clues about cloudflare since I have yet to see the person who hold the keys for them. Eliezer Eliezer Croitoru <http://ngtech.co.il/lmgtfy/> Linux

Re: [squid-users] host_verify_strict and wildcard SNI

2016-07-07 Thread Eliezer Croitoru
the wildcard into the DNS world, should we consider such an option even if the RFC tends to minimize and containerize the options? Thanks, Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users

Re: [squid-users] Skype, SSL bump and go.trouter.io

2016-07-07 Thread Eliezer Croitoru
some might think but if they do not reveal their cards it doesn't mean they are stupid(not directed to you). If there is a security expert out there for Linux, there is more then one for MS. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie

Re: [squid-users] HTTPS bump doesn't work with websites that require SNI

2016-07-10 Thread Eliezer Croitoru
Hey, What version of squid is provided on pfsense and what version are you using? Eliezer <http://ngtech.co.il/lmgtfy/> Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il From: squid-users [mailto:squid-users-boun...@lists

[squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2016-07-10 Thread Eliezer Croitoru
tools are a Proof Of Concept and an almost full implementation of the idea. I consider it a Squid Helper tool. Feel free to use the tool and if you need any help using it just contact me here or off list. Eliezer Eliezer Croitoru <http://ngtech.co.il/lmgtfy/> Linux System Administrator Mo

Re: [squid-users] Skype, SSL bump and go.trouter.io

2016-07-07 Thread Eliezer Croitoru
cannot guarantee that it will open other doors which you might not want to. If you wish to try my concept I can try to give it some work but my condition is to try it in binary form only for the testing period. Let me know how it sounds, Eliezer Eliezer Croitoru Linux System Administrator

Re: [squid-users] host_verify_strict and wildcard SNI

2016-07-07 Thread Eliezer Croitoru
; was used with wildcard in it. Eliezer ---- Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: Alex Rousskov [mailto:rouss...@measurement-factory.com] Sent: Thursday, July 7, 2016 7:24 PM To: Eliezer Croitoru; s

Re: [squid-users] [squid-announce] Squid 3.5.20 is available

2016-07-07 Thread Eliezer Croitoru
ough that there is someone that can be asked directly or using a proxy and this world already feels much better then it was couple seconds ago. All The Bests, Eliezer Croitoru Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il ___

Re: [squid-users] Range header is a hit ratio killer

2016-08-07 Thread Eliezer Croitoru
the files content? If you have a specific targeted site it's one thing but trying to catch them all is kind of like tying your feet with a rope to a door and then shove\slam the door to the other direction. Imagine yourself how far and fast you will fly? Thanks, Eliezer <

<    1   2   3   4   5   6   7   8   9   10   >