Re: [squid-users] After a Successful PURGE, Still Get TCP-DENIED

2014-12-14 Thread dkovacevic
Thank you Amos, setting the TTL worked. I had no idea that the helpers had a separate cache, and that was creating a lot of frustration for me. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/After-a-Successful-PURGE-Still-Get-TCP-DENIED-tp4668699p4668701.ht

Re: [squid-users] Help for Squid running

2014-12-14 Thread Pavel Kazlenka
Hi Hoang, This could be a known bug: http://bugs.squid-cache.org/show_bug.cgi?id=4057, the fix is attached, but still not in main tree. You probably should rebuild squid within the fix attached to bugzilla issue for now. On 12/13/2014 12:16 PM, Hoang Nguyen wrote: Dear Amos, Could you help

[squid-users] reply_body_max size

2014-12-14 Thread Danny
Hi, If I want to restrict user's download size: reply_body_max_size 10 MB localnet_finance localnet_engineering reply_body_max_size 15 MB localnet_manufacturing localnet_stores Will the above 2 lines do what it is supposed to and allow unrestricted downloads for all other local networks? Thank

Re: [squid-users] Disable SSLv3 on Squid doesn't seem to work

2014-12-14 Thread Alexander Samad
does that need to be https_port ? this is what I have used https_port 2.7.3.1:443 accel cert=/etc/httpd/conf.d/a,b,c.crt key=/etc/httpd/conf.d/a.b.c.key defaultsite=a.b.c options=NO_SSLv2,NO_SSLv3 The only thing I haven't got working is PFS. I test with https://www.ssllabs.com/ Alex On 22 No

Re: [squid-users] Disable SSLv3 on Squid doesn't seem to work

2014-12-14 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 15/12/2014 4:53 p.m., Alexander Samad wrote: > does that need to be https_port ? Not particularly when using SSL interception ("SSL-bump"). > > this is what I have used > > https_port 2.7.3.1:443 accel cert=/etc/httpd/conf.d/a,b,c.crt > key=/e

Re: [squid-users] ICAP: how to get port of X-Client-IP

2014-12-14 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 13/12/2014 9:09 a.m., Александр Бубнов wrote: > I do not need to map it back remotely. I just need to know it. One > of my applications collects logs about all connections on a desktop > PC and another (ICAP server) collects what that applications s

Re: [squid-users] Squid 2.7, 3.4 and 3.5 Videos/Music/Images/Libraris/CDNs Booster

2014-12-14 Thread Stakres
Hi All, New build 2.16 taking care new websites in de-duplication... Enjoy Bye Fred -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-2-7-3-4-and-3-5-Videos-Music-Images-Libraries-CDNs-Booster-