Re: [squid-users] leaking memory in squid 3.4.8 and 3.4.7.

2014-10-03 Thread Rafael Akchurin
Hello Victor, If you see 'received type 1 NTLM token' message it means your IE was not able to use the Kerberos auth and have chosen NTLM instead. Please ensure you are browsing from *domain joined* machine and using NTLM/Kerberos authentication wrapper as described in

Re: [squid-users] leaking memory in squid 3.4.8 and 3.4.7.

2014-10-03 Thread Rafael Akchurin
I believe I do (but you made me doubt:) Can you please check if your browser is set to use FQDN of proxy not proxy's IP address. Raf From: Victor Sudakov suda...@sibptus.tomsk.ru Sent: Friday, October 3, 2014 4:46 PM To: Rafael Akchurin Cc: Amos Jeffries

Re: [squid-users] ssl-bump doesn't decrypt https traffic - please help

2014-10-16 Thread Rafael Akchurin
filteiring for all sites settings. By default though it is set to 'off' to comply with legal regulations in some countries. It would also be nice if you could post the contents of it either here or in private e-mail to me not to pollute the overall discussion. Best regards, Rafael Akchurin

Re: [squid-users] Filtering keywords on google search

2014-10-27 Thread Rafael Akchurin
safe search on Google and YouTube. Best regards, Rafael Akchurin -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Job Sent: Saturday, October 25, 2014 1:50 PM To: squid-us...@squid-cache.org Subject: [squid-users] Filtering keywords

Re: [squid-users] TCP_DENIED/403

2014-11-05 Thread Rafael Akchurin
Hello Navari, Just my two cents - http://docs.diladele.com/faq/squid.html#why-i-see-cannot-connect-to-site-using-https-browser-message-instead-of-usual-site-is-blocked Raf -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of

Re: [squid-users] Icap Squid Https/Http

2014-11-13 Thread Rafael Akchurin
Hello Garth, We are happily doing ICAP HTTPS filtering, see sample instructions at http://docs.diladele.com/tutorials/transparently_filtering_https_centos/index.html. It is even more simple if you do not need intercept style proxying. Best regards, Rafael Akchurin Diladele B.V

Re: [squid-users] Icap Squid Https/Http

2014-11-13 Thread Rafael Akchurin
?I do not pay a cent, I do it myself :) From: Sergey Tsabolov ( aka linuxman ) serg...@greeklug.gr Sent: Thursday, November 13, 2014 2:50 PM To: Rafael Akchurin; Garth Lancaster; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Icap Squid Https/Http

Re: [squid-users] Best way to deny access to URLs in Squid 3.3.x?

2014-12-01 Thread Rafael Akchurin
. Fighting with latest Squid build with Cygwin and/or MinGW takes all the time and I am loosing the battle :( Best regards, Rafael From: Mirza Dedic mirza.de...@outlook.com Sent: Tuesday, October 14, 2014 8:17 PM To: Rafael Akchurin Subject: RE: [squid-users

Re: [squid-users] Squid 3 SSL bump: Google drive application could not connect

2014-12-30 Thread Rafael Akchurin
SSL Pinning? (I know Dropbox does this) my two cents only :) Raf From: squid-users squid-users-boun...@lists.squid-cache.org on behalf of Yuri Voinov yvoi...@gmail.com Sent: Tuesday, December 30, 2014 2:12 PM To: squid-users@lists.squid-cache.org

Re: [squid-users] Squid 3 SSL bump: Google drive application could not connect

2014-12-30 Thread Rafael Akchurin
/ Google Drive / iTunes (bypassing SSL Bump because of SSL Pinning). Best regards, Raf From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Rafael Akchurin Sent: Tuesday, December 30, 2014 4:23 PM To: Yuri Voinov; squid-users@lists.squid-cache.org Subject: Re: [squid

Re: [squid-users] Squid 3 SSL bump: Google drive application could not connect

2014-12-30 Thread Rafael Akchurin
Perfect thanks a lot!!! Raf :) From: Yuri Voinov [mailto:yvoi...@gmail.com] Sent: Tuesday, December 30, 2014 9:23 PM To: Rafael Akchurin; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Squid 3 SSL bump: Google drive application could not connect -BEGIN PGP SIGNED MESSAGE

Re: [squid-users] Squid Authentication

2015-02-02 Thread Rafael Akchurin
Hello Amos, We will soon be able to have latest 3.5 built for Cygwin x64 (hopefully). Rafael From: squid-users squid-users-boun...@lists.squid-cache.org on behalf of Amos Jeffries squ...@treenet.co.nz Sent: Monday, February 2, 2015 10:54 AM To:

Re: [squid-users] Latest squid for Windows

2015-02-18 Thread Rafael Akchurin
Hello Raju, And if you would like to get involved please also visit http://squid.diladele.com to get to the GitHub repo. @Yuri - I remember about HTTPS filtering in squid windows settings - give me two more days please :) Raf From: squid-users

Re: [squid-users] Why 3.5.0.4 generates mimicked certs with server IP only when bumping?

2015-01-26 Thread Rafael Akchurin
Hello Daniel, Yuri May be you could dump your whole squid.conf here (please remove any sensitive details). I still cannot understand once Squid has the target server hostname from SNI - where is the acl/rule in squid.conf that can be used with this info present? Best regards, Rafael

Re: [squid-users] how to obtain info about actual active downloads?

2015-01-09 Thread Rafael Akchurin
for each active proxy client the number of bytes retrieved during last 1, 5, 30 minutes/seconds or so? Sorry if I completely misunderstood your notice. Raf. From: Chris Bennett ch...@ceegeebee.com Sent: Friday, January 9, 2015 5:00 AM To: Rafael Akchurin

Re: [squid-users] how to obtain info about actual active downloads?

2015-01-09 Thread Rafael Akchurin
From: Chris Bennett ch...@ceegeebee.com Sent: Friday, January 9, 2015 10:52 AM To: Rafael Akchurin Cc: squid-users@lists.squid-cache.org Subject: Re: [squid-users] how to obtain info about actual active downloads? Hi Rafael, as if I am not mistaken the data get's written

Re: [squid-users] Squid Windows Installation

2015-01-09 Thread Rafael Akchurin
Hello Rutvik, Please see http://squid.diladele.com/. This is not the *latest* squid (and btw *not an official one*) but we are doing what we can. Hopefully 3.5 will soon run as MSI on Windows for the benefits of all community. Best regards, Raf From: squid-users

Re: [squid-users] Squid Windows Installation

2015-01-09 Thread Rafael Akchurin
the HTTPS contents as it *is* bumped. We are working on 3.5 but far from the end yet :) Best regards, Raf From: Yuri Voinov [mailto:yvoi...@gmail.com] Sent: Friday, January 9, 2015 10:01 PM To: squid-users@lists.squid-cache.org; Rafael Akchurin Subject: Re: [squid-users] Squid Windows Installation

Re: [squid-users] i want to block images with size more than 40 KB

2015-03-20 Thread Rafael Akchurin
Hello Snakeeyes, Please also take into account the fact that Google image search results are inlined (at least thumbnails). Best regards, Rafael -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of snakeeyes Sent: Saturday, March 21,

Re: [squid-users] Best solution for content filtering using squid?

2015-05-07 Thread Rafael Akchurin
Hello Bob, If you do not mind taking a look at third party web filtering products integrating with Squid using for example ICAP them I would humbly recommend taking a look at qlproxy (quintolabs.com). It is a commercial product though not sure if this fits your expectations. Best regards,

[squid-users] Squid 3.5.4 for Microsoft Windows 64-bit is available

2015-05-15 Thread Rafael Akchurin
Greetings everyone, The CygWin based build of Squid proxy for Microsoft Windows version 3.5.4 is now available (amd64 only!). * Original release notes are at

Re: [squid-users] block inappropriate images of google

2015-05-18 Thread Rafael Akchurin
Hello Andres, N.B. Please take my answer with a huge grain of salt. The google images search returns image results (thumbnails) as inline base 64 encoded images in the CSS. Selectively blocking them with any URL redirector will not work. It is possible to completely block google images but I

[squid-users] Squid 3.5.5 for Microsoft Windows 64-bit is available

2015-06-05 Thread Rafael Akchurin
to work pretty good. Also fixed the installation glitch on Windows 2012 R2. Best regards, Rafael Akchurin Diladele B.V. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] High-availability and load-balancing between N squid servers

2015-06-08 Thread Rafael Akchurin
be able to check availability of my N servers + not real balancing, more like distribution). Any help/thoughts are appreciated. Thank you! Best regards, Rafael Akchurin Diladele B.V. ___ squid-users mailing list squid-users@lists.squid-cache.org http

Re: [squid-users] High-availability and load-balancing between N squid servers

2015-06-09 Thread Rafael Akchurin
Hi Amos, snip There seems to be a bit of a myth going around about how HAProxy does load balancing. HAProxy is an HTTP layer proxy. Just like Squid. They both do the same things to received TCP connections. But HAProxy supports less HTTP features, so its somewhat simpler processing is also

Re: [squid-users] when using a search box on een website my hole internet explorer freezes incuding earlier opend tabs

2015-06-03 Thread Rafael Akchurin
Hi all, I am seeing the same in the IE and also in FF - but FF does not freeze everything - just this window. It may mean something is wrong with the site itself - of course IE is incorrect but nevertheless... Raf -Original Message- From: squid-users

Re: [squid-users] acl for redirect

2015-07-02 Thread Rafael Akchurin
/domains/list to ICAP REQMOD and RESPMOD services. All other connections are not forwarded to ICAP. Raf From: Mike mcsn...@afo.net Sent: Wednesday, July 1, 2015 5:11 PM To: Rafael Akchurin; squid-users@lists.squid-cache.org Subject: Re: [squid-users] acl

Re: [squid-users] Squid 3.5.6 for Microsoft Windows 64-bit is available

2015-07-07 Thread Rafael Akchurin
Then it is still open ☹ From: Yuri Voinov [mailto:yvoi...@gmail.com] Sent: Tuesday, July 7, 2015 5:28 PM To: Rafael Akchurin Cc: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Squid 3.5.6 for Microsoft Windows 64-bit is available -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I

[squid-users] Squid 3.5.6 for Microsoft Windows 64-bit is available

2015-07-07 Thread Rafael Akchurin
in compilation flags. Best regards, Rafael Akchurin Diladele B.V. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] Squid 3.5.7 for Microsoft Windows 64-bit is available

2015-08-18 Thread Rafael Akchurin
dependencies at GitHub - https://github.com/diladele/squid3-windows. Please report all issues/bugs/feature requests at GitHub project. Issues about the *MSI installer only* can also be reported to supp...@diladele.com. NB: sorry for the late release - summer time :) Best regards, Rafael

Re: [squid-users] peek and splice content inspection question

2015-08-18 Thread Rafael Akchurin
Hello Stanford and the list, Sorry to jump on a late thread - it is also possible to use ICAP/eCAP server to filter the actual contents of the stream. C-ICAP comes to mind first, then eCap samples from http://www.e-cap.org/Downloads Best regards, Rafael

Re: [squid-users] acl for redirect

2015-06-30 Thread Rafael Akchurin
Hello Mike, May be it is time to take a look at ICAP/eCAP protocol implementations which target specifically this problem - filtering within the *contents* of the stream on Squid? Best regards, Rafael -Original Message- From: squid-users

Re: [squid-users] How can I change the Squid logo on an access denied page.

2015-10-21 Thread Rafael Akchurin
It is also possible to use the in place image like we do for our “403 blocked page” – see http://docs.diladele.com/faq/filtering/logo.html Best regards, Rafael Akchurin Diladele B.V. From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Yuri Voinov Sent: Wednesday

Re: [squid-users] 32-bit Windows Installer

2015-11-13 Thread Rafael Akchurin
Hello Patrik, We only build 64-bit - see http://squid.diladele.com I do not know if anyone managed to build for 32-bit. May be use http://squid.acmeconsulting.it/Squid27.html ? Best regards, Rafael Akchurin Diladele B.V. -- Please take a look at Web Safety - our ICAP based web filter server

Re: [squid-users] Fwd: NTLM LDAP authentication problem

2015-11-16 Thread Rafael Akchurin
Hello Matej, Eugene, Hope our humble tutorial for Squid <-> Active Directory integration with Kerberos SSO, Basic(LDAP) auth is also useful - http://docs.diladele.com/administrator_guide_4_3/active_directory/index.html No NTLM though!!! Best regards, Rafael Akchurin Diladele B.V. --

Re: [squid-users] Active Directory Authentication failing at the browser

2015-11-16 Thread Rafael Akchurin
regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Amos Jeffries Sent: Monday, November 16, 2015 9:18 PM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Active Directory Authentication

Re: [squid-users] ICAP and HTTPS

2015-10-06 Thread Rafael Akchurin
approach - although the work has not started yet. Hope to be able to have something by the end of this year! P.S. The http://docs.diladele.com/faq/squid/cannot_connect_to_site_using_https.html describes why the blocked message is not shown in simple words. Best regards, Rafael Akchurin Diladele B.V

Re: [squid-users] Squid 3.5.6 for Microsoft Windows 64-bit is available

2015-07-07 Thread Rafael Akchurin
for Microsoft Windows 64-bit is available -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi Raf, does you team close issue with cache_dir already? 07.07.15 14:39, Rafael Akchurin пишет: Greetings everyone, The CygWin based build of Squid proxy for Microsoft Windows

Re: [squid-users] strange behavior with systemd

2015-11-13 Thread Rafael Akchurin
Check SELinux permissions first. Best regards, Rafael > Op 13 nov. 2015 om 14:54 heeft Jakob Curdes het > volgende geschreven: > > Hello all, > > I have a squid running as reverse proxy on a CentOS 7 box which uses systemd. > When installing the box everything was

Re: [squid-users] Logfile analysis

2015-08-26 Thread Rafael Akchurin
regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Paul LINDEN Sent: Wednesday, August 26, 2015 3:00 PM To: squid-users@lists.squid-cache.org Subject: [squid-users] Logfile analysis Hello, I'm working

Re: [squid-users] Building squid | Best Practices?

2015-08-30 Thread Rafael Akchurin
regards, Rafael Akchurin Diladele B.V. From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Howard Waterfall Sent: Sunday, August 30, 2015 7:42 PM To: Amos Jeffries squ...@treenet.co.nz Cc: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Building squid

Re: [squid-users] Dropbox and GoogleDrive apps won't connect with SSLBump enabled

2015-08-31 Thread Rafael Akchurin
The SSL pinning means dropbox application does know the fingerprint of the certificate of the connection out-of-band and will simply refuse to work with another (even trusted one). It is not possible to change this behaviour without recompiling unless developers of dropbox has some "managed"

Re: [squid-users] Default ssl-bump that works with chrome/opera

2015-09-05 Thread Rafael Akchurin
n this too. Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Xen Sent: Saturday, September 5, 2015 1:58 PM To: squid-users@lists.squid-cache.org Subject: [squid-users] Default ssl-bump

[squid-users] Squid 3.5.10 for Microsoft Windows 64-bit is available

2015-10-03 Thread Rafael Akchurin
required dependencies at GitHub - https://github.com/diladele/squid3-windows. Please report all issues/bugs/feature requests at GitHub project. Issues about the *MSI installer only* can also be reported to supp...@diladele.com<mailto:supp...@diladele.com>. Best regards, Rafael Ak

[squid-users] Squid 3.5.9 for Microsoft Windows 64-bit is available (not 3.5.10 yet!)

2015-10-02 Thread Rafael Akchurin
'll do in a couple of days! Best regards, Rafael Akchurin Diladele B.V. -- Please take a look at Web Safety - our ICAP based web filter server for Squid proxy. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cac

Re: [squid-users] Windows Uninstall to Update

2015-12-02 Thread Rafael Akchurin
this! Best regards, Rafael Akchurin Diladele B.V. -- Please take a look at Web Safety - our ICAP based web filter server for Squid proxy http://www.diladele.com http://www.quintolabs.com From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Patrick Flaherty Sent

[squid-users] [squid related software] Web Safety ICAP Filter 4.3 for Squid is available

2015-12-10 Thread Rafael Akchurin
Greetings everyone, Version 4.3.0.B716 of Web Safety ICAP Filter for Squid is now available. We have finally added support for working with Squid on FreeBSD 10 and pfSense 2.2. In this version we tried to concentrate on better reporting, SSL bump root certificate management from Web UI and

Re: [squid-users] help change cache dir

2015-12-10 Thread Rafael Akchurin
Hello Juancho, Also check the SeLinux permissions. Best regards, Rafael Akchurin Diladele B.V. -- Please take a look at Web Safety - our ICAP based web filter server for Squid proxy. From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Yuri Voinov Sent

Re: [squid-users] blocking certain file types by content

2015-12-13 Thread Rafael Akchurin
any other ICAP server will do the same job too. One possible is "greasy spoon icap" server. Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Markus Sent: Sunday, December 13, 20

[squid-users] Squid 3.5.12 for Microsoft Windows 64-bit is available

2015-12-21 Thread Rafael Akchurin
w Year!!! Best regards, Rafael Akchurin Diladele B.V. http://www.quintolabs.com http://www.diladele.com -- Please take a look at Web Safety - our ICAP based web filter server for Squid proxy. ___ squid-users mailing list squid-users@lists

Re: [squid-users] Squid as a proxy (Forwarding loop detected)

2015-12-28 Thread Rafael Akchurin
Hello Richard, The NATting needs to happen on the gateway – here is more info https://squidproxy.wordpress.com/2014/12/19/squid-3-2-mythbusting-nat/ Best regards, Rafael From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Richard Sent: Monday, December 28, 2015

Re: [squid-users] Squid proxy whitelisting with HTTPS URL filtering

2015-12-28 Thread Rafael Akchurin
Hello Joru, May I humbly propose our ICAP server – see preconfigured VM at http://quintolabs.com/virtual.php. Just get it, login into Web UI, switch on the HTTPS filtering as indicated on http://docs.diladele.com/administrator_guide_4_3/https_filtering/enable_https_filtering.html and adjust

Re: [squid-users] https antivirus proxy necessary?

2016-06-23 Thread Rafael Akchurin
this is as easy to do in Debian Jessy. Hope this will help to build the Jessy package easier. Best regards, Rafael Akchurin Diladele B.V. -- Please take a look at Web Safety - our ICAP based web filter server for Squid proxy at http://www.diladele.com

Re: [squid-users] flickr.com redirect error

2016-06-24 Thread Rafael Akchurin
, 1.1 qlproxy (squid/3.3.8)" Best regards, Rafael Akchurin Diladele B.V. From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Ozgur Batur Sent: Friday, June 24, 2016 4:23 PM To: Yuri <yvoi...@gmail.com> Cc: squid-users@lists.squid-cache.org Subject:

Re: [squid-users] flickr.com redirect error

2016-06-25 Thread Rafael Akchurin
Hello Amos, The Via from mine is: Via:"http/1.1 fts110.flickr.bf1.yahoo.com (ApacheTrafficServer [cMs f ]), http/1.1 r02.ycpi.ams.yahoo.net (ApacheTrafficServer [cMsSf ]), 1.1 qlproxy (squid/3.3.8)" Might it be the error when constructing via contents in squid? As it starts with 1.1 while

Re: [squid-users] Squid Crashing

2016-02-09 Thread Rafael Akchurin
Hello Panda Admin, If you do not mind looking at ICAP filtering instead of only URL filtering please take a look at our qlproxy (ICAP web filter for Squid). The shalla list formatted folders with categories can be used as is as third party blacklist provider and I presume takes less time to

Re: [squid-users] Youtube "challenges"

2016-02-22 Thread Rafael Akchurin
Hello Darren, Sorry not to directly answer your question.. but would you be interested in the following functionality regarding YouTube: - Allow only specified YouTube videos to be watched on YouTube. Best regards, Rafael From: squid-users

Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-22 Thread Rafael Akchurin
Hello Startrekfan, The patch from SHA1 to SHA256 is quite simple. See http://docs.diladele.com/administrator_guide_4_4/install/debian8/squid.html at the bottom of the page. Best regards, Rafael From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of startrekfan

[squid-users] Squid 3.5.14 for Microsoft Windows 64-bit is available

2016-02-19 Thread Rafael Akchurin
required dependencies at GitHub - https://github.com/diladele/squid3-windows. Please report all issues/bugs/feature requests at GitHub project. Issues about the *MSI installer only* can also be reported to supp...@diladele.com<mailto:supp...@diladele.com>. Best regards, Rafael Ak

Re: [squid-users] Squid 3.5.15-1 is available for Ubuntu 14.04 LTS (online repo ubuntu.diladele.com)

2016-03-09 Thread Rafael Akchurin
ersion of squid to other versions of > ubuntu? > > Eliezer > >> On 10/03/2016 00:00, Rafael Akchurin wrote: >> Hello all, >> >> We have rebuilt the Debian (testing) package for Squid 3.5.15-1 for >> Ubuntu 14.04 LTS with libecap3. >> >> If you

Re: [squid-users] Squid Windows Installer

2016-03-13 Thread Rafael Akchurin
Hi Patrick, Yes, this is the default behavior of Wix/InstallShield that the disk with the most space is picked up for installation. You can override this behavior by directly specifying ROOTDRIVE variable during installation using msiexec. Best regards, Rafael Akchurin Diladele B.V. -- Please

Re: [squid-users] Need advice on some crazy access control requirements

2016-03-15 Thread Rafael Akchurin
Hello Victor, Please send me e-mail at supp...@diladele.com . We should not pollute the list with this off topics. Best regards, Rafael -Original Message- From: Victor Sudakov [mailto:suda...@sibptus.tomsk.ru] Sent: Tuesday, March 15, 2016 8:45 AM To: Rafael Akchurin <rafael.ak

Re: [squid-users] Need advice on some crazy access control requirements

2016-03-15 Thread Rafael Akchurin
Hello Victor, We build ICAP on native FreeBSD 10 and then provide instructions/tutorial how to install/adapt it for pfSense (which is also FreeBSD 10 inside). It will not work on FreeBSD 9 though :( Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: Victor Sudakov

Re: [squid-users] Need advice on some crazy access control requirements

2016-03-14 Thread Rafael Akchurin
Hello Victor, In order to scan the contents of the files being downloaded you might need to have eCAP or ICAP module/server attached to your Squid. Best regards, Rafael Akchurin Diladele B.V. -- Please take a look at Web Safety - our ICAP based web filter server for Squid proxy

Re: [squid-users] Squid Windows Installer

2016-03-15 Thread Rafael Akchurin
Hello Patrick, The ROOTDRIVE is MSI property, not environment variable. See for example at https://msdn.microsoft.com/en-us/library/windows/desktop/aa367988%28v=vs.85%29.aspx Best regards, Rafael Akchurin Diladele B.V. -- Please take a look at Web Safety - our ICAP based web filter server

[squid-users] Squid 3.5.15-1 is available for Ubuntu 14.04 LTS (online repo ubuntu.diladele.com)

2016-03-09 Thread Rafael Akchurin
wing tutorial shows how we rebuilt Squid 3.5.15 on Ubuntu 14.04 LTS http://docs.diladele.com/tutorials/build_squid_ubuntu14/index.html. All questions/comments and suggestions are welcome at supp...@diladele.com<mailto:supp...@diladele.com> or here in the mailing list. Best regards, Rafael Ak

Re: [squid-users] We have a big problems with Squid 3.3.8, it's a bug ?

2016-03-29 Thread Rafael Akchurin
Hello Olivier, See if you have credentials cached in the credentials manager in windows. Best regards, Rafael From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Olivier CALVANO Sent: Tuesday, March 29, 2016 6:23 PM To: squid-users@lists.squid-cache.org Subject:

Re: [squid-users] External ACL Lookup

2016-04-05 Thread Rafael Akchurin
Hello Tommy, Just my two cents. Try using usePrincipalName, and not sAMAccountName in LDAP filter. The squid logs indicate the user is authenticated as tcradd...@example.com<mailto:tcradd...@example.com> which is *not* in sAMAccountName for sure. Best regards, Rafael Akchurin Dilade

Re: [squid-users] External ACL Lookup

2016-04-05 Thread Rafael Akchurin
NAME}})(sAMAccountName={{USER_NAME_STRIPPED}}))(memberOf:1.2.840.113556.1.4.1941:=CN=Internet Relaxed,CN=Users,DC=diladele,DC=lan)) Sorry nothing to offer more. Best regards, Rafael From: Craddock, Tommy [mailto:tommy.cradd...@bicgraphic.com] Sent: Tuesday, April 5, 2016 11:53 PM To: Rafael Akch

Re: [squid-users] Squid 3.5.x install problem

2016-03-03 Thread Rafael Akchurin
to be converted to Ansible playbook? Best regards, Rafael Akchurin Diladele B.V. -- Please take a look at Web Safety - our ICAP based web filter server for Squid proxy. -Original Message- From: Rafael Akchurin Sent: Thursday, March 3, 2016 2:55 PM To: squid-users@lists.squid-cache.org Subject

Re: [squid-users] Squid 3.5.x install problem

2016-03-03 Thread Rafael Akchurin
And if you donot mind waiting a week or so - we plan to have ready to sslbump + ecap squid3 for ubuntu 14.04 at ubuntu.diladele.com repo. Best regards, Rafael > Op 3 mrt. 2016 om 13:06 heeft Amos Jeffries het > volgende geschreven: > >> On 3/03/2016 10:45 p.m.,

Re: [squid-users] squid 4

2016-03-04 Thread Rafael Akchurin
Hell Bma, Yuri, Alex and all, We are planning to update the CentOS 7 tutorial at http://docs.diladele.com/tutorials/transparently_filtering_https_centos/index.html when Squid 4 is published by Elizier. Best regards, Rafael Akchurin Diladele B.V. -- Please take a look at Web Safety - our ICAP

Re: [squid-users] We have a big problems with Squid 3.3.8, it's a bug ?

2016-03-29 Thread Rafael Akchurin
Hello Olivier, I really do not know. This also is of great interest to me. Hopefully knowledgeable people on the list will be able to explain. Best regards, Rafael From: Olivier CALVANO [mailto:o.calv...@gmail.com] Sent: Tuesday, March 29, 2016 7:32 PM To: Rafael Akchurin <rafael.ak

[squid-users] Squid 3.5.16-1 is available for Ubuntu 14.04 LTS (online repo ubuntu.diladele.com)

2016-04-04 Thread Rafael Akchurin
ll apt-get install libecap3 apt-get install squid-common apt-get install squid apt-get install squidclient All questions/comments and suggestions are welcome at supp...@diladele.com or here in the mailing list. Best regards, Rafael Akchurin Diladele B.V. http://www.quintola

[squid-users] Squid 3.5.16 for Microsoft Windows 64-bit is available

2016-04-04 Thread Rafael Akchurin
orials/build_squid_ubuntu14/index.html. Best regards, Rafael Akchurin Diladele B.V. http://www.quintolabs.com http://www.diladele.com -- Please take a look at Web Safety - our ICAP based web filter server for Squid proxy. ___ squid-users mailin

Re: [squid-users] Need help with Squid on Windows

2016-04-23 Thread Rafael Akchurin
is to install Cygwin and build squid yourself as described here: http://docs.diladele.com/tutorials/build_squid_windows/index.html, this should start helpers from Cygwin terminal instead of cmd. Best regards, Rafael Akchurin Diladele B.V. http://www.quintolabs.com http://www.diladele.com -- Please

Re: [squid-users] Need help with Squid on Windows

2016-04-23 Thread Rafael Akchurin
tried to configure it several times. Without success. With the same symptoms. WBR, Yuri 23.04.16 18:26, Rafael Akchurin пишет: > Hello Jason, Amos, all, > > Possibly the issue can be related to Squid being compiled with Cygwin https://cygwin.com/ml/cygwin/2012-03/msg00302.html, I'm

[squid-users] Squid 3.5.17 for Microsoft Windows 64-bit is available

2016-04-23 Thread Rafael Akchurin
ladele/docker-websafety (non clustered version when everything runs in one container). Best regards, Rafael Akchurin Diladele B.V. http://www.quintolabs.com http://www.diladele.com -- Please take a look at Web Safety - our ICAP based web filter server for Squid

[squid-users] Squid 3.5.17-1 is available for Ubuntu 14.04 LTS (online repo ubuntu.diladele.com)

2016-04-23 Thread Rafael Akchurin
nstall squid-common apt-get install squid apt-get install squidclient All questions/comments and suggestions are welcome at supp...@diladele.com<mailto:supp...@diladele.com> or here in the mailing list. Best regards, Rafael Akchurin Diladele B.V. http://www.quintolabs.com

Re: [squid-users] Using dont_verify_peer

2016-04-28 Thread Rafael Akchurin
with incomplete certificate chain. IMHO :) I am also interested how to bypass it in intercepted scenario. Best regards, Rafael Akchurin Diladele B.V. From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Markey, Bruce Sent: Thursday, April 28, 2016 10:33 PM To: squid

[squid-users] Squid 3.5.19-1 is available for Ubuntu 14.04 LTS (online repo ubuntu.diladele.com)

2016-05-11 Thread Rafael Akchurin
quid-common apt-get install squid apt-get install squidclient All questions/comments and suggestions are welcome at supp...@diladele.com<mailto:supp...@diladele.com> or here in the mailing list. Best regards, Rafael Akchurin Diladele B.V. http://www.quintolabs.com http:

Re: [squid-users] Are there any distros with SSL Bump compiled by default?

2016-05-14 Thread Rafael Akchurin
repository at ubuntu.diladele.com. The recompilation is quite easy btw, the following github project shows how we do it https://github.com/diladele/squid-ubuntu. This tutorial may also be of interest http://docs.diladele.com/tutorials/build_squid_ubuntu14/index.html. Best regards, Rafael

Re: [squid-users] SSL certifcate on android device not working

2016-05-06 Thread Rafael Akchurin
Not possible, see SSL certificate pinning in wikipedia, or at http://docs.diladele.com/faq/squid/dropbox.html Best regards, Rafael Op 6 mei 2016 om 14:27 heeft Reet Vyas > het volgende geschreven: Please let me know if this possible or not?

[squid-users] Squid 3.5.19 for Microsoft Windows 64-bit is available

2016-05-10 Thread Rafael Akchurin
tainer). Best regards, Rafael Akchurin Diladele B.V. http://www.quintolabs.com http://www.diladele.com -- Please take a look at Web Safety - our ICAP based web filter server for Squid proxy. ___ squid-users mailing list squid-users@lists

[squid-users] Squid 3.5.20 for Microsoft Windows 64-bit is available

2016-07-05 Thread Rafael Akchurin
required dependencies at GitHub - https://github.com/diladele/squid3-windows. Please report all issues/bugs/feature requests at GitHub project. Issues about the *MSI installer only* can also be reported to supp...@diladele.com<mailto:supp...@diladele.com>. Best regards, Rafael Ak

[squid-users] Squid 3.5.24 for Microsoft Windows 64-bit is available

2017-02-04 Thread Rafael Akchurin
dependencies at GitHub - https://github.com/diladele/squid-windows . Please report all issues/bugs/feature requests at GitHub project. Issues about the *MSI installer only* can also be reported to supp...@diladele.com<mailto:supp...@diladele.com> . Best regards, Rafael Akchurin Diladele B.V.

Re: [squid-users] Antivirus for squid

2017-01-25 Thread Rafael Akchurin
basically but sometimes ICAP chain fails on some sites - although both ICAP services working not in a chain have no such errors... still looking for a solution. Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid

Re: [squid-users] Transparent Squid issue with Appstore in MacOS Sierra

2017-02-09 Thread Rafael Akchurin
Hello Hardik and all, Try adding .mzstatic.com to your exclusion from SSL bump as indicated on https://docs.diladele.com/faq/squid/sslbump_exlusions/apple_app_store.html Please note you need to adapt it to regex as we use it in ssl::server_name directive. Best regards, Rafael Akchurin

Re: [squid-users] HTTPS chrome - SHA1 this page is insecure

2016-09-01 Thread Rafael Akchurin
ml https://github.com/ra-at-diladele-com/qlproxy_external/tree/master/src/va/scripts.ubuntu14 But please take it with a huge grain of salt if you can. Best regards, Rafael Akchurin Diladele B.V. http://www.quintolabs.com http://www.diladele.com -- Please take a look at Web Safety - our ICAP b

Re: [squid-users] Preserving Squid.conf when upgrading

2016-09-15 Thread Rafael Akchurin
Hello Patrick, Sorry I do not know. I guess MSI will just remove it. So back it up somewhere before uninstall/install. Best regards, Rafael Akchurin Diladele B.V. BTW - new Docker build makes the native Windows Squid obsolete :) From: squid-users [mailto:squid-users-boun...@lists.squid

[squid-users] Squid 3.5.21 for Microsoft Windows 64-bit is available

2016-09-30 Thread Rafael Akchurin
only* can also be reported to supp...@diladele.com<mailto:supp...@diladele.com>. Best regards, Rafael Akchurin Diladele B.V. https://www.diladele.com -- Please take a look at Web Safety - our ICAP based web filter server for Squid

Re: [squid-users] What to do with Squid after upgrading domain controller?

2016-09-30 Thread Rafael Akchurin
Hello Alex, I would humbly propose our manual - https://docs.diladele.com/administrator_guide_4_6/active_directory/index.html But please take a look at Squid wiki too - http://wiki.squid-cache.org/ConfigExamples/Authenticate/WindowsActiveDirectory Best regards, Rafael Akchurin Diladele B.V

Re: [squid-users] SQUID 3.4.8 on RPi 3

2016-09-17 Thread Rafael Akchurin
Hello VB, Hopefully this will be helpful to recompile Squid on Raspberry PI - http://docs.diladele.com/administrator_guide_4_6/install/rpi/squid.html Scripts to do that are https://github.com/ra-at-diladele-com/qlproxy_external/tree/master/src/va/scripts.debian8 Best regards, Rafael Akchurin

Re: [squid-users] SQUID 3.4.8 on RPi 3

2016-09-17 Thread Rafael Akchurin
latest squid yourself as Yuri suggested. Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of VB Sent: Saturday, September 17, 2016 3:05 PM To: squid-users@lists.squid-cache.org Subject: Re: [squid

Re: [squid-users] AD Ldap (automatically take the user that is logging on PC)

2016-08-17 Thread Rafael Akchurin
Hello Erdosain, Here is how to configure it reusing your sq...@example.lan user (no samba). http://docs.diladele.com/administrator_guide_4_6/active_directory/install_prerequisites_for_kerberos_authentication.html Best regards, Rafael From: squid-users

[squid-users] Squid 3.5.22 for Microsoft Windows 64-bit is available

2016-10-14 Thread Rafael Akchurin
all issues/bugs/feature requests at GitHub project. Issues about the *MSI installer only* can also be reported to supp...@diladele.com<mailto:supp...@diladele.com>. Best regards, Rafael Akchurin Diladele B.V. https://www.diladele.com -- Please take a look at Web Safety - our ICAP

[squid-users] Squid 3.5.22-1 is available for Ubuntu 16.04 LTS (online repo ubuntu16.diladele.com)

2016-11-01 Thread Rafael Akchurin
uggestions are welcome at supp...@diladele.com<mailto:supp...@diladele.com> or here in the mailing list. Best regards, Rafael Akchurin Diladele B.V. https://www.diladele.com/ -- Please take a look at Web Safety - our ICAP based web filter server for Squ

[squid-users] Cisco ASA with transparent Squid with HTTP/HTTPS filtering

2016-12-14 Thread Rafael Akchurin
to bypass connections from workstations to specific remote sites by FQDN on Cisco ASA? 4. Or maybe it is better to exclude them (3) from SSL bump on Squid using ssl::server_name by splicing? Thanks in advance for everyone who responds. Best regards, Rafael Akchurin Diladele B.V. -- Please t

Re: [squid-users] Problem building Squid4

2017-01-12 Thread Rafael Akchurin
Hello Matt, This is how we repackage Debian 8's 3.5.23 into Ubuntu 16. It is pretty easy - https://docs.diladele.com/howtos/build_squid_ubuntu16/index.html I hope you can adapt the build instructions for Squid 4. Best regards, Rafael Akchurin Diladele B.V. -Original Message- From

Re: [squid-users] Is it possible to modify cached object?

2017-01-08 Thread Rafael Akchurin
Hello Boruc, Please use https://en.wikipedia.org/wiki/Data_URI_scheme Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of boruc Sent: Sunday, January 8, 2017 6:18 PM To: squid-users

  1   2   3   >