Re: [squid-users] Unable to get TPROXY working with squid

2015-03-02 Thread Amos Jeffries
On 3/03/2015 6:41 a.m., Carvaka Guru wrote: > On Thu, Feb 26, 2015 at 8:30 PM, Amos Jeffries wrote: > >> On 27/02/2015 12:41 p.m., Carvaka Guru wrote: >>> I am building a simple linux firewall router with eth1 LAN port and eth0 >>> WAN port. I have squid3 running on it that I have built with netf

Re: [squid-users] assertion failed: client_side.cc:1515: "connIsUsable(http->getConn())

2015-03-02 Thread Dan Charlesworth
Hey Amos Sorry for taking a while to get back to you with this. I’ve attached the output of the gdb commands you listed. Not sure if the errors are from the trace or from my print commands themselves—anyway, see attached. Cheers! (gdb) frame 3 #3 0x0053e2cf in clientSocketRecipient (

Re: [squid-users] squid and post method

2015-03-02 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 So what else can be interesting in POST. ;) 02.03.15 23:48, HackXBack пишет: > Yuri :P Why you are asking > > > > -- View this message in context: > http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-and-post-method-tp4670122p4670166.html

Re: [squid-users] squid and post method

2015-03-02 Thread HackXBack
Yuri :P Why you are asking -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-and-post-method-tp4670122p4670166.html Sent from the Squid - Users mailing list archive at Nabble.com. ___ squid-users mailing list s

Re: [squid-users] Unable to get TPROXY working with squid

2015-03-02 Thread Carvaka Guru
On Thu, Feb 26, 2015 at 8:30 PM, Amos Jeffries wrote: > On 27/02/2015 12:41 p.m., Carvaka Guru wrote: > > I am building a simple linux firewall router with eth1 LAN port and eth0 > > WAN port. I have squid3 running on it that I have built with netfilter > > enabled. The linux version running on t

Re: [squid-users] Different squid-3.5.2 compile error on OpenBSD 5.6

2015-03-02 Thread Amos Jeffries
Thank you Stuart! We have officially dropped support for SSLv2 in Squid-3.6, so the offending line there is now just erased, but your patch is applied to Squid-3.5. The SSL compression part is in Squid-3, will be in 3.5 in a few days. I'm not going to merge the atomics part quite yet. I'd like t

Re: [squid-users] Different squid-3.5.2 compile error on OpenBSD 5.6

2015-03-02 Thread Stuart Henderson
On 2015-02-26, Alan Palmer wrote: > While waiting with baited breath for --with-libressl support, I > installed openssl-1.02 on openbsd-5.6 to > get squid to compile, but got this error in the final linking: > > MemStore.o(.text+0x4fe0): In function > `MemStore::copyFromShm(StoreEntry&, int, Ipc

Re: [squid-users] Squid 3.5.2 and Avast free anti-virus

2015-03-02 Thread Alan Palmer
> This is roughly what the inter-tubes usually look like: > > browser -> AV ===> router ===> NAT -> Squid ===> Internet > In this configuration, chrome gives the error In Browser->AV->router->NAT->Inet Or Browser->router->NAT(redirect)->squid->Inet Things work just fine, chrome will trust the

Re: [squid-users] Squid 3.5.2 and Avast free anti-virus

2015-03-02 Thread Amos Jeffries
On 3/03/2015 1:29 a.m., Alan Palmer wrote: > Squid 3.5.2 intercept mode and Avast free antivirus 2015 on windows 7 > aren't playing well together. Chrome returns a ca invalid error, > details reveal > its the avast web/mail shield cert that its not being trusted. > Everything works if > I turn the

Re: [squid-users] question about encrypted connection between https client and Squid

2015-03-02 Thread Amos Jeffries
On 3/03/2015 1:15 a.m., Julianne Bielski wrote: > > Amos, > > Per: > There *is* a Right Way. > > It is this: > > 1) using this in squid.conf: > https_port 3129 cert=/path/to/proxy.pem > > 2) client connects to 3129 using TCP, then performs TLS handshake. > > 3) client sends requests insi

[squid-users] Squid 3.5.2 and Avast free anti-virus

2015-03-02 Thread Alan Palmer
Squid 3.5.2 intercept mode and Avast free antivirus 2015 on windows 7 aren't playing well together. Chrome returns a ca invalid error, details reveal its the avast web/mail shield cert that its not being trusted. Everything works if I turn the webshield off, or on a very strange note, works fin

Re: [squid-users] question about encrypted connection between https client and Squid

2015-03-02 Thread Julianne Bielski
Amos, Per: There *is* a Right Way. It is this: 1) using this in squid.conf: https_port 3129 cert=/path/to/proxy.pem 2) client connects to 3129 using TCP, then performs TLS handshake. 3) client sends requests inside the encrypted connection as if they were HTTP to a proxy but using https:

Re: [squid-users] squid and post method

2015-03-02 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Logins/passwords? ;) 02.03.15 17:24, HackXBack пишет: > POST request come from input form . i want to read this data in > squid . > > > > -- View this message in context: > http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-and-post-method-tp

Re: [squid-users] squid and post method

2015-03-02 Thread HackXBack
POST request come from input form . i want to read this data in squid . -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-and-post-method-tp4670122p4670156.html Sent from the Squid - Users mailing list archive at Nabble.com. __

Re: [squid-users] How to use access.log codes in custom error page

2015-03-02 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 A-ha! Can I use ICAP - for example, with ecap to extract metadata from ecap adapters? 02.03.15 17:09, Amos Jeffries пишет: > On 2/03/2015 11:56 p.m., Yuri Voinov wrote: >> But Amos, >> >> wait: >> >> root @ cthulhu / # /usr/local/squid/bin/squidcli

Re: [squid-users] How to use access.log codes in custom error page

2015-03-02 Thread Amos Jeffries
On 2/03/2015 11:56 p.m., Yuri Voinov wrote: > But Amos, > > wait: > > root @ cthulhu / # /usr/local/squid/bin/squidclient -p 3127 -r > http://www.eicar.org/download/eicar_com.zip Sending HTTP request > ... done. HTTP/1.1 301 Moved Permanently Date: Mon, 02 Mar 2015 > 10:55:55 GMT Location: > ht

Re: [squid-users] How to use access.log codes in custom error page

2015-03-02 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 But Amos, wait: root @ cthulhu / # /usr/local/squid/bin/squidclient -p 3127 -r http://www.eicar.org/download/eicar_com.zip Sending HTTP request ... done. HTTP/1.1 301 Moved Permanently Date: Mon, 02 Mar 2015 10:55:55 GMT Location: http://cthulhu.loca

Re: [squid-users] How to use access.log codes in custom error page

2015-03-02 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Eh... :( No way to get metadata from adaptation module? 02.03.15 16:43, Amos Jeffries пишет: > On 2/03/2015 11:25 p.m., Yuri Voinov wrote: >> Not clear: >> >> I can use %adapt directly? This completely undocumented. > > The documented ones are

Re: [squid-users] How to use access.log codes in custom error page

2015-03-02 Thread Amos Jeffries
On 2/03/2015 11:25 p.m., Yuri Voinov wrote: > Not clear: > > I can use %adapt directly? This completely undocumented. The documented ones are the only ones that work at present. Patching is required for anything else. Amos ___ squid-users mailing list

Re: [squid-users] How to use access.log codes in custom error page

2015-03-02 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Not clear: I can use %adapt directly? This completely undocumented. I.e. deny_info http://192.168.100.251:8080/cgi-bin/virus_warn.cgi?clientaddr=%a&url=%u&virus=%adapt clamav_service_resp ? This works with %u and %a, but can't get adapt value. Not