[squid-users] Should `squid -k check` complain about presence of `ignore-no-cache` in 3.4.11

2015-02-22 Thread Karl-Philipp Richter
Hi,
According to
http://lists.squid-cache.org/pipermail/squid-users/2015-February/002323.html
the `ignore-no-cache` option is outdated. Shouldn't `squid -k check`
warn about its presence (I verified that the check works by adding `bla`
at the end of the config file with causes a warning `unrecognized:
'bla'`)? Currently the validation passes in 3.4.11 (on FreeBSD 9.3).

In case it should, is that a bug or a feature request?

Best regards,
Kalle



signature.asc
Description: PGP signature
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


Re: [squid-users] Resolution Locker Plugin for Squid Proxy Cache 3.x

2015-02-22 Thread Stakres
Hi All,

New  build 2.07 https://sourceforge.net/projects/youtuberesolutionlocker/ 
:
- YouTube
- Vevo
- Vimeo
- iMDB
- Dailymotion
- Break.com
- Apple Trailers

Ask your free 1 year license on the website 

Bye Fred 



--
View this message in context: 
http://squid-web-proxy-cache.1019090.n4.nabble.com/Resolution-Locker-Plugin-for-Squid-Proxy-Cache-3-x-tp4669489p4670018.html
Sent from the Squid - Users mailing list archive at Nabble.com.
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


[squid-users] squid 3.5.2 and MRTG

2015-02-22 Thread Monah Baki
Hi all,

I need to monitor squid 3.5.2 using MRTG and can't seem to find any
examples on how to do that.

I found the following but nothing happens.Clueless on how to do this.

Thanks



Target[proxy-hit]: cacheHttpHitscacheServerRequests:pub...@proxy.sg.private
:3401
# If you are using Squid 2.6 or later, uncomment the following line
#RouterName[proxy-hit]: cacheUniqName
MaxBytes[proxy-hit]: 10
Title[proxy-hit]: HTTP Hits
PageTop[proxy-hit]: H2proxy Cache Statistics: HTTP Hits/Requests/H2
 TABLE
   TRTDSystem:/TDTDproxy.sg.private/TD/TR
   TRTDMaintainer:/TDTDSerassio Guido/TD/TR
   TRTDDescription:/TDTDSquid Proxy server/TD/TR
 /TABLE
Suppress[proxy-hit]: y
LegendI[proxy-hit]:  HTTP hits
LegendO[proxy-hit]:  HTTP requests
Legend1[proxy-hit]:  HTTP hits
Legend2[proxy-hit]:  HTTP requests
YLegend[proxy-hit]: perminute
ShortLegend[proxy-hit]: req/min
Options[proxy-hit]: nopercent, perminute, dorelpercent, unknaszero
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


Re: [squid-users] Squid 2.7, 3.4 and 3.5 Videos/Music/Images/Libraris/CDNs Booster

2015-02-22 Thread Stakres
Hi All,

Advanced Caching Add-On for Linux Squid Proxy Cache v2.7, v3.4 and v3.5 with
Videos, Music, Images, Libraries and CDNs.

New  version 2.35 https://sourceforge.net/projects/squidvideosbooster/   -
February 22th 2015.
- New websites
More details on https://svb.unveiltech.com

Enjoy 

Bye Fred 



--
View this message in context: 
http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-2-7-3-4-and-3-5-Videos-Music-Images-Libraries-CDNs-Booster-tp4668683p4670015.html
Sent from the Squid - Users mailing list archive at Nabble.com.
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


[squid-users] Need tips in order to force youtube in HTTP only

2015-02-22 Thread David Touzeau

Hi the best...

We using Youtube For School by adding Headers in HTTP protocol
Since Youtube force everybody to use SSL, using Youtube For School 
trough squid is not possible.


Sure using ssl-bump can do the trick but dealing with certificates on 
students computers is very difficult.


Did anyone have found a tip in order to force using Youtube only in HTTP 
Mode ?



best regards
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


Re: [squid-users] Should `squid -k check` complain about presence of `ignore-no-cache` in 3.4.11

2015-02-22 Thread Amos Jeffries
On 23/02/2015 1:19 a.m., Karl-Philipp Richter wrote:
 Hi,
 According to
 http://lists.squid-cache.org/pipermail/squid-users/2015-February/002323.html
 the `ignore-no-cache` option is outdated. Shouldn't `squid -k check`
 warn about its presence (I verified that the check works by adding `bla`
 at the end of the config file with causes a warning `unrecognized:
 'bla'`)? Currently the validation passes in 3.4.11 (on FreeBSD 9.3).

Squid is capable of running with it present in the config. It just has
no meaning any more. So there is no reason to halt an otherwise usable
proxy.

If you run squid -k parse to verify the config it displays an UPGRADE
notice about it.

squid -k parse is better to use for verifying configurations. It will
continue past some types of FATAL and give you a better list of the
errors that exist, rather than just the first detected.

Amos
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


[squid-users] Compile errors Squid 3.5.2

2015-02-22 Thread Stanford Prescott
When trying to compile Squid 3.5.2 the compile fails. The only error messages I 
can find are these:
tar: ./usr/share/errors/zh-cn: Cannot create symlink to `zh-hans': File exists
tar: ./usr/share/errors/zh-cn: Cannot create symlink to `zh-hant': File exists

A squid binary is produced but won't start when I replace the working squid 
3.4.10 binary in my distribution (Smoothwall Express 3.1) with the 3.5.2 
binary. I get this error message in the cache.log when trying to start squid 
3.5.2.
FATAL: Ipc::Mem::Segment::create failed to shm_open(/squid-cf__metadata.shm): 
(13) Permission denied

I was not surprised that the Squid 3.5.2 binary would not start due to the 
compile errors, but I thought I would try anyway.
Does anyone have any idea what I might be doing wrong?
Thank you,
Stan___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


Re: [squid-users] squid 3.5.2 and MRTG

2015-02-22 Thread Amos Jeffries
On 23/02/2015 3:06 a.m., Monah Baki wrote:
 Hi all,
 
 I need to monitor squid 3.5.2 using MRTG and can't seem to find any
 examples on how to do that.
 
 I found the following but nothing happens.Clueless on how to do this.


http://wiki.squid-cache.org/Features/Snmp


Amos
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


Re: [squid-users] assertion failed: client_side.h:364: sslServerBump == srvBump

2015-02-22 Thread Private Sender
Error negotiating SSL connection on FD 44: error:140A1175:SSL
routines:SSL_BYTES_TO_CIPHER_LIST:inappropriate fallback (1/-1)

This prepends the previous info.


___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


Re: [squid-users] Need tips in order to force youtube in HTTP only

2015-02-22 Thread Eliezer Croitoru

On 22/02/2015 13:56, Amos Jeffries wrote:

The google page about forcing safesearch currently recommends hijacking
DNS. Which may also work for YouTube but its not clear.


I must mention also:

If only youtube is the issue, there is an idea to pre-identify these dns 
requests and only ssl-bump these IP addresses which would point into any 
youtube http domain.(*.youtube.com and similar)
If there is an option to pre create a ssl certificate which contains all 
the needed domains for this interception you might be able to install 
only a bundle of certificates which can be used by the users.
Installing a certificate in a windows system can be pretty simple if you 
have the knowledge and the right permissions.


The main issue is pinning this certificate inside the ssl_crtd 
certificates directory.


Eliezer

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


Re: [squid-users] Compile errors Squid 3.5.2

2015-02-22 Thread Amos Jeffries
On 23/02/2015 6:46 a.m., Stanford Prescott wrote:
 When trying to compile Squid 3.5.2 the compile fails. The only error messages 
 I can find are these:
 tar: ./usr/share/errors/zh-cn: Cannot create symlink to `zh-hans': File 
 exists
 tar: ./usr/share/errors/zh-cn: Cannot create symlink to `zh-hant': File 
 exists
 
 A squid binary is produced but won't start when I replace the working squid 
 3.4.10 binary in my distribution (Smoothwall Express 3.1) with the 3.5.2 
 binary. I get this error message in the cache.log when trying to start squid 
 3.5.2.
 FATAL: Ipc::Mem::Segment::create failed to 
 shm_open(/squid-cf__metadata.shm): (13) Permission denied
 
 I was not surprised that the Squid 3.5.2 binary would not start due to the 
 compile errors, but I thought I would try anyway.
 Does anyone have any idea what I might be doing wrong?

Squid is not a script. compiler errors only happen at runtime when
runngin scripts.
Squid is a binary, it has to be compiled successfully to use. Your is
having a permission error.


It sounds like the system integration build options have not been set
the same. The paths options are obvious, but they also include things
like the --with-default-user.

Or may SELinux/Apparmour settings are getting in the way. 3.5 changes
the UDS names slightly so they may not be configured to permit the squid
process to use the new names.
In this case from cf__metadata.shm to ${service_name}-cf__metadata.shm
where ${service_name} is teh value pased in the -n (lower case) command
line parameter.

Amos

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users