Re: [squid-users] access-lists from mysql ?

2013-01-24 Thread Ali Jawad
I am not getting any errors right now, but I am getting access denied, although the script echoes OK, and it works using stdin Regards On Thu, Jan 24, 2013 at 3:44 PM, Ali Jawad wrote: > Thanks for that I did change the script to > > $f = fopen( 'php://stdin', 'r' );

Re: [squid-users] access-lists from mysql ?

2013-01-24 Thread Ali Jawad
is wrong is that I need to identify what needs to handle the script, I.e. how does squid know this is a php script and not a perl script ? Regards On Thu, Jan 24, 2013 at 12:02 PM, Amos Jeffries wrote: > On 24/01/2013 10:44 p.m., Ali Jawad wrote: >> >> Hi >> Checking the db

Re: [squid-users] access-lists from mysql ?

2013-01-24 Thread Ali Jawad
obtain %SRC, but for now I just want this to work, when squid starts I get the following in the log : The MyAclHelper helpers are crashing too rapidly, need help! Any help with this simple setup please ? Regards On Thu, Jan 24, 2013 at 12:53 AM, Eliezer Croitoru wrote: > On 1/24/2013 12:13 AM,

[squid-users] access-lists from mysql ?

2013-01-23 Thread Ali Jawad
Hi Is it possible to load access-lists from a database ? I.e. I want to read all the allowed src IPs from a database, all the examples I could fine are around user authentication and not IP access-lists. If it is possible can you please show me a few pointers ? Any example config / howto ? Thanks

[squid-users] Squid transparent proxy woes

2012-12-23 Thread Ali Jawad
Hi I am trying to setup a transparent proxy for my own use which I can use to access geo blocked services, I have tried with 3.1.10 and 3.3.0.1 and I am facing different problems in both cases. Let me first describe the network setup my lan -- GW--- Internet Dedicated Server-- Destination sites I

Re: [squid-users] Access denied on transparent after upgrade 3.1.x to 3.3

2012-12-20 Thread Ali Jawad
2 at 11:05 AM, Ali Jawad wrote: > Hi > I do intercept traffic using iptables, problem is same config works > for squid 3.1.2, I did remove all access rules and ended up with the > config below but I still get an access denied error. > > always_direct allow all > ssl_bump allow

Re: [squid-users] Access denied on transparent after upgrade 3.1.x to 3.3

2012-12-20 Thread Ali Jawad
Hi I do intercept traffic using iptables, problem is same config works for squid 3.1.2, I did remove all access rules and ended up with the config below but I still get an access denied error. always_direct allow all ssl_bump allow all sslproxy_cert_error allow all http_port 0.0.0.0:80 transpare

[squid-users] Re: Access denied on transparent after upgrade 3.1.x to 3.3

2012-12-19 Thread Ali Jawad
My compile options are : [root@v01-chi squid-3.3.0.2]# /usr/local/squid2/sbin/squid -v Squid Cache: Version 3.3.0.2 configure options: '--enable-ssl' '--enable-large-files' '--enable-linux-netfilter' '--prefix=/usr/local/squid2/' --enable-ltdl-convenienc

[squid-users] Access denied on transparent after upgrade 3.1.x to 3.3

2012-12-19 Thread Ali Jawad
Hi I did upgrade from squid 3.1.x to 3.3 "and tried 3.2.5 in between" problem is now that i have upgraded transparent proxy always returns access denied even if I do set src all to allowed. Please see a sample config below http://pastebin.com/vEWgsPkz On 3.1.x the transparent proxy did work just

Re: [squid-users] Re: Too many lpops with https

2012-12-19 Thread Ali Jawad
Actually this only happens if transparent is set on the port. It does work fine for the other ports, but I had to remove acl manager proto cache_object from my config during upgrade but I did allow localhost and to_localhost. Regards On Wed, Dec 19, 2012 at 1:40 PM, Ali Jawad wrote: > Hi A

Re: [squid-users] Re: Too many lpops with https

2012-12-19 Thread Ali Jawad
Hi Amos I did compile 3.2.5 which is the latest stable release, if you think I should go for 3.3 please let me know. Problem is I am getting access denied for all pages although I did set allow to all directives "I did use the same config as before". See below config please http://pastebin.com/vE

Re: [squid-users] Re: Too many lpops with https

2012-12-19 Thread Ali Jawad
Thank you all for your help, I am running an RPM install so I think the bug fix might now work ? Or will it, I am not sure whether the patch can be applied to an RPM installation, if not I will compile from source, what version do you think I should compile and if I do compile it the recommended ve

[squid-users] Re: Too many lpops with https

2012-12-18 Thread Ali Jawad
sites an I am sure about this. Any clues about what I did wrong to cause this ? I did try with https_port intercept and with ssl-bump + both. Thanks ! On Tue, Dec 18, 2012 at 12:41 PM, Ali Jawad wrote: > Hi > I am trying to setup a squid proxy with transparent https, but I am > getting &

[squid-users] Too many lpops with https

2012-12-18 Thread Ali Jawad
Hi I am trying to setup a squid proxy with transparent https, but I am getting "Error 310 (net::ERR_TOO_MANY_REDIRECTS): There were too many redirects." I am using the default CentOS installation with --enable-ssl "3.1". http is working fine, for https I get the ssl certificate error page and then

Re: [squid-users] Help with Squid HTTPS proxy

2012-12-18 Thread Ali Jawad
Hi All I will make use of your suggestions, but this is not just netflix related, basically whatever site I visit I get this error about LookupHostIP: Given Non-IP 'signup.netflix.com': Name or service not known Of course with the variation of the hostname at hand. Regards On Tue, Dec 18, 2012 at

[squid-users] Help with Squid HTTPS proxy

2012-12-17 Thread Ali Jawad
Hi I am trying to setup an HTTPS transparent proxy with latest stable squid with --enable-ssl compiled. Problem is that the squid server returns an error connection refused, but the thing is that it was trying to connect to itself. I did also check using tcpdump and actually no https requests are l

[squid-users] Issue with setting up local proxy

2011-11-15 Thread Ali Jawad
Hi I have a server setup with SQUID for 6 users, these users do use the same system on which squid is installed. Now my problem is that I want to force all their traffic through SQUID. So I did setup the following iptable rule on the server : iptables -t nat -I OUTPUT -p tcp --dport 80 -j DNAT

[squid-users] Reverse Proxy on Squid to port 8080

2011-04-25 Thread Ali Jawad
Hi I have got a reverse proxy that is working just fine, it accepts requests on port 443 and port 80 and ONLY sends traffic upstream to port 80 to the apache server listening on localhost. I use the following config: https_port 10.14.1.72:443 cert=/etc/squid/self_certs/site.crt key=/etc/squid/s

[squid-users] Re: Issue with XML requests

2010-01-25 Thread Ali Jawad
GMT. Server: Apache/2.2.3 (CentOS). X-Powered-By: PHP/5.1.6. Content-Length: 35. Connection: close. Content-Type: text/html; charset=UTF-8. . Error passing variables (AD err 01) On Mon, Jan 25, 2010 at 6:30 PM, Ali Jawad wrote: > Hi > We are developing an application that does send XML r

[squid-users] Issue with XML requests

2010-01-25 Thread Ali Jawad
Hi We are developing an application that does send XML requests to our webserver. We do have a non caching SQUID server on our local network, when the SQUID server is in use we dont get the result back from the server. When we dont use the SQUID server we get the result. Although no content filter

[squid-users] Bungled Conf..SSL

2009-09-21 Thread Ali Jawad
Hi I did compile 2.7 from source on debian with --enable-ssl support of course I did install the libssl-dev package for ssl headers first. The thing is that squid wont start it complains about the https_port line being BUNGLED. The error/line is : FATAL: Bungled squid.conf line 7: https_port 443