Re: [squid-users] ssl_crtd breaks after short time

2015-06-08 Thread Klavs Klavsen
Hi, James Lay just replied to me with his current config.. (pretty much like what he posted), and it seems he does not even try to use http_access rules to filter on urls from https requests.. @Amos: are you certain that there's not an error in how http_access rules are applied to bumped con

Re: [squid-users] Lag Time Displaying SVG files

2015-06-08 Thread Amos Jeffries
On 9/06/2015 9:21 a.m., JR Swartz wrote: > We have a customer that uses Squid (3.x). When viewing the > www.fmcdealer.com web site for their business, standard web pages load as > expected. However, when drilling down into the wiring diagrams (which are > in SVG format), there is exactly a 2 minu

Re: [squid-users] Squid cache_peer in tproxy

2015-06-08 Thread Amos Jeffries
On 9/06/2015 10:32 a.m., Stakres wrote: > Hi Amos, > > Ok, it does confirm our tests. > > Is there a way to do this: > users -> squid1 tproxy -> squid2/squid3 tproxy -> internet (seeing the user > ips) ? > or is it impossible ? Only by intercepting the squid1 port 80 outgoing connections. cache

Re: [squid-users] High-availability and load-balancing between N squid servers

2015-06-08 Thread Amos Jeffries
On 9/06/2015 9:22 a.m., Brendan Kearney wrote: > On 06/08/2015 04:23 PM, Rafael Akchurin wrote: >> Hello all, >> >> What is the recommended approach to perform load balancing and high >> availability between N squid servers? >> I have the following list of requirements to fullfil: >> >> 1) Manage N

Re: [squid-users] Squid doesn't write logs via rsyslog

2015-06-08 Thread Brendan Kearney
On 06/08/2015 06:46 PM, Amos Jeffries wrote: On 8/06/2015 11:02 p.m., Antony Stone wrote: On Monday 08 June 2015 at 12:53:00 (EU time), Robert Lasota wrote: the problem is it still writes logs to files /var/log/access.log or /opt/var/log/access.log (depends what I set in conf) but never to rsy

Re: [squid-users] Squid cache_peer in tproxy

2015-06-08 Thread Stakres
Hi Amos, Ok, it does confirm our tests. Is there a way to do this: users -> squid1 tproxy -> squid2/squid3 tproxy -> internet (seeing the user ips) ? or is it impossible ? in the wiki, there is an option "no-tproxy" in the cache_peer, it would be nice to have a "keep-tproxy" bye Fred -- Vie

Re: [squid-users] Squid doesn't write logs via rsyslog

2015-06-08 Thread Amos Jeffries
On 8/06/2015 11:02 p.m., Antony Stone wrote: > On Monday 08 June 2015 at 12:53:00 (EU time), Robert Lasota wrote: > >> the problem is it still writes logs to files /var/log/access.log or >> /opt/var/log/access.log (depends what I set in conf) but never to rsyslog. >> >> I mean, I have set rsyslog

Re: [squid-users] Squid cache_peer in tproxy

2015-06-08 Thread Amos Jeffries
On 8/06/2015 9:20 p.m., Stakres wrote: > Hi All, > > We're facing a weird issue with the cache_peer and tproxy. > > Squid 3.5.4 > users -> squid1 -> squid2/squid3 -> internet > > squid1: > http_port 3128 > http_port 3129 tproxy > icp_port 3130 > cache_peer 192.168.1.2 parent 3128 3130 proxy-onl

Re: [squid-users] High-availability and load-balancing between N squid servers

2015-06-08 Thread Brendan Kearney
On 06/08/2015 04:23 PM, Rafael Akchurin wrote: Hello all, What is the recommended approach to perform load balancing and high availability between N squid servers? I have the following list of requirements to fullfil: 1) Manage N squid servers that share cache (as far as i understand is done

[squid-users] Lag Time Displaying SVG files

2015-06-08 Thread JR Swartz
We have a customer that uses Squid (3.x). When viewing the www.fmcdealer.com web site for their business, standard web pages load as expected. However, when drilling down into the wiring diagrams (which are in SVG format), there is exactly a 2 minute (120 sec) delay before the diagrams are displa

[squid-users] High-availability and load-balancing between N squid servers

2015-06-08 Thread Rafael Akchurin
Hello all, What is the recommended approach to perform load balancing and high availability between N squid servers? I have the following list of requirements to fullfil: 1) Manage N squid servers that share cache (as far as i understand is done using cache_peer). Desirable. 2) Availability: i

Re: [squid-users] Block whatsapp with transparent proxy

2015-06-08 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 This is the best solution in many cases. ;) 09.06.15 0:11, Jonathan Filogna пишет: > ty yuki, but i finally decided to block whatsapp with pfSense via firewall > rules and aliases > > > > El 08/06/15 a las 12:32, Yuri Voinov escibió: > Feel free

Re: [squid-users] Block whatsapp with transparent proxy

2015-06-08 Thread Jonathan Filogna
ty yuki, but i finally decided to block whatsapp with pfSense via firewall rules and aliases El 08/06/15 a las 12:32, Yuri Voinov escibió: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 https://www.google.com/search?q=squid+watsup+blocking Feel free to Google your question first. 08.06

Re: [squid-users] squidGuard configuration test - echo test

2015-06-08 Thread Helmut Hullen
Hallo, Marcus, Du meintest am 08.06.15: > you can download ufdbGuard here: > https://www.urlfilterdb.com/downloads/software_doc.html > and here: > http://sourceforge.net/projects/ufdbguard/ > ufdbGuard is just like Squid free Open Source Software. > The trial license on www.urlfilterdb.

Re: [squid-users] squidGuard configuration test - echo test

2015-06-08 Thread Marcus Kool
Helmut, you can download ufdbGuard here: https://www.urlfilterdb.com/downloads/software_doc.html and here: http://sourceforge.net/projects/ufdbguard/ ufdbGuard is just like Squid free Open Source Software. The trial license on www.urlfilterdb.com is about the URL database. Best regards,

Re: [squid-users] Block whatsapp with transparent proxy

2015-06-08 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 https://www.google.com/search?q=squid+watsup+blocking Feel free to Google your question first. 08.06.15 20:37, Jonathan Filogna пишет: > Hi all, greetings from Argentina > > I want to know if can be possible block whatsapp for mobiles with a tran

Re: [squid-users] PAM/Radius authentication question with Squid.3.1.10

2015-06-08 Thread Pugal Scout
Thank you Amos. That is helpful, user groups seems to be a good option. I will try that. -JP On Mon, Jun 8, 2015 at 12:43 AM, Amos Jeffries wrote: > On 6/06/2015 7:09 p.m., Pugal Scout wrote: > > Hi, > > > > Apologies if this question has been asked earlier. Is it possible to > setup > > squid

[squid-users] Block whatsapp with transparent proxy

2015-06-08 Thread Jonathan Filogna
Hi all, greetings from Argentina I want to know if can be possible block whatsapp for mobiles with a transparent proxy which squid version should i install? thank you all ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.sq

Re: [squid-users] squidGuard configuration test - echo test

2015-06-08 Thread Patrick
We switched to ufdbGuard recently and were a bit confused on that point as well. But see: https://www.urlfilterdb.com/products/ufdbguard.html "ufdbGuard is copyright-protected, but free for use. Also in commercial environments." The pricing page and licensing model you have linked is only for th

Re: [squid-users] squidGuard configuration test - echo test

2015-06-08 Thread Helmut Hullen
Hallo, Marcus, Du meintest am 07.06.15: > The URL director interface was changed with Squid 3.4, see also > http://wiki.squid-cache.org/Features/RedirectorsThe latest version of > squidguard is 1.5 beta from 2010 and squidGuard does not support the > new interface of Squid. > ufdbGuard is also a

Re: [squid-users] squidGuard configuration test - echo test

2015-06-08 Thread Helmut Hullen
Hallo, Amos, Du meintest am 08.06.15: >> Under squid 3.4 (and many earlier versions) I use >> >> url_rewrite_program /usr/bin/squidGuard >> >> How must I change this line for squid 3.5? > You should not have to change the SG command line or configuration. Ok! > Whats needed is a patch

Re: [squid-users] Squid doesn't write logs via rsyslog

2015-06-08 Thread Antony Stone
On Monday 08 June 2015 at 12:53:00 (EU time), Robert Lasota wrote: > the problem is it still writes logs to files /var/log/access.log or > /opt/var/log/access.log (depends what I set in conf) but never to rsyslog. > > I mean, I have set rsyslog to it send logs to remote central server, and > from

[squid-users] Squid cache_peer in tproxy

2015-06-08 Thread Stakres
Hi All, We're facing a weird issue with the cache_peer and tproxy. Squid 3.5.4 users -> squid1 -> squid2/squid3 -> internet squid1: http_port 3128 http_port 3129 tproxy icp_port 3130 cache_peer 192.168.1.2 parent 3128 3130 proxy-only weighted-round-robin background-ping no-digest cache_peer 19

Re: [squid-users] TCP_MISS/403 353 HEAD text/plain Error help !!

2015-06-08 Thread snakeeyes
Hi Amos thanks for explanation But the issue is it works fine from other paid proxies . Again , the app is a link converter and it connect to proxy I will give u sample how app works : It request link as below: http://convertlink-bla-bla-bla.com/ytd/Youtube.class.php?url=https://www.youtube.com

Re: [squid-users] squidGuard configuration test - echo test

2015-06-08 Thread Amos Jeffries
On 8/06/2015 8:38 p.m., Helmut Hullen wrote: > Hallo, Amos, > > Du meintest am 08.06.15: > > The URL director interface was changed with Squid 3.4, see also > http://wiki.squid-cache.org/Features/Redirectors > > The latest version of squidguard is 1.5 beta from 2010 and > squidGu

Re: [squid-users] squidGuard configuration test - echo test

2015-06-08 Thread Helmut Hullen
Hallo, Amos, Du meintest am 08.06.15: The URL director interface was changed with Squid 3.4, see also http://wiki.squid-cache.org/Features/Redirectors The latest version of squidguard is 1.5 beta from 2010 and squidGuard does not support the new interface of Squid. [...] >

Re: [squid-users] worker per cache_dir

2015-06-08 Thread Amos Jeffries
On 7/06/2015 1:40 a.m., Marcel Fossua wrote: > ls -la /dev/shm/ > total 0 > drwxrwxrwt 2 proxy proxy 40 Jun 6 14:56 . > drwxr-xr-x 14 root root 3920 Jun 6 02:07 .. > That should be root:root I believe. Its an operating system component. Though I'm not quite as certain that it will work an

Re: [squid-users] TCP_MISS/403 353 HEAD text/plain Error help !!

2015-06-08 Thread Amos Jeffries
On 8/06/2015 5:36 a.m., snakeeyes wrote: > Hi Amos thank you so much > Again , this App IS REMOTE and as a black box . > It works 100 % on other proxies but I need to let it work on my own proxy. > > Now what I did is : > I added 2 directives to my squid.conf : > > strip_query_terms off > debu

Re: [squid-users] netflix

2015-06-08 Thread Amos Jeffries
On 6/06/2015 6:43 p.m., Alex Samad wrote: > Hi > > I remember seeing some rules for caching microsoft updates. Is there > anything special to cache netflix ? Last I heard netflix were using RTMP (not HTTP) to deliver their video streams and the web portions were setup to cache properly. Caching

Re: [squid-users] Website causing 3.5.5 squid crash

2015-06-08 Thread Amos Jeffries
On 7/06/2015 4:49 a.m., Mike wrote: > Running Scientific Linux 6.6 (based on CentOS), compiled squid 3.5.5 > with no errors. > Issue happens with both squid 3.5.5, and the newer 3.5.5-20150528-r13841. > Starting squid service and running for a while, any attempt to access a > website like www.nwfda

Re: [squid-users] PAM/Radius authentication question with Squid.3.1.10

2015-06-08 Thread Amos Jeffries
On 6/06/2015 7:09 p.m., Pugal Scout wrote: > Hi, > > Apologies if this question has been asked earlier. Is it possible to setup > squid authentication as below: > Use /etc/passwd for user account verification and radius for password? The provided auth helpers for Squid can check against *one* bac

Re: [squid-users] squidGuard configuration test - echo test

2015-06-08 Thread Amos Jeffries
On 8/06/2015 5:20 a.m., Jose Julian Buda wrote: > On 2015-06-07 12:15, Helmut Hullen wrote: >> Hallo, Marcus, >> >> Du meintest am 07.06.15: >> Hi, i have installed squidGuard 1.5 on Debian Jessie and i need an user based filter, made the src/dest/acl setting and then test with : >>>

Re: [squid-users] Squid 3.5.5 on Win doesn't release files after rotate

2015-06-08 Thread Amos Jeffries
On 8/06/2015 6:07 p.m., TarotApprentice wrote: > Back to Squid 3.5.5 on Server 2008 x64. > > Had an access.log and cache.log in /squid/var/log/squid. After doing a squid > -k rotate it successfully created new ones and old ones became access.log.0 > and cache.log.0 as expected. However cannot op