Re: [squid-users] ssl_bump and SNI

2015-06-01 Thread James Lay
On Mon, 2015-06-01 at 12:12 +1000, Nathan Hoad wrote: Hello, Here are some excerpts of what I've used, and an example Python helper: https_port 60099 intercept ssl-bump tcpkeepalive cert=/path/to/cert.pem key=/path/to/key.pem options=NO_SSLv2,NO_SSLv3 generate-host-certificates=on

[squid-users] Looking for a recomendation for tutorial for transparent proxy under Ubuntu

2015-06-01 Thread dkandle
I am using Ubuntu 14.04 on a server with multiple NICs. I would like to set it up as a transparent proxy. I have the router working and I had squid working as an explicit proxy (where I set the IP address of the server as the proxy in my client's browser). Is there a good tutorial which covers

Re: [squid-users] rock storage

2015-06-01 Thread Amos Jeffries
On 2/06/2015 5:13 a.m., Hussam Al-Tayeb wrote: Hello, I added a 5000MB rock storage entry in squid.conf when it filled up, squid cache manager said: Storage Swap size: 512 KB Storage Swap capacity: 100.0% used, 0.0% free but du -BM says 4703M is the size of the rock

Re: [squid-users] Looking for a recomendation for tutorial for transparent proxy under Ubuntu

2015-06-01 Thread dkandle
Slight correction to my iptables: iptables -t nat -A PREROUTING -i eth2 -s 10.1.10.200/28 -p tcp --dport 80 -j REDIRECT --to-port 3128 iptables -t nat -A PREROUTING -i eth2 -s 10.1.10.200/28 -p tcp --dport 443 -j REDIRECT --to-port 3129 I also don't understand why the first ip address

Re: [squid-users] Looking for a recomendation for tutorial for transparent proxy under Ubuntu

2015-06-01 Thread dkandle
Amos Jeffries wrote On 2/06/2015 10:57 a.m., dkandle wrote: I also don't understand why the first ip address specification didn't work but I had to change the 10.1.10.1 to 10.100 which is the exact ip address of the client. I thought the /28 would have caused this to match any IP address