[squid-users] Possible access via v6 when no interfaces present, fixable with dns_v4_first

2018-05-18 Thread squid-users
Hello squid users, I'm trying to understand a strange problem with requests to edge.apple.com, which I think may be related to IPv6 DNS resolution. To set the scene - we operate a large (1,000+) fleet of Squid 3.5.25 caches. Each runs on a separate LAN, connected to the internet via an

[squid-users] Advice - Squid Proxy

2018-12-19 Thread Squid users
hide / obscure actual sites visited? Can anyone point out any flaws or issues. Thanks _______ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Advice - Squid Proxy

2018-12-19 Thread Squid users
control and monitoring :s Thanks -Original Message- From: squid-users On Behalf Of Antony Stone Sent: 19 December 2018 13:19 To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Advice - Squid Proxy On Wednesday 19 December 2018 at 13:22:57, Squid users wrote: > The attache

Re: [squid-users] Advice - Squid Proxy

2018-12-19 Thread Squid users
this and thinking I've gone a bit Orwellian. Still I think I've covered the bases. I was toying with the idea of running Asterix off my laptop too, but I figured I'd start with this project. -Original Message- From: squid-users On Behalf Of Antony Stone Sent: 19 December 2018 16

Re: [squid-users] Multiple SSL certificates on same IP

2018-12-19 Thread Squid users
Could you A – forward to different ports B – Use Network address translation? Thoughts… From: squid-users On Behalf Of Patrick Chemla Sent: 19 December 2018 18:29 To: squid-users@lists.squid-cache.org Subject: [squid-users] Multiple SSL certificates on same IP Hi all, Thanks for the great

[squid-users] SSL / TLS

2018-12-20 Thread Squid users
Slightly off topic but am I correct in thinking TLS supersedes SSL? ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] Cache peer selection with duplicate host names

2017-04-23 Thread squid-users
Hi Squid users, I'm having some trouble understanding Squid's peer selection algorithms, in a configuration where multiple cache_peer lines reference the same host. The background to this is that we wish to present cache service using multiple accounts at an upstream provider, wi

[squid-users] Landing- Disclaimer-Page for an Exchange 2013 Reverse Proxy

2016-03-15 Thread Squid Users
tp_access allow EXCH http_access deny all miss_access allow EXCH miss_access deny all # Logging access_log /var/log/squid3/access.log squid debug_options ALL,9 cache_mgr mailto:x...@xxx.de ___ squid-users mailing list squid-users@lists.squid-cache.or

[squid-users] Introducing delay to HTTP 407 responses

2016-09-13 Thread squid-users
Hi Squid users, Seeking advice on how to slow down 407 responses to broken Apple & MS clients, which seem to retry at very short intervals and quickly fill the access.log with garbage. The problem is very similar to this: http://www.squid-cache.org/mail-archive/squid-users/201404/0326.

Re: [squid-users] Question about the url rewrite before proxy out

2016-09-21 Thread squid-users
with that. Another note. If you have a cache_peer defined, you might need some config to force rewritten requests to be sent to 192.168.1.1 and not your cache peer. In that case this should do the trick: acl rewrite-host dst 192.168.1.1 always_direct allow rewrite-host HtH. Luke _

Re: [squid-users] Question about the url rewrite before proxy out

2016-09-22 Thread squid-users
he case, then Squid doesn't seem like the right tool for the job. I think CGIproxy can do this (https://www.jmarshall.com/tools/cgiproxy/) or perhaps Apache's mod_proxy (https://httpd.apache.org/docs/current/mod/mod_proxy.html) would work. Luke ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Introducing delay to HTTP 407 responses

2016-10-04 Thread squid-users
y to slow down auth responses? It's comprising about 90% of the log volume (450,000 requests/hr) in badly affected sites at the moment. Luke _______ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Introducing delay to HTTP 407 responses

2016-10-04 Thread squid-users
Acl.cc(158) matches: checked: snmp_access#1 = 1 2016/10/04 22:37:22.739 kid1| 28,3| Acl.cc(158) matches: checked: snmp_access = 1 2016/10/04 22:37:22.739 kid1| 28,3| Checklist.cc(63) markFinished: 0x7ffcaaa6a540 answer ALLOWED for match 2016/10/04 22:37:22.739 kid1| 28,4| FilledCheckli

Re: [squid-users] Introducing delay to HTTP 407 responses

2016-10-04 Thread squid-users
request is in place, but not otherwise. If someone could give me some pointers where to look in the source, I can start digging to see if I can find out more. Luke cache_auth.log Description: Binary data cache_noauth.log Description: Binary data squid.conf Description: Binary data __

Re: [squid-users] Introducing delay to HTTP 407 responses

2016-10-05 Thread squid-users
og-watching script to maintain a list of offending IP/domain pairs, then write a helper to use that data to introduce delay when the request is first received (via http_access and the !all trick). If anyone has a better option, I'm all ears. Luke ____

[squid-users] Debugging http_access and http_reply_access

2016-02-02 Thread squid-users
Hi Squid users, I'm seeking some guidance regarding the best way to debug the http_access and http_reply_access configuration statements on a moderately busy Squid 3.5 cache. In cases where a number (say, 5 or more) of http_access lines are present, the goal is to find which configur

Re: [squid-users] Debugging http_access and http_reply_access

2016-02-03 Thread squid-users
n alone, without making changes to a live config. Luke ___________ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] Custom User Agent Per ACL

2016-10-27 Thread jarrett+squid-users
efox x" ipv4-1 -> tcp_outgoing_address xxx.xxx.xxx.xxx ipv4-1 acl ipv4-2 myportname 3129 src xxx.xxx.xxx.xxx/24 -> http_access allow ipv4-2 -> request_header_replace User Agent "Internet Explorer x" ipv4-2 -> tcp_outgoing_address xxx.xxx.xxx.xxx ipv4-2 Thanks! ______

[squid-users] TCP Outgoing Address ACL Problem

2016-11-11 Thread jarrett+squid-users
You are not allowed to post to this mailing list, and your message has been automatically rejected. If you think that your messages are being rejected in error, contact the mailing list owner at squid-users-ow...@lists.squid-cache.org. --- Begin Message --- Can anyone point out what I'm

[squid-users] TCP Outgoing Address ACL Problem

2016-11-11 Thread jarrett+squid-users
the config instead. IP/Ethernet Interface Assignment: https://bpaste.net/show/5cf068a4ce9a Thanks! P.S. Sorry for that last message. _______ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] [SOLVED] Re: TCP Outgoing Address ACL Problem

2016-11-13 Thread jarrett+squid-users
Thanks Garry and Amos! My problem is solved. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users