[squid-users] Re: Squid 3.1 and https ssl aes256 issue

2012-06-05 Thread alextouch
It is most likely that your clients browsers or SSL libraries are missing AES-256 support or are getting stuck negotiating to use a version of TLS/SSL which supports it. Amos Ok, but if I turn off proxy setting in clients and allow a direct connection to the internet, all works well.

Re: [squid-users] Re: Squid 3.1 and https ssl aes256 issue

2012-06-05 Thread Amos Jeffries
On 5/06/2012 7:05 p.m., alextouch wrote: It is most likely that your clients browsers or SSL libraries are missing AES-256 support or are getting stuck negotiating to use a version of TLS/SSL which supports it. Amos Ok, but if I turn off proxy setting in clients and allow a direct

[squid-users] Re: Squid 3.1 and https ssl aes256 issue

2012-06-05 Thread alextouch
Amos Jeffries-2 wrote Just SYN_SENT? no TCP connection completed and CONNECT HTTP request sent? (all that has to happen *before* the first octet of TLS starts) Very strange. Indeed there is something strange that I cannot understand. It seems as if the client sends the request but no

Re: [squid-users] Caching issue with http_port when running in transparent mode

2012-06-05 Thread Hans Musil
Eliezer wrote: one important thing to be aware of is that if you are using the same box as a gateway and squidbox it's better to use the redirect instead of DNAT. you can always try to use: http://nocat.net/downloads/NoCatSplash/ or to write your own helper. it can be pretty simple to

Re: [squid-users] DNS Attack

2012-06-05 Thread Roman Gelfand
Here is the request this guy is sending. Perhaps, this could shed some light.

Re: [squid-users] Reverse-proxy for site on Google AppEngine

2012-06-05 Thread Will
This is where having the proxy doing auth and passing the credentials to the peer comes in. The peer never gets to the point of needing to send those redirects. Meaning I have to change Squid or it can be done in configuration? Thanks, Will On Mon, Jun 4, 2012 at 6:33 PM, Amos Jeffries

Re: [squid-users] Caching issue with http_port when running in transparent mode

2012-06-05 Thread Hans Musil
Amos Jeffries wrote: On 29/05/2012 6:12 p.m., Hans Musil wrote: Amos Jeffries wrote: On 29.05.2012 08:13, Eliezer Croitoru wrote: hey there Hans, are you serving squid on the same machine as the gateway is?(wasnt sure about the DNAT). your problem is not directly related to squid

Re: [squid-users] Caching issue with http_port when running in transparent mode

2012-06-05 Thread Hans Musil
Original-Nachricht Datum: Tue, 05 Jun 2012 19:54:12 +0200 Von: Hans Musil hans.mu...@gmx.de An: Amos Jeffries squ...@treenet.co.nz, squid-users@squid-cache.org Betreff: Re: [squid-users] Caching issue with http_port when running in transparent mode Amos Jeffries wrote:

Re: [squid-users] Caching issue with http_port when running in transparent mode

2012-06-05 Thread Amos Jeffries
On 06.06.2012 07:04, Hans Musil wrote: Ups, an other problem: Amos, your solution looks fine, but there is one problem. My login/logout script needs to know the client's IP, but it only sees my squid's IP. I know, there is format tag %i, but this would require the non-stable version 3.2. Any

Re: [squid-users] Caching issue with http_port when running in transparent mode

2012-06-05 Thread Eliezer Croitoru
On 05/06/2012 17:22, Hans Musil wrote: Eliezer wrote: one important thing to be aware of is that if you are using the same box as a gateway and squidbox it's better to use the redirect instead of DNAT. you can always try to use: http://nocat.net/downloads/NoCatSplash/ or to write your own