Re: [squid-users] Caching Google Chrome googlechromestandaloneenterprise64.msi

2016-10-23 Thread garryd
On 2016-10-23 18:31, Amos Jeffries wrote: On 23/10/2016 2:32 a.m., garryd wrote: Since I started use Squid, it's configuration always RFC compliant by default, _but_ there were always knobs for users to make it HTTP violent. It was in hands of users to decide how to handle a web resource

Re: [squid-users] Caching http google deb files

2016-10-23 Thread garryd
On 2016-10-22 23:18, Heiler Bemerguy wrote: I've never used ICAP, and I think hacking the code is way faster than creating/using a separate service for that. And I'm not sure, but I don't think I can manage to get this done with current squid's options. Hi, For this case I also suggest to use

Re: [squid-users] Caching Google Chrome googlechromestandaloneenterprise64.msi

2016-10-22 Thread garryd
On 2016-10-22 17:56, Antony Stone wrote: Disclaimer: I am not a Squid developer. On Saturday 22 October 2016 at 14:43:55, gar...@comnet.uz wrote: IMO: The only reason I believe [explains] why core developers of Squid tend to move HTTP violating settings from average users is to prevent poss

Re: [squid-users] Caching Google Chrome googlechromestandaloneenterprise64.msi

2016-10-22 Thread garryd
On 2016-10-22 16:05, Yuri Voinov wrote: Good explanations do not always help to get a good solution. A person needs no explanation and solution. So far I've seen a lot of excellent reasons why Squid can not do so-and-so in the normal configuration. However, this explanation does not help in solv

Re: [squid-users] Caching Google Chrome googlechromestandaloneenterprise64.msi

2016-10-22 Thread garryd
On 2016-10-22 13:53, Rui Lopes wrote: Hello, I'm trying to receive a cached version of googlechromestandaloneenterprise64.msi with: refresh_pattern googlechromestandaloneenterprise64\.msi 4320 100% 4320 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-store ignore-privat

Re: [squid-users] Squid 4.x and Peek and Splice - Host Header Forgery

2016-10-18 Thread garryd
On 2016-10-18 22:42, John Wright wrote: Hi Replying to the list Yes i get that error on many different sites same exact error about host headers. Also if you watch the TTL on the amazonaws url i provided it changes from 3 to 5 to 10 seconds to 60 to 10 back and forth. If you go online to an dns

Re: [squid-users] Squid 4.x and Peek and Splice - Host Header Forgery

2016-10-18 Thread garryd
On 2016-10-18 18:32, John Wright wrote: Hi, I have a constant problem with Host header forgery detection on squid doing peek and splice. I see this most commonly with CDN, Amazon and microsoft due to the fact there TTL is only 5 seconds on certain dns entries im connecting to. So when my clien

Re: [squid-users] Are there any distros with SSL Bump compiled by default?

2016-05-14 Thread garryd
On 2016-05-14 14:36, Tim Bates wrote: Are there any Linux distros with pre-compiled versions of Squid with SSL Bump support compiled in? Alternatively, does anyone reputable do a 3rd party repo for Debian/Ubuntu that includes SSL Bump? Squid's SSL Bump support improves very fast, so it is reco

Re: [squid-users] Host header forgery policy in service provider environment

2016-01-01 Thread garryd
On 2015-12-31 13:31, Amos Jeffries wrote: On 2015-12-31 00:01, Garri Djavadyan wrote: Hello Squid members and developers! First of all, I wish you a Happy New Year 2016! The current Host header forgery policy effectively prevents a cache poisoning. But also, I noticed, it deletes verified earl