Re: [squid-users] Squid as reverse proxy and image theft protection

2015-01-22 Thread thane
Dear Jeffries, I thank you for your answer. Is possible in your opinion manage also Cookie with an expiration time? Because if I understood correctly your suggestion works great until the users share with some attacker the cookie. The attacker could reuse this cookie to download freely the images

Re: [squid-users] Squid as reverse proxy and image theft protection

2015-01-22 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 22/01/2015 10:25 p.m., th...@sdf.org wrote: Dear Jeffries, I thank you for your answer. Is possible in your opinion manage also Cookie with an expiration time? Because if I understood correctly your suggestion works great until the users

[squid-users] SOLVED / Re: squid-3.5.x / Ipc::Mem::Segment::create failed to shm_open(/squid-cf__metadata.shm): (38) Function not implemented

2015-01-22 Thread Frank Reppin
Hi all, ok - got it sorted after digging through older linux vserver irclogs... Solution was to add: none /dev/shm tmpfs rw,nosuid,nodev,noexec 0 0 to '/etc/vservers/testbed/fstab' and to obviously restart the vserver afterwards. It now starts up just fine (and seems to work). cheers,

[squid-users] squid-3.5.x / Ipc::Mem::Segment::create failed to shm_open(/squid-cf__metadata.shm): (38) Function not implemented

2015-01-22 Thread Frank Reppin
Hi all, we're following 3.4.x (currently 3.4.11) closely and decided to upgrade to 3.5.1 in a test environment today: Environment (test+production) is linux vserver based: host system: Debian Wheezy 7.8 x64 guest system:Debian Wheezy 7.8 x64 kernel+vs patch: 3.14.27-vs2.3.6.14

Re: [squid-users] Local port number logging woes

2015-01-22 Thread Carl-Daniel Hailfinger
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Amos, thanks a lot for your answer. On 22.01.2015 05:22, Amos Jeffries wrote: On 22/01/2015 7:00 a.m., Carl-Daniel Hailfinger wrote: I'm using cascaded/hierarchical Squid instances, one per machine. [...] This works great except for one