Re: [squid-users] FATAL: Could not create a DNS socket in squid 3.5.3 stable

2015-08-13 Thread vin_krish
Hi, Thanks for the reply. I'm running squid as root user itself and have all permissions. But also same error appears. In case of ubuntu OS, using same configuration the error doesn't appear. Only in linux(ARM) this happens. Is there something I'm missing ..?? Please help me .. Regards, kri

Re: [squid-users] peek and splice content inspection question

2015-08-13 Thread Amos Jeffries
On 14/08/2015 9:15 a.m., Yuri Voinov wrote: > > > > 14.08.15 2:56, Alex Rousskov пишет: >> On 08/13/2015 09:38 AM, Amos Jeffries wrote: >>> On 14/08/2015 12:47 a.m., Marko Cupać wrote: Is it possible - by means of squid's peek and splice feature - to inspect file extensions and mime ty

Re: [squid-users] websockets protocol support via "squid+tproxy"

2015-08-13 Thread Amos Jeffries
On 14/08/2015 6:52 a.m., SaRaVanAn wrote: > Hi All, > We are planning to migrate our client applications from "http" to > "websockets" protocol. My condolances. > Currently we are using "squid+tproxy" in the router. If request comes from > client application to the router we use "Squid+tproxy" to

Re: [squid-users] peek and splice content inspection question

2015-08-13 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 14.08.15 2:56, Alex Rousskov пишет: > On 08/13/2015 09:38 AM, Amos Jeffries wrote: >> On 14/08/2015 12:47 a.m., Marko Cupać wrote: >>> Is it possible - by means of squid's peek and splice feature - to >>> inspect file extensions and mime types of

Re: [squid-users] peek and splice content inspection question

2015-08-13 Thread Alex Rousskov
On 08/13/2015 09:38 AM, Amos Jeffries wrote: > On 14/08/2015 12:47 a.m., Marko Cupać wrote: >> Is it possible - by means of squid's peek and splice feature - to >> inspect file extensions and mime types of https traffic? Can bumped >> https traffic be forwarded to icap (squidclamav) for AV scanning

Re: [squid-users] peek and splice content inspection question

2015-08-13 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 14.08.15 2:02, Marko Cupać пишет: > On Fri, 14 Aug 2015 03:38:47 +1200 > Amos Jeffries wrote: > >> On 14/08/2015 12:47 a.m., Marko Cupać wrote: >>> Hi, >>> >>> a few years ago I had a working setup of squid + dansguardian which >>> was giving me

Re: [squid-users] How to have squid as safe as (e.g.) firefox?

2015-08-13 Thread Alex Rousskov
On 08/13/2015 12:06 AM, Amos Jeffries wrote: > On 13/08/2015 9:20 a.m., Jeremie Rafin wrote: >> sslproxy_cert_error deny all > You have also configured "sslproxy_cert_error deny all" which forces > Squid to accept and ignore all possible origin server certificate > errors. Including revocation.

Re: [squid-users] How to have squid as safe as (e.g.) firefox?

2015-08-13 Thread Alex Rousskov
On 08/12/2015 03:20 PM, Jeremie Rafin wrote: > -while using squid, is it possible to have a SSL/HTTPS level of > security at least as high as with a reference like firefox? With a custom certificate validation helper, Squid can match and exceed default browser protections when it comes to certif

Re: [squid-users] peek and splice content inspection question

2015-08-13 Thread Marko Cupać
On Fri, 14 Aug 2015 03:38:47 +1200 Amos Jeffries wrote: > On 14/08/2015 12:47 a.m., Marko Cupać wrote: > > Hi, > > > > a few years ago I had a working setup of squid + dansguardian which > > was giving me ability to inspect traffic and filter it according to > > various criteria, mainly extensio

[squid-users] websockets protocol support via "squid+tproxy"

2015-08-13 Thread SaRaVanAn
Hi All, We are planning to migrate our client applications from "http" to "websockets" protocol. Currently we are using "squid+tproxy" in the router. If request comes from client application to the router we use "Squid+tproxy" to forward the traffic to local web-server with the help of cache-peer o

Re: [squid-users] peek and splice content inspection question

2015-08-13 Thread Amos Jeffries
On 14/08/2015 12:47 a.m., Marko Cupać wrote: > Hi, > > a few years ago I had a working setup of squid + dansguardian which was > giving me ability to inspect traffic and filter it according to various > criteria, mainly extensions, mime types and presence of malicious code > (clamav). > > Lately

Re: [squid-users] Presenting an internal virtual host externally as domain root folder

2015-08-13 Thread Amos Jeffries
On 14/08/2015 12:55 a.m., Arjen van der Meer wrote: > > Since a couple of months I have installed and configured squid on my > raspberry pi with raspbian and most things I like to work do! One thing > however I can't get to work. Not even with the help of what I found on the > internet so far. That

Re: [squid-users] Squid 3.5 Forward Secrecy on https_port

2015-08-13 Thread Amos Jeffries
On 14/08/2015 2:40 a.m., Julianne Bielski wrote: > > But does this mean that ECDHE isn't supported by Squid? > Correct. ECDHE is not supported by 3.5 and older. EECDHE and ECDHE are coming in Squid-4. If you really need it you are welcome to download and use Squid-4. Some of us already are. Ju

[squid-users] Presenting an internal virtual host externally as domain root folder

2015-08-13 Thread Arjen van der Meer
Hello all, I'm taking the risk of asking a question a question previously answered, because after multiple weeks of googling I haven't found a working answer. So let me first introduce myself: I'm an old school software engineer that turned to IT and operations management 2 decades ago and

[squid-users] peek and splice content inspection question

2015-08-13 Thread Marko Cupać
Hi, a few years ago I had a working setup of squid + dansguardian which was giving me ability to inspect traffic and filter it according to various criteria, mainly extensions, mime types and presence of malicious code (clamav). Lately most of the web moved to https, and dansguardian isn't mainta

Re: [squid-users] Content Adaptation in Reverse proxy mode

2015-08-13 Thread Amos Jeffries
On 13/08/2015 7:02 p.m., joseph jose wrote: > Hi, > > I have configured squid reverse proxy with eCAP modules. > > I have a client machine in which host file is edited and for > www.squid.com(cache > domain in reverse proxy), it will point to squid reverse proxy machine. Okay so far. > > What

[squid-users] Content Adaptation in Reverse proxy mode

2015-08-13 Thread joseph jose
Hi, I have configured squid reverse proxy with eCAP modules. I have a client machine in which host file is edited and for www.squid.com(cache domain in reverse proxy), it will point to squid reverse proxy machine. What i basically do is like i will append the request url to the cached domain url