[squid-users] Squid 3.5 - icap parsing error

2020-08-28 Thread VON EUW Andreas
Hi all, I'm trying to integrate a Squid Cache version 3.5.20 for x86_64-redhat-linux-gnu with a Symantec Protection Engine 8.1 to do virus scaning in a reverse proxy setup. I do send all POST requests to our virus scan engine. But icap integration does not work as expected. Squid does send a

Re: [squid-users] deny_info page not shown

2020-08-28 Thread Alex Rousskov
>> Amos Jeffries wrote: >>> CONNECT is a request to open a TCP connection. Delivering an HTTP >>> page, or even a URL redirect in response to a TCP connection request >>> is completely the wrong type of result. >>> Like asking someone to open a door because you have a load of things >>> needing

Re: [squid-users] ACL-by time- not working. Help!

2020-08-28 Thread Amos Jeffries
On 29/08/20 3:50 am, Luis Mario Niedas Hernández wrote: > El vie., 28 de ago. de 2020 a la(s) 00:03, Amos Jeffries > (squ...@treenet.co.nz) escribió: >> >> On 28/08/20 3:40 am, Luis Mario Niedas Hernández wrote: >>> Hello. I need restrict some site by time, but i am not doing well. >>> This is my

Re: [squid-users] ACL-by time- not working. Help!

2020-08-28 Thread Luis Mario Niedas Hernández
El vie., 28 de ago. de 2020 a la(s) 00:03, Amos Jeffries (squ...@treenet.co.nz) escribió: > > On 28/08/20 3:40 am, Luis Mario Niedas Hernández wrote: > > Hello. I need restrict some site by time, but i am not doing well. > > This is my squid.conf. Please help me to fix the problem. I don't know >

Re: [squid-users] deny_info page not shown

2020-08-28 Thread Janos Dohanics
On Fri, 28 Aug 2020 22:58:00 +1200 Amos Jeffries wrote: > On 28/08/20 8:49 pm, Janos Dohanics wrote: > > > > Thanks - would you have an example of using deny_info http://... acl > > which actually works? > > > > Any HTTP request message where 302 is a valid response status code > will work.

Re: [squid-users] deny_info page not shown

2020-08-28 Thread Amos Jeffries
On 28/08/20 8:49 pm, Janos Dohanics wrote: > > Thanks - would you have an example of using deny_info http://... acl > which actually works? > Any HTTP request message where 302 is a valid response status code will work. Your configuration does that. The problem is that Browsers only accept 20x

Re: [squid-users] filter access.log

2020-08-28 Thread Amos Jeffries
On 28/08/20 7:18 pm, Wesley Mouedine Assaby wrote: > > Is it possible to remove log that is not authenticated (ldap) ? Of course. With the current Squid versions use a "note" type ACL to match any details produced by helpers. e.g. the "user=" sent by the authentication helper. For example:

Re: [squid-users] SSL Bump: I have weekly more sites to whitelist due to HTTP Error 403 on opening site content

2020-08-28 Thread Amos Jeffries
On 28/08/20 8:12 pm, i...@schroeffu.ch wrote: > > Hi Squid Community, > > the last weeks it felt that more and more websites are going to be > "incompatible" with Squid SSL bump. "feelings" aside, that is exactly the situation. SSL-Bump is literally a security attack on clients traffic. Exactly

Re: [squid-users] deny_info page not shown

2020-08-28 Thread Janos Dohanics
On Fri, 28 Aug 2020 10:31:41 +0200 Matus UHLAR - fantomas wrote: > >> On 28/08/20 6:22 pm, Janos Dohanics wrote: > >> > Is there a way to have deny_info instruct browsers to reliably > >> > display the desired URL/page? > > >On Fri, 28 Aug 2020 18:59:56 +1200 > >Amos Jeffries wrote: > >> No

Re: [squid-users] deny_info page not shown

2020-08-28 Thread Matus UHLAR - fantomas
On 28/08/20 6:22 pm, Janos Dohanics wrote: > Is there a way to have deny_info instruct browsers to reliably > display the desired URL/page? On Fri, 28 Aug 2020 18:59:56 +1200 Amos Jeffries wrote: No there is not. This is a security feature of Browsers not something Squid can workaround.

Re: [squid-users] deny_info page not shown

2020-08-28 Thread Janos Dohanics
On Fri, 28 Aug 2020 18:59:56 +1200 Amos Jeffries wrote: > On 28/08/20 6:22 pm, Janos Dohanics wrote: > > > > Is there a way to have deny_info instruct browsers to reliably > > display the desired URL/page? > > No there is not. This is a security feature of Browsers not something > Squid can

[squid-users] SSL Bump: I have weekly more sites to whitelist due to HTTP Error 403 on opening site content

2020-08-28 Thread info
Hi Squid Community, the last weeks it felt that more and more websites are going to be "incompatible" with Squid SSL bump. Some Websites are not displayed at all and a "403 Forbidden" from their proxy is displayed, others are displayed very ugly because some CSS is missing due to HTTP Error

[squid-users] filter access.log

2020-08-28 Thread Wesley Mouedine Assaby
Hi, I have the following logs : 1598547651.549 120818 192.168.100.105 TCP_TUNNEL/200 3234 CONNECT dmp.re:443 ericf HIER_DIRECT/213.186.33.2 - 1598547651.549 120726 192.168.100.105 TCP_TUNNEL/200 3234 CONNECT www.dmp.re:443 ericf HIER_DIRECT/213.186.33.2 - 1598547652.325 0 192.168.100.109

Re: [squid-users] deny_info page not shown

2020-08-28 Thread Amos Jeffries
On 28/08/20 6:22 pm, Janos Dohanics wrote: > > Is there a way to have deny_info instruct browsers to reliably display > the desired URL/page? No there is not. This is a security feature of Browsers not something Squid can workaround. CONNECT is a request to open a TCP connection. Delivering an

Re: [squid-users] deny_info page not shown

2020-08-28 Thread Janos Dohanics
On Fri, 28 Aug 2020 17:08:01 +1200 Amos Jeffries wrote: > [...] Amos, thank you for the quick reply. > > deny_info http://google.com custom > > Asks Squid to perform a URL-redirect to http://google.com instead of > delivering error pages when ACL "deny custom" happens. > > > >