Re: [squid-users] We have a big problems with Squid 3.3.8, it's a bug ?

[Amos Jeffries]

On 1/04/2016 9:38 p.m., Olivier CALVANO wrote:
> switch to 3.5 will be complicated because you have to upgrade all CentOS
> 

These packages might be some help with that:


> how I can do to find the cause?
> 

There isn't any clear ccause, so if you really want to go that way it
starts with configuring "debug_options ALL,9" to log all debug
information your Squid can produce. Once that is running you will need
to preproduce the problem. Note that you will have to capture the
entirety of one of those multiple-hour long transactions.

This will result in a rather large cache.log which will then have to be
searched through to find the transaction TCP connection details. Which
will show the FD number(s) being used by it.

Filtering the log on that "FD n" will give you a trace of what is being
done on the connection and the timing of those things - hopefully giving
a hint as to where to look for more details.

Good luck.
Amos

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] We have a big problems with Squid 3.3.8, it's a bug ?

[Olivier CALVANO]

switch to 3.5 will be complicated because you have to upgrade all CentOS

how I can do to find the cause?

2016-03-31 12:50 GMT+02:00 Amos Jeffries :

> On 31/03/2016 10:18 p.m., Olivier CALVANO wrote:
> > anyone think's if this bug are on 3.5 version too ?
> >
>
> It is difficult to say without actually knowing the cause (even
> roughly). There have been so many things that could be causing it which
> changed between those two versions. Even within the 3.5 series - so it
> may exist or not in early 3.5 and be different in current releases.
>
> If you are in a position to upgrade to 3.5 and it works okay for you I
> recommend doing so anyway. There are significant other issues (like the
> security vulnerabilities) that make the upgrade away from older Squid
> versions a very good idea.
>
> Amos
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] We have a big problems with Squid 3.3.8, it's a bug ?

[Amos Jeffries]

On 31/03/2016 10:18 p.m., Olivier CALVANO wrote:
> anyone think's if this bug are on 3.5 version too ?
> 

It is difficult to say without actually knowing the cause (even
roughly). There have been so many things that could be causing it which
changed between those two versions. Even within the 3.5 series - so it
may exist or not in early 3.5 and be different in current releases.

If you are in a position to upgrade to 3.5 and it works okay for you I
recommend doing so anyway. There are significant other issues (like the
security vulnerabilities) that make the upgrade away from older Squid
versions a very good idea.

Amos

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] We have a big problems with Squid 3.3.8, it's a bug ?

[Olivier CALVANO]

anyone think's if this bug are on 3.5 version too ?


2016-03-29 18:22 GMT+02:00 Olivier CALVANO :

> Hi
>
> we use on a new server Squid 3.3.8 on CentOS 7 with a Active Directory
> Authentification (tested in negotiate_wrapper but same
> problems with ntlm_auth) .
>
> That's work's very good a time but without reason, a limited user can't
> access to internet and i don't know why.
>
> In the logs, we have:
>
> 1459266547.967 1200888 172.16.6.39 NONE_ABORTED/000 0 GET
> http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?
> olivier HIER_NONE/- -
> 1459266567.771 3538111 172.16.6.14 NONE_ABORTED/000 0 GET http://yahoo.fr/
> olivier HIER_NONE/- -
> 1459267856.877  30609 172.16.6.39 NONE_ABORTED/000 0 GET
> http://officecdn.microsoft.com/Office/Data/v32.cab olivier HIER_NONE/- -
> 1459267917.860  60713 172.16.6.39 NONE_ABORTED/000 0 HEAD
> http://officecdn.microsoft.com/Office/Data/v32.cab olivier HIER_NONE/- -
>
>
> I don't know why but all logs have "NONE_ABORTED/000"
> anyone know this errors ?
>
>
> If, on the same PC, i change the username, that's work ! reconnect with
> the old username and the problems start
>
> regards
> Olivier
>
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] We have a big problems with Squid 3.3.8, it's a bug ?

[Olivier CALVANO]

put keep at off but no change.

I don't think's that it's malware, it's not all time the same username

today, 5 new usernames with the same problems between 13:20 and 16:15

i don't understand the problems :<



2016-03-30 12:56 GMT+02:00 Amos Jeffries :

> On 30/03/2016 9:40 p.m., Olivier CALVANO wrote:
> > Hi
> >
> > I use:
> >
> > ## negotiate kerberos and ntlm authentication
> > auth_param negotiate program /usr/local/bin/negotiate_wrapper --ntlm
> > /usr/bin/ntlm_auth --diagnostics --helper-protocol=squid-2.5-ntlmssp
> > --kerberos /usr/lib64/squid/squid_kerb_auth -d -s GSS_C_NO_NAME
> > auth_param negotiate children 100 startup=10 idle=1
> > auth_param negotiate keep_alive on
> >
> > ## Module d'authentification NTLM
> > auth_param ntlm program /usr/bin/ntlm_auth --diagnostics
> > --helper-protocol=squid-2.5-ntlmssp
> > auth_param ntlm children 100 startup=10 idle=1
> > auth_param ntlm keep_alive on
>
>
> Try with "keep_alive off" on both of those auth methods. This does not
> conflict with connection keep-alive in genral, just closes the
> connection at a very specific time in the auth handshake. Without that
> certain IE and Firefox can have problems authenticating properly.
>
> Given that the client waited 20 minutes for those WU requests to happen
> I doubt it is an actual user. Probably an automated WU background
> process doing its thing while they happen to be logged in. Which means
> the IE behaviour is relevant.
>
> The yahoo.fr request being 1 hr long is very odd though. That is
> something I'd expect to see from a real person user. But not waiting an
> hour for. Could they be infected with some toolbar malware?
>
> Amos
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] We have a big problems with Squid 3.3.8, it's a bug ?

[Amos Jeffries]

On 30/03/2016 9:40 p.m., Olivier CALVANO wrote:
> Hi
> 
> I use:
> 
> ## negotiate kerberos and ntlm authentication
> auth_param negotiate program /usr/local/bin/negotiate_wrapper --ntlm
> /usr/bin/ntlm_auth --diagnostics --helper-protocol=squid-2.5-ntlmssp
> --kerberos /usr/lib64/squid/squid_kerb_auth -d -s GSS_C_NO_NAME
> auth_param negotiate children 100 startup=10 idle=1
> auth_param negotiate keep_alive on
> 
> ## Module d'authentification NTLM
> auth_param ntlm program /usr/bin/ntlm_auth --diagnostics
> --helper-protocol=squid-2.5-ntlmssp
> auth_param ntlm children 100 startup=10 idle=1
> auth_param ntlm keep_alive on


Try with "keep_alive off" on both of those auth methods. This does not
conflict with connection keep-alive in genral, just closes the
connection at a very specific time in the auth handshake. Without that
certain IE and Firefox can have problems authenticating properly.

Given that the client waited 20 minutes for those WU requests to happen
I doubt it is an actual user. Probably an automated WU background
process doing its thing while they happen to be logged in. Which means
the IE behaviour is relevant.

The yahoo.fr request being 1 hr long is very odd though. That is
something I'd expect to see from a real person user. But not waiting an
hour for. Could they be infected with some toolbar malware?

Amos

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] We have a big problems with Squid 3.3.8, it's a bug ?

[Olivier CALVANO]

Hi

I use:

## negotiate kerberos and ntlm authentication
auth_param negotiate program /usr/local/bin/negotiate_wrapper --ntlm
/usr/bin/ntlm_auth --diagnostics --helper-protocol=squid-2.5-ntlmssp
--kerberos /usr/lib64/squid/squid_kerb_auth -d -s GSS_C_NO_NAME
auth_param negotiate children 100 startup=10 idle=1
auth_param negotiate keep_alive on

## Module d'authentification NTLM
auth_param ntlm program /usr/bin/ntlm_auth --diagnostics
--helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 100 startup=10 idle=1
auth_param ntlm keep_alive on

## Si echec du NTLM proposer la fenetre d'authentification
auth_param basic program /usr/lib64/squid/basic_ldap_auth -R -b
dc=mydomain,dc=fr -f sAMAccountName=%s -D cn=Proxy,ou=vpn,dc=mydomain,dc=fr
-w "mypass" -t 3 -H 172.16.1.21
auth_param basic children 40 startup=5 idle=1
auth_param basic realm Proxy
#auth_param basic credentialsttl 2 hours
auth_param basic credentialsttl 1 minute


But same problems if i put :

## negotiate kerberos and ntlm authentication
#auth_param negotiate program /usr/local/bin/negotiate_wrapper --ntlm
/usr/bin/ntlm_auth --diagnostics --helper-protocol=squid-2.5-ntlmssp
--kerberos /usr/lib64/squid/squid_kerb_auth -d -s GSS_C_NO_NAME
#auth_param negotiate children 100 startup=10 idle=1
#auth_param negotiate keep_alive on



Yes i have the login/password of the users (on >5000 accounts, we have
10/20 accounts with this problems)


I have a second server but for Hight Availability


Sample of problems with one username
 before 11:17am that's work's
 at 11:17am username don't have access to internet and in logs we have
the error.
 at 07:30pm the username have now internet access ..


regards
Olivier



2016-03-30 9:59 GMT+02:00 Kinkie :

> Are you using BASIC, ntlm or kerberos?
> Do you know that user's password in order to run some tests?
> Do you have some other proxy or box where you can run some tests?
> AD is a complex system, so the first thing to do is to understand I'd the
> problem is caused by ad, by the system, by something related to the user or
> to the author helper or to squid.
> On Mar 30, 2016 9:50 AM, "Olivier CALVANO"  wrote:
>
>> Anyone know this problems ?
>>
>>
>> 2016-03-29 18:22 GMT+02:00 Olivier CALVANO :
>>
>>> Hi
>>>
>>> we use on a new server Squid 3.3.8 on CentOS 7 with a Active Directory
>>> Authentification (tested in negotiate_wrapper but same
>>> problems with ntlm_auth) .
>>>
>>> That's work's very good a time but without reason, a limited user can't
>>> access to internet and i don't know why.
>>>
>>> In the logs, we have:
>>>
>>> 1459266547.967 1200888 172.16.6.39 NONE_ABORTED/000 0 GET
>>> http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?
>>> olivier HIER_NONE/- -
>>> 1459266567.771 3538111 172.16.6.14 NONE_ABORTED/000 0 GET
>>> http://yahoo.fr/ olivier HIER_NONE/- -
>>> 1459267856.877  30609 172.16.6.39 NONE_ABORTED/000 0 GET
>>> http://officecdn.microsoft.com/Office/Data/v32.cab olivier HIER_NONE/- -
>>> 1459267917.860  60713 172.16.6.39 NONE_ABORTED/000 0 HEAD
>>> http://officecdn.microsoft.com/Office/Data/v32.cab olivier HIER_NONE/- -
>>>
>>>
>>> I don't know why but all logs have "NONE_ABORTED/000"
>>> anyone know this errors ?
>>>
>>>
>>> If, on the same PC, i change the username, that's work ! reconnect with
>>> the old username and the problems start
>>>
>>> regards
>>> Olivier
>>>
>>
>>
>> ___
>> squid-users mailing list
>> squid-users@lists.squid-cache.org
>> http://lists.squid-cache.org/listinfo/squid-users
>>
>>
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] We have a big problems with Squid 3.3.8, it's a bug ?

[Kinkie]

Are you using BASIC, ntlm or kerberos?
Do you know that user's password in order to run some tests?
Do you have some other proxy or box where you can run some tests?
AD is a complex system, so the first thing to do is to understand I'd the
problem is caused by ad, by the system, by something related to the user or
to the author helper or to squid.
On Mar 30, 2016 9:50 AM, "Olivier CALVANO"  wrote:

> Anyone know this problems ?
>
>
> 2016-03-29 18:22 GMT+02:00 Olivier CALVANO :
>
>> Hi
>>
>> we use on a new server Squid 3.3.8 on CentOS 7 with a Active Directory
>> Authentification (tested in negotiate_wrapper but same
>> problems with ntlm_auth) .
>>
>> That's work's very good a time but without reason, a limited user can't
>> access to internet and i don't know why.
>>
>> In the logs, we have:
>>
>> 1459266547.967 1200888 172.16.6.39 NONE_ABORTED/000 0 GET
>> http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?
>> olivier HIER_NONE/- -
>> 1459266567.771 3538111 172.16.6.14 NONE_ABORTED/000 0 GET
>> http://yahoo.fr/ olivier HIER_NONE/- -
>> 1459267856.877  30609 172.16.6.39 NONE_ABORTED/000 0 GET
>> http://officecdn.microsoft.com/Office/Data/v32.cab olivier HIER_NONE/- -
>> 1459267917.860  60713 172.16.6.39 NONE_ABORTED/000 0 HEAD
>> http://officecdn.microsoft.com/Office/Data/v32.cab olivier HIER_NONE/- -
>>
>>
>> I don't know why but all logs have "NONE_ABORTED/000"
>> anyone know this errors ?
>>
>>
>> If, on the same PC, i change the username, that's work ! reconnect with
>> the old username and the problems start
>>
>> regards
>> Olivier
>>
>
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>
>
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] We have a big problems with Squid 3.3.8, it's a bug ?

[Olivier CALVANO]

Anyone know this problems ?


2016-03-29 18:22 GMT+02:00 Olivier CALVANO :

> Hi
>
> we use on a new server Squid 3.3.8 on CentOS 7 with a Active Directory
> Authentification (tested in negotiate_wrapper but same
> problems with ntlm_auth) .
>
> That's work's very good a time but without reason, a limited user can't
> access to internet and i don't know why.
>
> In the logs, we have:
>
> 1459266547.967 1200888 172.16.6.39 NONE_ABORTED/000 0 GET
> http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?
> olivier HIER_NONE/- -
> 1459266567.771 3538111 172.16.6.14 NONE_ABORTED/000 0 GET http://yahoo.fr/
> olivier HIER_NONE/- -
> 1459267856.877  30609 172.16.6.39 NONE_ABORTED/000 0 GET
> http://officecdn.microsoft.com/Office/Data/v32.cab olivier HIER_NONE/- -
> 1459267917.860  60713 172.16.6.39 NONE_ABORTED/000 0 HEAD
> http://officecdn.microsoft.com/Office/Data/v32.cab olivier HIER_NONE/- -
>
>
> I don't know why but all logs have "NONE_ABORTED/000"
> anyone know this errors ?
>
>
> If, on the same PC, i change the username, that's work ! reconnect with
> the old username and the problems start
>
> regards
> Olivier
>
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] We have a big problems with Squid 3.3.8, it's a bug ?

[Rafael Akchurin]

Hello Olivier,

I really do not know. This also is of great interest to me.
Hopefully knowledgeable people on the list will be able to explain.

Best regards,
Rafael

From: Olivier CALVANO [mailto:o.calv...@gmail.com]
Sent: Tuesday, March 29, 2016 7:32 PM
To: Rafael Akchurin <rafael.akchu...@diladele.com>
Cc: squid-users@lists.squid-cache.org
Subject: Re: [squid-users] We have a big problems with Squid 3.3.8, it's a bug ?

hi

thanks for your answer, i have a entry into generic information.
it must remove? but this will not happen again?

regards
olivier

2016-03-29 18:33 GMT+02:00 Rafael Akchurin 
<rafael.akchu...@diladele.com<mailto:rafael.akchu...@diladele.com>>:
Hello Olivier,

See if you have credentials cached in the credentials manager in windows.

Best regards,
Rafael

From: squid-users 
[mailto:squid-users-boun...@lists.squid-cache.org<mailto:squid-users-boun...@lists.squid-cache.org>]
 On Behalf Of Olivier CALVANO
Sent: Tuesday, March 29, 2016 6:23 PM
To: squid-users@lists.squid-cache.org<mailto:squid-users@lists.squid-cache.org>
Subject: [squid-users] We have a big problems with Squid 3.3.8, it's a bug ?

Hi

we use on a new server Squid 3.3.8 on CentOS 7 with a Active Directory 
Authentification (tested in negotiate_wrapper but same
problems with ntlm_auth) .

That's work's very good a time but without reason, a limited user can't access 
to internet and i don't know why.

In the logs, we have:

1459266547.967 1200888 172.16.6.39 NONE_ABORTED/000 0 GET 
http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?
 olivier HIER_NONE/- -
1459266567.771 3538111 172.16.6.14 NONE_ABORTED/000 0 GET http://yahoo.fr/ 
olivier HIER_NONE/- -
1459267856.877  30609 172.16.6.39 NONE_ABORTED/000 0 GET 
http://officecdn.microsoft.com/Office/Data/v32.cab olivier HIER_NONE/- -
1459267917.860  60713 172.16.6.39 NONE_ABORTED/000 0 HEAD 
http://officecdn.microsoft.com/Office/Data/v32.cab olivier HIER_NONE/- -


I don't know why but all logs have "NONE_ABORTED/000"
anyone know this errors ?


If, on the same PC, i change the username, that's work ! reconnect with the old 
username and the problems start

regards
Olivier

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] We have a big problems with Squid 3.3.8, it's a bug ?

[Olivier CALVANO]

hi

thanks for your answer, i have a entry into generic information.
it must remove? but this will not happen again?

regards
olivier

2016-03-29 18:33 GMT+02:00 Rafael Akchurin <rafael.akchu...@diladele.com>:

> Hello Olivier,
>
>
>
> See if you have credentials cached in the credentials manager in windows.
>
>
>
> Best regards,
>
> Rafael
>
>
>
> *From:* squid-users [mailto:squid-users-boun...@lists.squid-cache.org] *On
> Behalf Of *Olivier CALVANO
> *Sent:* Tuesday, March 29, 2016 6:23 PM
> *To:* squid-users@lists.squid-cache.org
> *Subject:* [squid-users] We have a big problems with Squid 3.3.8, it's a
> bug ?
>
>
>
> Hi
>
>
>
> we use on a new server Squid 3.3.8 on CentOS 7 with a Active Directory
> Authentification (tested in negotiate_wrapper but same
>
> problems with ntlm_auth) .
>
>
>
> That's work's very good a time but without reason, a limited user can't
> access to internet and i don't know why.
>
>
>
> In the logs, we have:
>
>
>
> 1459266547.967 1200888 172.16.6.39 NONE_ABORTED/000 0 GET
> http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?
> olivier HIER_NONE/- -
>
> 1459266567.771 3538111 172.16.6.14 NONE_ABORTED/000 0 GET http://yahoo.fr/
> olivier HIER_NONE/- -
>
> 1459267856.877  30609 172.16.6.39 NONE_ABORTED/000 0 GET
> http://officecdn.microsoft.com/Office/Data/v32.cab olivier HIER_NONE/- -
>
> 1459267917.860  60713 172.16.6.39 NONE_ABORTED/000 0 HEAD
> http://officecdn.microsoft.com/Office/Data/v32.cab olivier HIER_NONE/- -
>
>
>
>
>
> I don't know why but all logs have "NONE_ABORTED/000"
>
> anyone know this errors ?
>
>
>
>
>
> If, on the same PC, i change the username, that's work ! reconnect with
> the old username and the problems start
>
>
>
> regards
>
> Olivier
>
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] We have a big problems with Squid 3.3.8, it's a bug ?

[Rafael Akchurin]

Hello Olivier,

See if you have credentials cached in the credentials manager in windows.

Best regards,
Rafael

From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf 
Of Olivier CALVANO
Sent: Tuesday, March 29, 2016 6:23 PM
To: squid-users@lists.squid-cache.org
Subject: [squid-users] We have a big problems with Squid 3.3.8, it's a bug ?

Hi

we use on a new server Squid 3.3.8 on CentOS 7 with a Active Directory 
Authentification (tested in negotiate_wrapper but same
problems with ntlm_auth) .

That's work's very good a time but without reason, a limited user can't access 
to internet and i don't know why.

In the logs, we have:

1459266547.967 1200888 172.16.6.39 NONE_ABORTED/000 0 GET 
http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?
 olivier HIER_NONE/- -
1459266567.771 3538111 172.16.6.14 NONE_ABORTED/000 0 GET http://yahoo.fr/ 
olivier HIER_NONE/- -
1459267856.877  30609 172.16.6.39 NONE_ABORTED/000 0 GET 
http://officecdn.microsoft.com/Office/Data/v32.cab olivier HIER_NONE/- -
1459267917.860  60713 172.16.6.39 NONE_ABORTED/000 0 HEAD 
http://officecdn.microsoft.com/Office/Data/v32.cab olivier HIER_NONE/- -


I don't know why but all logs have "NONE_ABORTED/000"
anyone know this errors ?


If, on the same PC, i change the username, that's work ! reconnect with the old 
username and the problems start

regards
Olivier
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

[squid-users] We have a big problems with Squid 3.3.8, it's a bug ?

[Olivier CALVANO]

Hi

we use on a new server Squid 3.3.8 on CentOS 7 with a Active Directory
Authentification (tested in negotiate_wrapper but same
problems with ntlm_auth) .

That's work's very good a time but without reason, a limited user can't
access to internet and i don't know why.

In the logs, we have:

1459266547.967 1200888 172.16.6.39 NONE_ABORTED/000 0 GET
http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?
olivier HIER_NONE/- -
1459266567.771 3538111 172.16.6.14 NONE_ABORTED/000 0 GET http://yahoo.fr/
olivier HIER_NONE/- -
1459267856.877  30609 172.16.6.39 NONE_ABORTED/000 0 GET
http://officecdn.microsoft.com/Office/Data/v32.cab olivier HIER_NONE/- -
1459267917.860  60713 172.16.6.39 NONE_ABORTED/000 0 HEAD
http://officecdn.microsoft.com/Office/Data/v32.cab olivier HIER_NONE/- -


I don't know why but all logs have "NONE_ABORTED/000"
anyone know this errors ?


If, on the same PC, i change the username, that's work ! reconnect with the
old username and the problems start

regards
Olivier
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users