[squid-users] SSL bumping (again)

2014-07-12 Thread Eugene M. Zheganin
Hi. Squid-3.3.11 FreeBSD 10.0-STABLE I've set up SSL bumping in order to deal with file uploading (actually to block file uploading for certain groups of users) via HTTPS. It works just fine for most of the HTTPS enabled sites, but with some Google sites I have a problem - browsers (FF for

Re: [squid-users] Fwd: gmail.com certificate name mismatch

2014-07-12 Thread Walter H.
Hello On 16.06.2014 19:12, Alex Rousskov wrote: On 06/16/2014 10:58 AM, Walter H. wrote: I found something strange in connection with server-first and google ... any browser: IE, googles own browser Chrome doesn't tell any problem with ie. https://www.youtube.com but FireFox does - you know

Re: [squid-users] ident and intercept

2014-07-12 Thread Amos Jeffries
On 12/07/2014 5:21 p.m., James Harper wrote: The docs says that ident doesn't work with intercept proxying, and it doesn't, but I think it wouldn't be too hard to make it work. In fact maybe as simple as setting COMM_TRANSPARENT on the ident socket. COMM_TRANSPARENT is a Squid inernal flag

RE: [squid-users] ident and intercept

2014-07-12 Thread James Harper
On 12/07/2014 5:21 p.m., James Harper wrote: The docs says that ident doesn't work with intercept proxying, and it doesn't, but I think it wouldn't be too hard to make it work. In fact maybe as simple as setting COMM_TRANSPARENT on the ident socket. COMM_TRANSPARENT is a Squid inernal

Re: [squid-users] SSL bumping (again)

2014-07-12 Thread Amos Jeffries
On 12/07/2014 7:33 p.m., Eugene M. Zheganin wrote: Hi. Squid-3.3.11 FreeBSD 10.0-STABLE I've set up SSL bumping in order to deal with file uploading (actually to block file uploading for certain groups of users) via HTTPS. It works just fine for most of the HTTPS enabled sites, but with

Re: [squid-users] Fwd: gmail.com certificate name mismatch

2014-07-12 Thread Amos Jeffries
On 12/07/2014 7:50 p.m., Walter H. wrote: Hello On 16.06.2014 19:12, Alex Rousskov wrote: On 06/16/2014 10:58 AM, Walter H. wrote: I found something strange in connection with server-first and google ... any browser: IE, googles own browser Chrome doesn't tell any problem with ie.

RE: [squid-users] ident and intercept

2014-07-12 Thread James Harper
Does that sound plausible? What I've found is that not only doesn't ident not work on an intercepted connection, the connection just hangs forever (or at least for the 10 minutes that I waited) if any acl's are encountered that would require an ident lookup. The hang is a separate bug

Re: [squid-users] ident and intercept

2014-07-12 Thread Amos Jeffries
On 12/07/2014 8:15 p.m., James Harper wrote: On 12/07/2014 5:21 p.m., James Harper wrote: The docs says that ident doesn't work with intercept proxying, and it doesn't, but I think it wouldn't be too hard to make it work. In fact maybe as simple as setting COMM_TRANSPARENT on the ident

Re: [squid-users] RockStore Fatal Error

2014-07-12 Thread Nyamul Hassan
Hi, Alex, as per your previous suggestion, we did all the troubleshooting steps in the link for SmpScale. Working on them removed the errors in our 1st Squid installation (original email). Now, we are facing problem on another machine. We did all those steps mentioned in SmpScale, yet this

[squid-users] how can i get the localport in forward proxy mode?

2014-07-12 Thread freefall12
i use iptables to redirect a range of ports to the squid listening port, and i want to get the port in the TCP packet in access log instead of the listing port. Sadly, The localport seems only available when using intercept or transparent mode, otherwise it's the same as the listening port. Thank

Re: [squid-users] how can i get the localport in forward proxy mode?

2014-07-12 Thread Amos Jeffries
On 12/07/2014 10:43 p.m., freefall12 wrote: i use iptables to redirect a range of ports to the squid listening port, and i want to get the port in the TCP packet in access log instead of the listing port. Sadly, The localport seems only available when using intercept or transparent mode,

[squid-users] Re: how can i get the localport in forward proxy mode?

2014-07-12 Thread freefall12
this is my iptables rules iptables -A PREROUTING -p tcp -m tcp --dport 3:6 -j REDIRECT --to-ports 5 port 5000 is the squid's listing port. What i want to do is to assign each user an unique port number and rely upon the port number in the access log for accounting. OK,the

Re: [squid-users] Re: how can i get the localport in forward proxy mode?

2014-07-12 Thread Amos Jeffries
On 13/07/2014 2:35 a.m., freefall12 wrote: this is my iptables rules iptables -A PREROUTING -p tcp -m tcp --dport 3:6 -j REDIRECT --to-ports 5 port 5000 is the squid's listing port. What i want to do is to assign each user an unique port number and rely upon the port

[squid-users] Re: how can i get the localport in forward proxy mode?

2014-07-12 Thread freefall12
Amos Jeffries wrote On 13/07/2014 2:35 a.m., freefall12 wrote: this is my iptables rules iptables -A PREROUTING -p tcp -m tcp --dport 3:6 -j REDIRECT --to-ports 5 port 5000 is the squid's listing port. What i want to do is to assign each user an unique port number and rely