[squid-dev] squid tcp_outgoing_address feature not working

2015-04-15 Thread naishal0748
I have setup squid transparent proxy with following configurations in centos 6.2 : eth0 - LAN Network eth1 - WAN1 - IP - 192.168.3.15 - Gateway IP - 192.168.3.1 eth2 - WAN2 - IP - 192.168.5.15 - Gateway IP - 192.168.5.1 (Default Gateway) I want to route 10.2.0.0/16 traffic to WAN1 I have used

Re: [squid-dev] squid tcp_outgoing_address feature not working

2015-04-15 Thread Amos Jeffries
On 15/04/2015 9:16 p.m., naishal0748 wrote:> > I have setup squid transparent proxy with following configurations in centos > 6.2 : > > eth0 - LAN Network > eth1 - WAN1 - IP - 192.168.3.15 - Gateway IP - 192.168.3.1 > eth2 - WAN2 - IP - 192.168.5.15 - Gateway IP - 192.168.5.1 (Default Gateway) > >

Re: [squid-dev] Basic tests results for the proxy protocol with squid.

2015-04-15 Thread Amos Jeffries
On 16/03/2015 4:32 a.m., Eliezer Croitoru wrote: > Hey Amos, > > The setup I have used to test the proxy protocol is: > - 192.168.10.0/24 network. > - 192.168.10.131 basic forward proxy client(firefox) > - 192.168.10.151 haproxy+squid host > > The haproxy is listening on port 13128 which is open

[squid-dev] Build failed in Jenkins: trunk-matrix » clang,j-fbsd-93 #169

2015-04-15 Thread noc
See -- [...truncated 2982 lines...] ccache clang++ -DHAVE_CONFIG_H-I../../../../.. -I../../../../../include -I../../../../../lib -I../../../../../src -I../../../inclu

[squid-dev] Build failed in Jenkins: trunk-matrix » gcc,j-fbsd-93 #169

2015-04-15 Thread noc
See -- [...truncated 4360 lines...] /usr/local/lib/gcc49/include/c++/bits/stl_vector.h:803: undefined reference to `std::__throw_out_of_range_fmt(char const*, ...)' /usr/loca

Re: [squid-dev] [PATCH] splicing resumed sessions

2015-04-15 Thread Amos Jeffries
Okay, thats now merged back in squid-3.5-13798. Amos ___ squid-dev mailing list squid-dev@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-dev

[squid-dev] [RFC] removal of SSL version options

2015-04-15 Thread Amos Jeffries
Squid currently has several "version" options to set the SSL/TLS protocol version. http(s)_port ... version= cache_peer ... sslversion sslproxy_version ... However, 1) the option configures version X-only. Which does not follow with current best practice of most other TLS enabled software

[squid-dev] Build failed in Jenkins: trunk-matrix » clang,d-ubuntu-trusty #169

2015-04-15 Thread noc
See -- [...truncated 55278 lines...] make[4]: Entering directory `

[squid-dev] [PATCH] Negotiate Kerberos authentication request size exceeds output buffer size

2015-04-15 Thread Tsantilas Christos
Despite the "must match" comment, MAX_AUTHTOKEN_LEN in auth/UserRequest.h got out of sync with similar constants in Negotiate helpers. A 32KB buffer cannot fit some helper requests (e.g., those carrying Privilege Account Certificate information in the client's Kerberos ticket). Each truncated

Re: [squid-dev] [PATCH] Negotiate Kerberos authentication request size exceeds output buffer size

2015-04-15 Thread Amos Jeffries
On 16/04/2015 2:33 a.m., Tsantilas Christos wrote: > Despite the "must match" comment, MAX_AUTHTOKEN_LEN in > auth/UserRequest.h got out of sync with similar constants in Negotiate > helpers. A 32KB buffer cannot fit some helper requests (e.g., those > carrying Privilege Account Certificate informa

[squid-dev] [PATCH] pconn_lifetime robustness fixes

2015-04-15 Thread Tsantilas Christos
Hi all, I am attaching which fixes pconn_lifetime feature. We had a long discussion for this feature, which is resulted to the patch r13780, but unfortunately, Measurement Factory customers reported problems: 1. Squid closed connections with partially received requests when they reached pcon

[squid-dev] [PATCH] support clang3.5+/libc++on FreeBSD 9.3 and MacOS

2015-04-15 Thread Kinkie
Hi, the following patch enables using libc++ in place of libstdc++. This is necessary with recent clang++ on some platforms, such as FreeBSD 9.3 and reportedly newer MacOS. With this patch squid builds using clang-3.5 and libc++; the make check still fails due to libcppunit having a different c+

Re: [squid-dev] [PATCH] support clang3.5+/libc++on FreeBSD 9.3 and MacOS

2015-04-15 Thread Amos Jeffries
On 16/04/2015 4:11 a.m., Kinkie wrote: > Hi, >the following patch enables using libc++ in place of libstdc++. > This is necessary with recent clang++ on some platforms, such as > FreeBSD 9.3 and reportedly newer MacOS. > With this patch squid builds using clang-3.5 and libc++; the make > check

[squid-dev] Build failed in Jenkins: trunk-matrix » clang,j-fbsd-93 #170

2015-04-15 Thread noc
See -- [...truncated 2979 lines...] /bin/sh ../../../libtool --tag=CXX--mode=link ccache clang++ -Werror -Qunused-arguments -Wno-deprecated-register -D_REENTRANT -g

[squid-dev] Build failed in Jenkins: trunk-matrix » gcc,j-fbsd-93 #170

2015-04-15 Thread noc
See -- [...truncated 4360 lines...] /usr/local/lib/gcc49/include/c++/bits/stl_vector.h:803: undefined reference to `std::__throw_out_of_range_fmt(char const*, ...)' /usr/loca

[squid-dev] Jenkins build is back to normal : trunk-matrix » clang,d-ubuntu-trusty #170

2015-04-15 Thread noc
See ___ squid-dev mailing list squid-dev@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-dev

[squid-dev] Build failed in Jenkins: trunk-matrix » clang,j-fbsd-93 #171

2015-04-15 Thread noc
See -- [...truncated 2982 lines...] ccache clang++ -DHAVE_CONFIG_H-I../../../../.. -I../../../../../include -I../../../../../lib -I../../../../../src -I../../../inclu

[squid-dev] Build failed in Jenkins: trunk-matrix » gcc,j-fbsd-93 #171

2015-04-15 Thread noc
See -- [...truncated 4360 lines...] /usr/local/lib/gcc49/include/c++/bits/stl_vector.h:803: undefined reference to `std::__throw_out_of_range_fmt(char const*, ...)' /usr/loca

Re: [squid-dev] [RFC] removal of SSL version options

2015-04-15 Thread Alex Rousskov
On 04/15/2015 06:17 AM, Amos Jeffries wrote: > Squid currently has several "version" options to set the SSL/TLS > protocol version. > > http(s)_port ... version= > cache_peer ... sslversion > sslproxy_version ... > > However, > > 1) the option configures version X-only. Which does not foll

Re: [squid-dev] [RFC] removal of SSL version options

2015-04-15 Thread Amos Jeffries
On 16/04/2015 5:35 p.m., Alex Rousskov wrote: > On 04/15/2015 06:17 AM, Amos Jeffries wrote: >> Squid currently has several "version" options to set the SSL/TLS >> protocol version. >> >> http(s)_port ... version= >> cache_peer ... sslversion >> sslproxy_version ... >> >> However, >> >> 1) th