[squid-users] URL Rewrite for https via Squidguard

2016-01-08 Thread Darren
Hi I am trying to hack squidguard to allow me to redirect users attempts to connect to blocked https enabled sites. Some sites are allowed and the bulk are not. Currently I can see the Connect details being handed to SG for processing and if I change this to return a redirect to make it point

[squid-users] Questions about tcp_outgoing_address

2016-01-08 Thread Verónica Ovando
Hi! I have a some specific questions about the directive /tcp_outgoing_address/. I need to know if it could works for my deployment: My Squid 34.8 runs over Debian Jessie. I have a multiwan environment with dual internet connection. There are some clients that visit web pages that only allow cer

Re: [squid-users] ssl_ctrd aborts in 3.5.13

2016-01-08 Thread xxiao8
Found the issue, it's a conf syntax error. Sorry for the noise. xxiao On 01/08/2016 08:03 PM, xxiao8 wrote: Hi, I'm seeing the below errors, 25 bytes are the string of "'Initialization SSL db..." itself, anyone else experienced this? This is a typical https-transparent case. --- Sat

[squid-users] ssl_ctrd aborts in 3.5.13

2016-01-08 Thread xxiao8
Hi, I'm seeing the below errors, 25 bytes are the string of "'Initialization SSL db..." itself, anyone else experienced this? This is a typical https-transparent case. --- Sat Jan 9 01:46:25 2016 daemon.notice squid[4849]: helperHandleRead: unexpected read from ssl_crtd #Hlpr1, 25 b

Re: [squid-users] squid 4.0.3 - sslflags not working?

2016-01-08 Thread Florian Stamer
Hi, testet the latest Snapshot and the 4.0.4 Still the same. Regards, Florian -Ursprüngliche Nachricht- Von: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] Im Auftrag von Amos Jeffries Gesendet: Montag, 4. Januar 2016 12:07 An: squid-users@lists.squid-cache.org Betreff

Re: [squid-users] ssl-bump and accel

2016-01-08 Thread Nir Krakowski
This is what needs to be done to get it to work in squid >3.5 in function ClientRequestContext::hostHeaderIpVerify(const ipcache_addrs* ia, const Dns::LookupDetails &dns): modify: } debugs(85, 3, HERE << "FAIL: validate IP " << clientConn->local << " possible from Host:"); to: } i

Re: [squid-users] How large cacheable object with Rock store now?

2016-01-08 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ok. What's the recommended limit? 2 Gb? 4 Gb? 8 Gb? How much? I want to say: If I want to cache Windows Updates, for example, with 1-2 Tb RAID as storage? Will be good to use Rock? To avoid fs fragmentation, and maintenance overhead? 08.01.16 22

Re: [squid-users] How large cacheable object with Rock store now?

2016-01-08 Thread Alex Rousskov
On 01/07/2016 03:12 PM, Yuri Voinov wrote: > How large cacheable object with Rock store now? I do not recall any artificial or unusual size limitations for Rock objects since Large Rock support was added in v3.5. In other words, if you can store it in a ufs-based cache_dir, you should be able to

Re: [squid-users] problem with squidGuard redirect page after upgrading squid

2016-01-08 Thread Marcus Kool
On 01/07/2016 06:48 PM, Jason Haar wrote: On 08/01/16 01:56, Marcus Kool wrote: Can you explain what the huge number of regexes is used for ? malware urls. I'm scraping them from publicly available sources like phishtank, malwaredomains.com. Ironically, they don't need to be regexes - but squ

[squid-users] Digest LDAP authentication

2016-01-08 Thread Olivier Desport
Hello, I'm trying to implement digest LDAP authentication with digest_ldap_auth on Squid 3.4. When I try to connect with command line, It succeeds : echo '"":""' | /usr/lib/squid3/digest_ldap_auth -b ou= -u uid -A l -W /etc/digestreader_cred -e -v 3 OK ha1="..." In squid.conf auth_p