[squid-users] Squid 3.5.23-1 is available for Ubuntu 16.04 LTS (online repo ubuntu16.diladele.com)

2016-12-21 Thread Rafael Akchurin
e.com> or here in the mailing list. Best regards, Rafael Akchurin Diladele B.V. https://www.diladele.com/ -- Please take a look at Web Safety - our ICAP based web filter server for Squid proxy at https://www.diladele.com/. ___ squid-users

[squid-users] Squid 3.5.23 for Microsoft Windows 64-bit is available

2016-12-20 Thread Rafael Akchurin
required dependencies at GitHub - https://github.com/diladele/squid-windows. Please report all issues/bugs/feature requests at GitHub project. Issues about the *MSI installer only* can also be reported to supp...@diladele.com<mailto:supp...@diladele.com>. Best regards, Rafael Akchurin Di

Re: [squid-users] blocking or allowing specific youtube videos

2017-03-21 Thread Rafael Akchurin
Hello Sohan, I guess this may be helpful in your project https://docs.diladele.com/faq/filtering/youtube_allow_only_specific_video.html This can easily be done within squid.conf (ICAP is not required). Best regards, Rafael Akchurin Diladele B.V. https://www.diladele.com -- Please take a look

[squid-users] Howto fix X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY Squid error

2017-04-07 Thread Rafael Akchurin
Hello everyone, Added new article for intermediate certificates and X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY error when bumping SSL. Hopefully will be helpful/interesting for someone https://docs.diladele.com/faq/squid/fix_unable_to_get_issuer_cert_locally.html Best regards, Rafael

Re: [squid-users] HTTPS woes

2017-04-14 Thread Rafael Akchurin
>>> Then my config in Squid is like this, the dhparams file I generated as per >>> instructions in the squid wiki: >> First of all: what's Squid's version? > And secondly; are you sufficiently capable with Debian to (cross-)build your > own Squid package that can run on Raspian? > The Debian

[squid-users] Squid 3.5.25 for Microsoft Windows 64-bit is available

2017-04-22 Thread Rafael Akchurin
dependencies at GitHub - https://github.com/diladele/squid-windows . Please report all issues/bugs/feature requests at GitHub project. Issues about the *MSI installer only* can also be reported to supp...@diladele.com<mailto:supp...@diladele.com> . Best regards, Rafael Akchurin Diladele B.V.

Re: [squid-users] microsoft edge and proxy auth not working

2017-03-09 Thread Rafael Akchurin
param ntlm keep_alive off" in the config though. It all makes me quite suspicious the error was/is in Edge or in my curly hands. Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Amos Jef

Re: [squid-users] microsoft edge and proxy auth not working

2017-03-09 Thread Rafael Akchurin
provisioned/thrown away scalable web filter / proxy instances (think docker). Best regards, Rafael Akchurin > Op 9 mrt. 2017 om 19:09 heeft Mike Surcouf <mi...@surcouf.co.uk> het volgende > geschreven: > > Ah OK sorry > I am curious why you have a reason to use NTLM over Kerberos? :

Re: [squid-users] microsoft edge and proxy auth not working

2017-03-09 Thread Rafael Akchurin
Hello Mike, I specifically was debugging our NTLM implementation with Edge :) Kerberos works just fine, you are correct. Best regards, Rafael Akchurin > Op 9 mrt. 2017 om 18:57 heeft Mike Surcouf <mi...@surcouf.co.uk> het volgende > geschreven: > > Hi Rafael > >

Re: [squid-users] microsoft edge and proxy auth not working

2017-03-10 Thread Rafael Akchurin
be used by farm of squid proxies without the need to join boxes to domain. Cons - that one user needs to be managed separately from all other users - i.e. you do not want to set the password expiration policy for it - otherwise your exported keytab will be invalid. My 2 cents. Rafael Akchurin

Re: [squid-users] Howto fix X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY Squid error

2017-04-07 Thread Rafael Akchurin
Hello Yuri, Yes this is much better solution! Best regards, Rafael Akchurin Op 7 apr. 2017 om 18:20 heeft Yuri Voinov <yvoi...@gmail.com<mailto:yvoi...@gmail.com>> het volgende geschreven: # TAG: sslproxy_foreign_intermediate_certs #Many origin servers fail to send their

Re: [squid-users] Squid as gateway

2017-07-11 Thread Rafael Akchurin
May be this will be of any help - https://docs.diladele.com/tutorials/transparent_proxy_ubuntu/index.html -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of erdosain9 Sent: Tuesday, July 11, 2017 5:41 PM To:

Re: [squid-users] Squid and active directory

2017-07-01 Thread Rafael Akchurin
And this as alternative https://docs.diladele.com/administrator_guide_5_1/active_directory/index.html Raf From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Yuri Sent: Saturday, July 1, 2017 11:28 PM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users]

Re: [squid-users] 3.5.25: (71) Protocol error (TLS code: SQUID_ERR_SSL_HANDSHAKE)

2017-04-28 Thread Rafael Akchurin
Hello David and all, According to https://www.ssllabs.com/ssltest/analyze.html?d=www.boutique.afnor.org=on you do not need to add any intermediate certificates to system storage - site seems to be sending the whole chain as it should... BUT the overall site SSL rating is so bad.. Raf

[squid-users] shall squid be stopped in order to run "squid -z"

2017-08-05 Thread Rafael Akchurin
t possible to pass the *new* directory path to "squid -z" and then make a change in the conf followed by "squid -k reconfigure" and erasing the old dir later (how later?). Thanks to all who replies. Best regards, Rafael Akchurin Diladele

Re: [squid-users] Squid custom error page

2017-05-17 Thread Rafael Akchurin
members may know better if it is possible to do that in Squid directly. Beware of those using your tunnels to pump non http traffic though. Blocking the connect as it is done now in Squid keeps you on safe side. Best regards, Rafael Akchurin Op 17 mei 2017 om 4:04 PM heeft Amos Jeffries <

[squid-users] Squid 3.5.26 for Microsoft Windows 64-bit is available

2017-06-26 Thread Rafael Akchurin
dependencies at GitHub - https://github.com/diladele/squid-windows . Report all issues/bugs/feature requests at GitHub project. Issues about the *MSI installer only* can also be reported to supp...@diladele.com<mailto:supp...@diladele.com> . Best regards, Rafael Akchurin Diladele B.V.

Re: [squid-users] squid sslbump and certificates

2017-05-29 Thread Rafael Akchurin
Hello Vieri, This article tries to explain why it happens. https://docs.diladele.com/faq/squid/fix_unable_to_get_issuer_cert_locally.html#ssl-certificate-test-tool-in-web-safety-5 To fix it - better use what Yuri recommended in

Re: [squid-users] ssl bump and chrome 58

2017-05-03 Thread Rafael Akchurin
Sorry disregard - should practice my google fu better - see http://bugs.squid-cache.org/show_bug.cgi?id=4711 -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Rafael Akchurin Sent: Wednesday, May 3, 2017 10:48 AM To: Flashdown <fla

Re: [squid-users] ssl bump and chrome 58

2017-05-03 Thread Rafael Akchurin
Hello all, The following steps give in Chrome 58 the "Your connection is not private" error with "NET::ERR_CERT_COMMON_NAME_INVALID" and "missing_subjectAltName" error: (peek-an-splice bumping squid 3.5.23_1 as in https://docs.diladele.com/howtos/build_squid_ubuntu16/index.html) 1. Open

Re: [squid-users] ssl bump and chrome 58

2017-05-03 Thread Rafael Akchurin
And on 3.5 too? -Original Message- From: Yuri [mailto:yvoi...@gmail.com] Sent: Wednesday, May 3, 2017 12:30 PM To: Rafael Akchurin <rafael.akchu...@diladele.com>; Flashdown <flashd...@data-core.org> Cc: squid-users@lists.squid-cache.org Subject: Re: [squid-users] ssl bump a

Re: [squid-users] [squid for windows] article on how to enable sslbump

2017-09-13 Thread Rafael Akchurin
Hello Yuri, We tried building it several times, but it was not clear why it failed.. so we keep postponing :( Best regards, Rafael Akchurin Op 13 sep. 2017 om 18:07 heeft Yuri <yvoi...@gmail.com<mailto:yvoi...@gmail.com>> het volgende geschreven: 13.09.2017 21:32, Rafael Ak

[squid-users] [squid for windows] article on how to enable sslbump

2017-09-13 Thread Rafael Akchurin
at supp...@diladele.com<mailto:supp...@diladele.com> -- Best regards, Rafael Akchurin Diladele B.V. https://www.diladele.com P.S. Build of Squid 3.5.27 for Microsoft Windows is still on the way :( ... ___ squid-users mailing list squid

[squid-users] Squid 3.5.27 for Microsoft Windows 64-bit is available

2017-09-19 Thread Rafael Akchurin
Best regards, Rafael Akchurin Diladele B.V. https://www.diladele.com Cloud Guard URL re-writer for Squid proxy We would also like to introduce our new research project - cloud based URL rewriter for Squid proxy. In short it is an URL rewriter that gets integrated with Squid. The rewriter

Re: [squid-users] SSL Bump Failures with Google and Wikipedia

2017-10-05 Thread Rafael Akchurin
Hello Eliezer, From desktop ff/chrome goto youtube. It will be br encoded. Best regards, Rafael Akchurin > Op 6 okt. 2017 om 02:43 heeft Eliezer Croitoru <elie...@ngtech.co.il> het > volgende geschreven: > > Hey Yuri and Rafael, > > I have tried to find a site which

[squid-users] Pseudo proxy authentication (mapping of IP address to user name) in intercept mode.

2017-10-17 Thread Rafael Akchurin
regards, Rafael Akchurin Diladele B.V. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Pseudo proxy authentication (mapping of IP address to user name) in intercept mode.

2017-10-17 Thread Rafael Akchurin
Hello Amos, Thanks for your responses. What I do not understand completely - if we have intercept style of deployment, when browsers know nothing about the proxy - how basic (or any other type of authenticator) will work? I always thought browsers will discard proxy-auth responses just

Re: [squid-users] TLS: 1st time w/intermediate cert: not working; ideas on what I'm doing wrong?

2017-09-07 Thread Rafael Akchurin
/foreign_intermediate_certs.pem So it must be working :) Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of L A Walsh Sent: Thursday, September 7, 2017 11:15 PM To: squid-us...@squid-cache.org

Re: [squid-users] SSL Bump Failures with Google and Wikipedia

2017-09-30 Thread Rafael Akchurin
Hello Jeff, Do not forget Google and YouTube are now using brotli encoding extensively, not only gzip. Best regards, Rafael Akchurin > Op 30 sep. 2017 om 23:49 heeft Jeffrey Merkey <jeffmer...@gmail.com> het > volgende geschreven: > >> On 9/30/17, Eliezer Croitoru

[squid-users] [icap] Web Safety 5.1 ICAP web filter plugin for Squid is Ready

2017-09-04 Thread Rafael Akchurin
m/diladele/websafety-issues/milestones). In the next version we are planning to add antivirus engine ClamAV (and possibly another commercial antivirus) as another ICAP service chain to Admin UI. Best regards, Rafael Akchurin Diladele B.V. https://www.diladele.com -- P.S. Squid 3.5.27 for Windows is

Re: [squid-users] Pseudo proxy authentication (mapping of IP address to user name) in intercept mode.

2017-10-17 Thread Rafael Akchurin
group and apply designated filtering policy in our ICAP server. Written above seems to work in the test lab. Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Amos Jeffries Sent: Tuesday, O

Re: [squid-users] net::err_cert_common_name_invalid just in squid page with dstdomain block

2017-12-05 Thread Rafael Akchurin
May it be https://docs.diladele.com/faq/squid/chrome_ssl_filter/dns_does_not_exist.html ? Best regards, Rafael Akchurin Op 5 dec. 2017 om 20:34 heeft erdosain9 <erdosa...@gmail.com<mailto:erdosa...@gmail.com>> het volgende geschreven: Hi, and thanks. But, i dont get it, how this

[squid-users] [icap] Web Safety RC 6.0 ICAP web filter plugin for Squid proxy is now Release Candidate

2017-12-12 Thread Rafael Akchurin
nclude Google Safe Browsing protection as URL rewriter. Join our community to get early access to next development builds (see https://www.diladele.com/community.html). Thanks to all of you for making this possible! Rafael Akchurin Diladele B.V. ___

[squid-users] [icap] Web Safety 5.2 ICAP web filter plugin for Squid is now Release Candidate

2017-10-31 Thread Rafael Akchurin
ect Active Directory Inspector ( see https://github.com/diladele/active-directory-inspector ). Builds of 5.3 for now is in beta stage and thus freely available to Early Adopters community ( https://www.diladele.com/community.html ). Thanks to all of you for making this possible! Best regards, Rafae

Re: [squid-users] persistent connections not being utilized with Chrome

2018-01-15 Thread Rafael Akchurin
- so might be a Chrome issue/architecture? Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Brian J. Murrell Sent: Monday, January 15, 2018 4:41 PM To: squid-users@lists.squid-cache.org Subject: Re: [s

[squid-users] Policy based routing and Squid transparent interception tutorial

2018-01-21 Thread Rafael Akchurin
please say so. See https://docs.diladele.com/tutorials/policy_based_routing_squid/index.html Best regards, Rafael Akchurin Diladele B.V. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Squid 3.x or 4.x acting as a transparent http proxy (NOT https)

2018-02-07 Thread Rafael Akchurin
No unfortunately nothing like this is in our lab for FreeBSD - but default Squid package in pfSense runs transparently without issues I have heard (or with other issues than you have). Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: setuid [mailto:set...@gmail.com

Re: [squid-users] Squid 3.x or 4.x acting as a transparent http proxy (NOT https)

2018-02-07 Thread Rafael Akchurin
and the second one for separate Squid that intercepts traffic re-routed from the router using Policy-Based-Routing. The tutorials are working, I test it with every release of our ICAP web filter. Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users

Re: [squid-users] Squid 3.x or 4.x acting as a transparent http proxy (NOT https)

2018-02-07 Thread Rafael Akchurin
Thats strange. How is your network configured? Your rules indicate you have 2 nics but you later say you have one.. Best regards, Rafael Akchurin > Op 7 feb. 2018 om 23:31 heeft setuid <set...@gmail.com> het volgende > geschreven: > >> On 02/07/2018 04:38 PM, Rafael Akch

Re: [squid-users] splunk 3.5.27-Sec Advisories

2018-07-27 Thread Rafael Akchurin
Hello Amos, Scott, Will try building now. Shall be possible by the end of next week I hope. Best regards, Rafael Akchurin > Op 28 jul. 2018 om 07:23 heeft Amos Jeffries het > volgende geschreven: > >> On 28/07/18 08:48, Kumpf, Scott wrote: >> Greetings, >>

Re: [squid-users] splunk 3.5.27-Sec Advisories

2018-08-03 Thread Rafael Akchurin
We are waiting on it. Sorry summer time :) Best regards, Rafael Akchurin > Op 3 aug. 2018 om 21:06 heeft Kumpf, Scott het volgende > geschreven: > > Greetings, > > Checking in to see how the new Squid for Windows build is coming along, is > there an update? Is ther

Re: [squid-users] Squid + Squidguard Youtube URL video filtering

2018-08-16 Thread Rafael Akchurin
specifying different allow/deny videos/categories/channels per different group of proxy users. So be sure to get version 6.3. Best regards, Rafael Akchurin Diladele B.V. https://www.diladele.com -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org

[squid-users] Squid 3.5.28 for Microsoft Windows 64-bit is available

2018-09-06 Thread Rafael Akchurin
t the *MSI installer only* can also be reported to supp...@diladele.com<mailto:supp...@diladele.com> . Best regards, Rafael Akchurin Diladele B.V. https://www.diladele.com ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists

[squid-users] [icap] Web Safety 6.4 web filter plugin for Squid proxy is available

2018-09-04 Thread Rafael Akchurin
Thanks to all of you for making this possible! Best regards, Rafael Akchurin Diladele B.V. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Squid Transparent Proxy with Policy Routing in pfSense

2018-03-13 Thread Rafael Akchurin
Hello Antonio, Sorry no pfsense tutorials for now, but these two are *proved* to be working just fine. https://docs.diladele.com/tutorials/policy_based_routing_squid/index.html https://docs.diladele.com/tutorials/mikrotik_transparent_squid/index.html Hope it helps. Best regards, Rafael

[squid-users] [icap] Web Safety 6.1 web filter plugin for Squid proxy is available

2018-03-07 Thread Rafael Akchurin
are welcome at supp...@diladele.com. Next version will include dynamic real-time page categorization using machine learning algorithms. You can join our community to get early access to next development builds at https://www.diladele.com/community.html . Thanks to all of you for m

[squid-users] squidclient and PROXY procotol enabled http_port

2018-04-14 Thread Rafael Akchurin
Greetings to everyone, I have the following deployment: - Several Squid nodes configured with "http_port 3128 require-proxy-header" - One haproxy what relays TCP connections to nodes - squidclient that is run on each node manually Browsers pointing to haproxy are

Re: [squid-users] Squid is very slow after moving to production environment

2018-04-09 Thread Rafael Akchurin
Hello Roberto, When Squid is "slow" like users complain first thing to check is always the DNS settings. Also sometimes switching to "IPv4 DNS resolve first" helps. Look for "squidclient mgr:idns" and "dns_v4_first on" on Squid wiki. Hope others ha

[squid-users] [icap] Web Safety 6.2 web filter plugin for Squid proxy is Release Candidate

2018-04-13 Thread Rafael Akchurin
early access to next development builds at https://www.diladele.com/community.html . Thanks to all of you for making this possible! Best regards, Rafael Akchurin Diladele B.V. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists

Re: [squid-users] squidclient and PROXY procotol enabled http_port (solved)

2018-04-17 Thread Rafael Akchurin
fects from this configuration. Best regards, Rafael Akchurin Diladele B.V. -- Please take a look at https://www.diladele.com - ICAP web filtering plugin for Squid proxy. From: Rafael Akchurin Sent: Saturday, April 14, 2018 10:14 AM To: squid-users (squid-users@lists.squid-cache.org) <squid-user

[squid-users] multiple log_file_daemon settings in squid.conf

2018-03-20 Thread Rafael Akchurin
in the squid.conf? One (original) would write access_log is usual and another one would parse out pumped bytes and update the ICAP records database. Hope I could explain it :( Thanks in advance for everyone taking time to respond. Best regards, Rafae

Re: [squid-users] ERROR: NAT/TPROXY lookup failed to locate original IPs on local

2018-10-19 Thread Rafael Akchurin
Hello Uchenna, May be this policy based routing with Mikrotik tutorial will be of any use See https://docs.diladele.com/tutorials/mikrotik_transparent_squid/index.html Best regards, Rafael Akchurin Diladele B.V. From: squid-users On Behalf Of Uchenna Nebedum Sent: Friday, 19 October 2018 18

Re: [squid-users] ERROR: NAT/TPROXY lookup failed to locate original IPs on local

2018-10-19 Thread Rafael Akchurin
Yes you can use any ICAP/eCAP server you like, just adjust the docs as required and that is it. From: Uchenna Nebedum Sent: Friday, 19 October 2018 20:17 To: Rafael Akchurin Cc: squid-users@lists.squid-cache.org Subject: Re: [squid-users] ERROR: NAT/TPROXY lookup failed to locate original IPs

Re: [squid-users] Ubuntu 18 LTS repository for Squid 4.4 (rebuilt with sslbump support from sources in Debian unstable)

2018-10-31 Thread Rafael Akchurin
Hello Samuel, Yes will make the Docker when 7.0 is in beta stage, now we need to polish it a little. Added issue at https://github.com/diladele/websafety-issues/issues/1030 Best regards, Rafael Akchurin Diladele B.V. From: squid-users On Behalf Of S Irlapati Sent: Wednesday, 31 October 2018

[squid-users] Ubuntu 18 LTS repository for Squid 4.4 (rebuilt with sslbump support from sources in Debian unstable)

2018-10-31 Thread Rafael Akchurin
will find this helpful. Note that older repo of squid43.diladele.com will be taken down in two weeks. Best regards, Rafael Akchurin Diladele B.V. P.S. Here are simple instructions how to use the repo. For more information see readme at https://github.com/diladele/squid-ubuntu . # add diladele

Re: [squid-users] Ubuntu 18 LTS repository for Squid 4.4 (rebuilt with sslbump support from sources in Debian unstable)

2018-11-01 Thread Rafael Akchurin
Hello Jose, Latest Squid is already available in Debian unstable, no need to use Ubuntu recompilation. Best regards, Rafael Akchurin > Op 1 nov. 2018 om 21:08 heeft José J. Rodriguez > het volgende geschreven: > > Rafael Akchurin wrote: >> Greeting all, >> The onlin

[squid-users] [tutorial] How to rebuild Squid 4.4 on Ubuntu 16 with SSLBump

2018-11-15 Thread Rafael Akchurin
/ubuntu16, hopefully might be helpful for someone. Unfortunately no plans to publish online repo for the DEBs for now (use squid44.diladele.com if you are ok with going to Ubuntu 18). Best regards, Rafael Akchurin Diladele B.V. -- Web Filter deployed in Microsoft Azure? Surely possible, see

[squid-users] Ubuntu 18 LTS repository for Squid 4.3 (rebuilt with sslbump support from sources in Debian unstable)

2018-10-11 Thread Rafael Akchurin
will find this helpful. Note that older repo of squid42.diladele.com will be taken down in two weeks. Best regards, Rafael Akchurin Diladele B.V. P.S. Here are simple instructions how to use the repo. For more information see readme at https://github.com/diladele/squid-ubuntu . # add diladele

[squid-users] [icap] Release Candidate of Web Safety 7.0 web filter for Squid proxy

2018-12-17 Thread Rafael Akchurin
for making this possible! Best regards, Rafael Akchurin Diladele B.V. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] can't access https://www.finanzamt.bayern.de/ with sslbump (other sites works well)

2019-01-09 Thread Rafael Akchurin
, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users On Behalf Of Amos Jeffries Sent: Wednesday, 9 January 2019 13:25 To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] can't access https://www.finanzamt.bayern.de/ with sslbump (other sites works well) On 9/01/19

Re: [squid-users] Squid for Windows Repeatedly Crashing

2019-02-24 Thread Rafael Akchurin
As far as I know the internal FD limit for Windows build is around 3K - might be being existed and thus unexpected behavior raising its ugly head.. -Original Message- From: squid-users On Behalf Of Van Order, Drew (US - Hermitage) Sent: Sunday, 24 February 2019 14:40 To:

[squid-users] Ubuntu 18 LTS repository for Squid 4.6 (rebuilt with sslbump support from sources in Debian unstable)

2019-02-26 Thread Rafael Akchurin
will find this helpful. Note that older repo of squid44.diladele.com will be taken down in one year. Best regards, Rafael Akchurin Diladele B.V. P.S. Here are simple instructions how to use the repo. For more information see readme at https://github.com/diladele/squid-ubuntu . # add diladele

Re: [squid-users] Squid for Windows Repeatedly Crashing

2019-02-27 Thread Rafael Akchurin
Drew (US - Hermitage) Sent: Wednesday, February 27, 2019 05:51 To: Eliezer Croitoru ; Rafael Akchurin Cc: 'Amos Jeffries' ; squid-users@lists.squid-cache.org Subject: RE: [squid-users] Squid for Windows Repeatedly Crashing Hello folks, and thanks for keeping interest. Today I spent a bit

Re: [squid-users] problem compiling squid 4 on ubuntu 18.04

2019-02-27 Thread Rafael Akchurin
Hello Alex, Please take a look at how we recompile Squid 4.6 for Ubuntu 18. It compiles and runs nicely without errors. See https://docs.diladele.com/howtos/build_squid_4_on_ubuntu/index.html Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users On Behalf

Re: [squid-users] ACL inside ClamAV?

2019-03-15 Thread Rafael Akchurin
Hello Felipe, We have something like this in our ICAP server. See https://docs.diladele.com/administrator_guide_7_0/web_filter/policies/blocking_file_downloads.html Best regards, Rafael Akchurin Diladele B.V. From: squid-users On Behalf Of Felipe Arturo Polanco Sent: Friday, 15 March 2019 16

Re: [squid-users] Building Squid 3.5 for Win2k with SSL

2019-02-10 Thread Rafael Akchurin
Hello Amos, Reinhard, Interestingly enough this error does not popup when building Squid on 64-bit Cygwin. Might be some 32-bit installation glitch? Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users On Behalf Of Amos Jeffries Sent: Sunday, 10 February

Re: [squid-users] AD user Login + Squid Proxy + Automatic Authentication

2019-08-22 Thread Rafael Akchurin
Hello Randi, You seem to be wishing to setup Single-Sign-On. We have a small guide here that might be of some help. It is proven and it definitely works. It involves Microsoft AD and Kerberos https://docs.diladele.com/administrator_guide_stable/active_directory/index.html The guide involves

[squid-users] Ubuntu 18 LTS repository for Squid 4.8 (rebuilt with sslbump support from sources in Debian unstable)

2019-07-19 Thread Rafael Akchurin
for feature-squid-4.8-1 branch). Scripts for Ubuntu 16 will be updated in the near future. Hope you will find this helpful. Note that older repo of squid46.diladele.com will be taken down in two years. Best regards, Rafael Akchurin Diladele B.V. P.S. Here are simple instructions how to use the repo

Re: [squid-users] Debian Buster, Squid 4.6-1 amd64, "Too few negotiateauthenticator processes are running"

2019-07-15 Thread Rafael Akchurin
from client browsers. Best regards, Rafael Akchurin Diladele B.V. -- Need easy to manage DNS filter? See our new project at https://dnssafety.io/ From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of James Zuelow Sent: Monday, July 15, 2019 9:11 PM To: 'squid-users

Re: [squid-users] HAProxy + Squid

2019-07-22 Thread Rafael Akchurin
Hello Gabriel, We do exactly that in our lab, see docs at https://docs.diladele.com/administrator_guide_7_0/active_directory_extra/redundancy/haproxy_proxy_protocol.html It works perfectly. Best regards, Rafael Akchurin Diladele B.V. From: squid-users [mailto:squid-users-boun...@lists.squid

Re: [squid-users] Unsuccessful at using Squid v4 with intercept

2019-11-01 Thread Rafael Akchurin
Hello Sebastian, If you decide to go policy routing way as Amos suggested - please see the tutorial at https://docs.diladele.com/tutorials/policy_based_routing_squid/index.html Or https://docs.diladele.com/tutorials/web_filter_https_squid_cisco_wccp/index.html for WCCP. Best regards, Rafael

[squid-users] Ubuntu 18 LTS repository for Squid 4.9 (rebuilt with sslbump support from sources in Debian unstable)

2019-11-13 Thread Rafael Akchurin
for Ubuntu 16 are also available in that repo. Hope you will find this helpful. Note that older repo of squid48.diladele.com will be taken down in 1 year. Best regards, Rafael Akchurin Diladele B.V. P.S. Here are simple instructions how to use the repo. For more information see readme at https

Re: [squid-users] Kerberos nad keytab problem

2019-09-25 Thread Rafael Akchurin
/administrator_guide_stable/active_directory/index.html Downside - the password for that designated user needs to be non expiring or you'd be regenerating keytabs everytime the password changes. Which is not difficult anyway too. Best regards, Rafael Akchurin Diladele B.V. From: squid-users On Behalf Of L.P.H

Re: [squid-users] good guide to AntiVirus detection, squid4

2019-12-19 Thread Rafael Akchurin
Hello Robert, Please see scripts at https://github.com/diladele/websafety/tree/release-7.2.0/core.ubuntu18 on how we do that (if you do not need web filtering – just ignore that part). Best regards, Rafael From: squid-users On Behalf Of robert k Wild Sent: Thursday, 19 December 2019 16:03

Re: [squid-users] squid log analyzer

2019-12-20 Thread Rafael Akchurin
if the results are ok. Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users On Behalf Of Vacheslav Sent: Friday, 20 December 2019 11:05 To: squid-users@lists.squid-cache.org Subject: [squid-users] squid log analyzer i searched for a ufdb guard log analyzer

Re: [squid-users] Squid 4.10 for windows

2020-02-13 Thread Rafael Akchurin
Sorry Chris, We still cannot find time to finish compilation of Squid 4 for Windows. The Linux version running within Hyper-V works much better most probably. Why not to try it? Best regards, Rafael Akchurin Diladele B.V. From: squid-users On Behalf Of Latino, Chris Sent: Thursday, 13

[squid-users] Ubuntu 18 LTS repository for Squid 4.10 (rebuilt with sslbump support from sources in Debian unstable)

2020-02-11 Thread Rafael Akchurin
po of squid49.diladele.com will be taken down in 2 years. Best regards, Rafael Akchurin Diladele B.V. -- Please take a look at another our project - DNS Safety filtering server. Sort of Web Safety implemented as DNS Server. Might be interesting in deployments where HTTPS decryption is not po

Re: [squid-users] please, can someone help me with the negotiate kerberos?

2020-02-17 Thread Rafael Akchurin
and samba, read: https://wiki.samba.org/index.php/Generating_Keytabs https://wiki.samba.org/index.php/Keytab_Extraction Greetz, Louis > -Oorspronkelijk bericht- > Van: squid-users > [mailto:squid-users-boun...@lists.squid-cache.org] Namens Rafael > Akchurin > Ver

Re: [squid-users] please, can someone help me with the negotiate kerberos?

2020-02-17 Thread Rafael Akchurin
Hello Rafael, There is an easier option *without* joining the Squid machine to the domain, See tutorial at https://docs.diladele.com/administrator_guide_stable/active_directory/index.html (it also applies to vanilla Squid without our UI - just you would need to do more manual steps). Raf

Re: [squid-users] unable to get issuer cert locally protocol error

2020-01-14 Thread Rafael Akchurin
Hello Robert, See why it happens - https://docs.diladele.com/faq/squid/fix_unable_to_get_issuer_cert_locally.html Best regards, Rafael Akchurin On 15 Jan 2020, at 03:59, robert k Wild wrote:  hi all, when im trying to go on a web page, squid cant connect and gives me an error page

Re: [squid-users] Need help setting up DD-WRT router to use Squid as a transparent proxy

2020-01-16 Thread Rafael Akchurin
You can try policy based routing if DD-WRT supports that – see https://docs.diladele.com/tutorials/policy_based_routing_squid/index.html From: squid-users On Behalf Of Robert Marshall Sent: Thursday, 16 January 2020 09:30 To: squid-users@lists.squid-cache.org Subject: [squid-users] Need help

[squid-users] [icap] Web Safety 7.3 web filter for Squid proxy is available

2020-03-10 Thread Rafael Akchurin
adele.websafety> * Microsoft Azure<https://azuremarketplace.microsoft.com/en-us/marketplace/apps/diladele.websafety> appliance (both 7.3 PAYG and BYOL instances) * Amazon AWS<https://aws.amazon.com/marketplace/pp/B07KJHLHKC> appliance (7.3 BYOL instance is being published)

[squid-users] Ubuntu 18 LTS repository for Squid 4.11 (rebuilt with sslbump support from sources in Debian unstable)

2020-04-24 Thread Rafael Akchurin
ent Hope you will find this useful. Note that older repo of squid410.diladele.com will be taken down in 1 year. Best regards, Rafael Akchurin Diladele B.V. -- The same Squid 4.11 will be part of upcoming Web Safety 7.4 planned for release in early June, this version has some improvements in the repo

[squid-users] [icap] Web Safety 7.4 web filter for Squid proxy is available

2020-05-11 Thread Rafael Akchurin
o create an issue<https://github.com/diladele/websafety/issues/new> at our GitHub repository. Thanks to all of you for making this possible. Stay safe. Best regards, Rafael Akchurin Diladele B.V. ___ squid-users mailing list squid-users@lists.squi

[squid-users] Ubuntu 18 LTS repository for Squid 4.13 (rebuilt with sslbump support from sources in Debian unstable)

2020-08-25 Thread Rafael Akchurin
te that older repo of squid412.diladele.com will be taken down today (due to sslbump issues with Chrome fixed in Squid 4.13). Best regards, Rafael Akchurin Diladele B.V. -- The same Squid 4.13 will be part of upcoming Web Safety 7.5 planned for release in November, this version has more

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-24 Thread Rafael Akchurin
specifically desire to use some haproxy's features for l7 loadbalancing. Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users On Behalf Of Klaus Brandl Sent: Friday, July 24, 2020 10:45 AM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-24 Thread Rafael Akchurin
- https://docs.diladele.com/administrator_guide_stable/active_directory_extra/redundancy/haproxy_proxy_protocol.html And yes we do *not* use computer account, we use *user* account instead. See the reasoning in the tutorial. Best regards, Rafael Akchurin Diladele B.V. -Original Message

[squid-users] Squid for Windows 4.14 is available

2021-05-17 Thread Rafael Akchurin
Hello everyone, After years of postponing we were finally able to build and pack the Squid 4 for Microsoft Windows. Sorry it took a lot more time and efforts than anticipated. The already existing version 4.15 is also being packed. I will update once again when it is available. The MSI can be

[squid-users] Ubuntu 20.04 LTS repository for Squid 4.13-8 (rebuilt with sslbump support from sources in Debian unstable)

2021-03-21 Thread Rafael Akchurin
will find this useful. Best regards, Rafael Akchurin Diladele B.V. -- The same Squid 4.13 will be part of upcoming Web Safety 7.6 planned for release in June, 2021. This version has the ability to use any header value set by Squid for selecting of web filtering policies in ICAP server as well

[squid-users] Ubuntu 20.04 LTS repository for Squid 5.1 (rebuilt from sources in Debian unstable)

2021-09-20 Thread Rafael Akchurin
uid51.diladele.com/ubuntu/ focal main" \ > /etc/apt/sources.list.d/squid51.diladele.com.list # and install apt-get update && apt-get install -y \ squid-common \ squid-openssl \ squidclient \ libecap3 libecap3-dev Hope you will find this useful. Best regards, Rafael

[squid-users] Ubuntu 20.04 LTS repository for Squid 5.2 (rebuilt from sources in Debian unstable)

2021-10-11 Thread Rafael Akchurin
uid52.diladele.com/ubuntu/ focal main" \ > /etc/apt/sources.list.d/squid52.diladele.com.list # and install apt-get update && apt-get install -y \ squid-common \ squid-openssl \ squidclient \ libecap3 libecap3-dev Hope you will find this useful. Best regards, Rafael

Re: [squid-users] Squid upgrade failure support questions

2021-10-25 Thread Rafael Akchurin
Be sure to also check the actual squid.exe is running - not just the service wrapper, you might be facing the https://github.com/diladele/squid-windows/issues/101 bug (4.14 does not work on older processors) Best regards, Rafael -Original Message- From: squid-users On Behalf Of Amos

Re: [squid-users] How to install squid 5 on ubuntu 18.04

2022-01-19 Thread Rafael Akchurin
Hello Hg, One way we do it is at https://docs.diladele.com/howtos/build_squid_on_ubuntu_20/repository.html Best regards, Rafael From: squid-users On Behalf Of Hg Mi Sent: Thursday, January 20, 2022 6:40 AM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] How to install squid 5

Re: [squid-users] TLS passthrough

2023-09-30 Thread Rafael Akchurin
Helo Fendando, One way to do that is to use policy-based-routing on your gateway. This can be easily done with for example Microtik (see https://docs.diladele.com/tutorials/mikrotik_transparent_squid/index.html) But also with native say Debian (we only have somewhat outdated tutorial with

[squid-users] [icap] rewritten transparent intercept tutorials for squid, mikrotik, ubuntu 20, debian 12 (nftables) and rhel 9 (firewalld)

2023-08-20 Thread Rafael Akchurin
(policy based routing) Hope you will find it useful. Best regards, Rafael Akchurin Diladele B.V. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] Ubuntu 20.04 LTS repository for Squid 5.5 (rebuilt from sources in Debian unstable)

2022-04-19 Thread Rafael Akchurin
e.com/ubuntu/ focal main" \ > /etc/apt/sources.list.d/squid55.diladele.com.list # and install apt-get update && apt-get install -y \ squid-common \ squid-openssl \ squidclient \ libecap3 libecap3-dev Hope you will find this useful. Best regards, Rafael

Re: [squid-users] Windows Server 2019-22 Kerberos transparent Windows client authentication help wanted. Try 2

2022-07-30 Thread Rafael Akchurin
Hello Eliezer, We use it all the time - https://docs.diladele.com/administrator_guide_stable/active_directory/index.html Not sure if this satisfies your requirements though. But it seems to be very stable. Best regards, Rafael -Original Message- From: squid-users On Behalf Of

Re: [squid-users] FW: Encrypted browser-Squid connection errors

2022-10-19 Thread Rafael Akchurin
o at https://webproxy.diladele.com/docs/network/secure_proxy/browsers/ Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users On Behalf Of Grant Taylor Sent: Thursday, October 20, 2022 2:39 AM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] FW: Encrypted bro

[squid-users] Ubuntu 20.04 LTS repository for Squid 5.7 (rebuilt from sources in Debian unstable)

2022-10-13 Thread Rafael Akchurin
e.com/ubuntu/ focal main" \ > /etc/apt/sources.list.d/squid57.diladele.com.list # and install apt-get update && apt-get install -y \ squid-common \ squid-openssl \ squidclient \ libecap3 libecap3-dev Hope you will find this useful. Best regards, Rafael

Re: [squid-users] Squid 4.8+ intercept

2022-08-10 Thread Rafael Akchurin
: ngtech1...@gmail.com<mailto:ngtech1...@gmail.com> Web: https://ngtech.co.il/ My-Tube: https://tube.ngtech.co.il/ From: squid-users mailto:squid-users-boun...@lists.squid-cache.org>> On Behalf Of Rafael Akchurin Sent: Tuesday, 9 August 2022 23:54 To: M K mailto:mohammed.khal...@gmail.com

<    1   2   3   >