[squid-users] How to avoid Squid disclosing the origin server IP when there is an error

2015-09-26 Thread Manuel
When Squid -even as a reverse proxy (which is my concern)- can not retrieve the requested URL, it dicloses the IP address of the server trying to contact with. Is there any way to hide that IP address to the public for security reasons? Example of the error message I am referring to: "The

Re: [squid-users] 3.5.9 for Debian

2015-09-26 Thread Dan Purgert
On 09/25/2015 06:09 PM, Amos Jeffries wrote: > On 26/09/2015 2:26 a.m., Dan Purgert wrote: >> Quoting TarotApprentice: >> >>> Is there a chance we can get 3.5.9 into Debian please. >>> >> >> Think this is more a question for the Debian maintainers, than the squid >> ones. I ended up building

Re: [squid-users] Building squid | Best Practices?

2015-09-26 Thread Howard Waterfall
Hey guys back at it. I expect that Linux issues are really a much bigger problem for me than squid! I'm running into this problem now: /var/run/squid3.pid: (13) Permission denied I know it's a permission problem, but not sure the optimal way of fixing it. I created user 'proxy' and group

Re: [squid-users] How to avoid Squid disclosing the origin server IP when there is an error

2015-09-26 Thread Amos Jeffries
On 26/09/2015 11:48 p.m., Manuel wrote: > When Squid -even as a reverse proxy (which is my concern)- can not retrieve > the requested URL, it dicloses the IP address of the server trying to > contact with. Is there any way to hide that IP address to the public for > security reasons? This is not

Re: [squid-users] How to avoid Squid disclosing the origin server IP when there is an error

2015-09-26 Thread Eliezer Croitoru
Hey Manuel, The reason the client receives the destination IP or other details is due to the structure of the ERROR page. Depends on your OS you can find the ERROR page file and modify it so the format will meet your requirements. You can take a look at the wiki about custom error pages:

Re: [squid-users] How to avoid Squid disclosing the origin server IP when there is an error

2015-09-26 Thread Xen
On Sun, 27 Sep 2015, Amos Jeffries wrote: On 26/09/2015 11:48 p.m., Manuel wrote: When Squid -even as a reverse proxy (which is my concern)- can not retrieve the requested URL, it dicloses the IP address of the server trying to contact with. Is there any way to hide that IP address to the

Re: [squid-users] after changed from 3.4.13 to 3.5.8 sslbump doesn't work for the site https://banking.postbank.de/

2015-09-26 Thread Marcus Kool
On 09/26/2015 03:03 PM, Dieter Bloms wrote: Hallo Marcus, On Thu, Sep 17, Marcus Kool wrote: I just tried accessing https://banking.postbank.de/ using Squid 3.5.8 and Chrome. I also got the ERR_CONNECTION_CLOSED error. thank you for testing, so I think the fault is not my config. May it

Re: [squid-users] after changed from 3.4.13 to 3.5.8 sslbump doesn't work for the site https://banking.postbank.de/

2015-09-26 Thread Dieter Bloms
Hallo Marcus, On Thu, Sep 17, Marcus Kool wrote: > I just tried accessing https://banking.postbank.de/ > using Squid 3.5.8 and Chrome. > I also got the ERR_CONNECTION_CLOSED error. thank you for testing, so I think the fault is not my config. May it be a bug in squid or openssl, or maybe the

Re: [squid-users] squid with SMP registeration time out when i use 10K opened sessions

2015-09-26 Thread Ahmad Alzaeem
Hi Amos , thanks for reply Regarding to your description If I have 10K ips with 10k listening ports .. Will each squid process handle 10 K ? Or I need to distribute the ips/ports to each process ??? cheers -Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz]