Re: [squid-users] MS Update

2016-01-10 Thread Amos Jeffries
On 11/01/2016 2:33 p.m., Alex Samad wrote: > Hi > > I burnt up 172G of download in 24 hours with multi machines doing the > download of the same file (MS SQL patch) > > I think I am running into the same issue > > > So multiple machines are trying to do the download... > Q) why don't they share

Re: [squid-users] kerberos authentication with a machine account doesn't work

2016-01-10 Thread LYMN
Firstly, let me say that whatever you are using for a mail client makes reading/replying to your message difficult (see below for a small sample, I will clean up the rest as best I can)... I did manage to get this working, you did mention the correct solution right down the end of your message.

[squid-users] MS Update

2016-01-10 Thread Alex Samad
Hi I burnt up 172G of download in 24 hours with multi machines doing the download of the same file (MS SQL patch) I think I am running into the same issue So multiple machines are trying to do the download... Q) why don't they share the same download ! 1452459804.945 64052 10.172.208.108 TCP_

Re: [squid-users] Squid-4.0.4 beta is available

2016-01-10 Thread Eliezer Croitoru
Kinkie please take a look at: http://bugs.squid-cache.org/show_bug.cgi?id=4403 Eliezer On 10/01/2016 20:06, Kinkie wrote: Hi eliezer, This looks like a broken or not completely installed libstdc++. Could you check that all packages mentioned at http://wiki.squid-cache.org/BuildFarm/CentosI

[squid-users] SSLBUMP Issue

2016-01-10 Thread Roman Gelfand
I am getting the following error. Would anyone know the reason? Error negotiating SSL connection on FD 37: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number My sslbump config is http_port 3128 ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/usr/loca

Re: [squid-users] Squid-4.0.4 beta is available

2016-01-10 Thread Eliezer Croitoru
On 10/01/2016 20:06, Kinkie wrote: Hi eliezer, This looks like a broken or not completely installed libstdc++. Could you check that all packages mentioned at http://wiki.squid-cache.org/BuildFarm/CentosInstall are installed on your build system? Hey Kinkie, I was suspecting that it might

Re: [squid-users] Squid-4.0.4 beta is available

2016-01-10 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Don't think so. As Eliezer said, 3.5 built at the same box. In my case the same - 3.5 built successfully, but 4.0.4 is not. 11.01.16 0:06, Kinkie пишет: > Hi eliezer, >This looks like a broken or not completely installed libstdc++. > Could yo

Re: [squid-users] Squid-4.0.4 beta is available

2016-01-10 Thread Kinkie
Hi eliezer, This looks like a broken or not completely installed libstdc++. Could you check that all packages mentioned at http://wiki.squid-cache.org/BuildFarm/CentosInstall are installed on your build system? On Sun, Jan 10, 2016 at 6:02 PM, Eliezer Croitoru wrote: > I am having trouble buil

Re: [squid-users] Squid-4.0.4 beta is available

2016-01-10 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 http://bugs.squid-cache.org/show_bug.cgi?id=4403 10.01.16 23:02, Eliezer Croitoru пишет: > I am having trouble building 4.0.4 on OpenSUSE leap. > I have tried both manually and using the rpm build tools. > The error in the rpmbuild logs at: http:/

Re: [squid-users] Squid-4.0.4 beta is available

2016-01-10 Thread Eliezer Croitoru
I am having trouble building 4.0.4 on OpenSUSE leap. I have tried both manually and using the rpm build tools. The error in the rpmbuild logs at: http://ngtech.co.il/repo/opensuse/leap/logs/build5-4.0.4.log and the build log of the manual compilation are at: http://ngtech.co.il/repo/opensuse/lea

Re: [squid-users] Intercepting BITS_POST

2016-01-10 Thread Amos Jeffries
On 10/01/2016 8:27 p.m., Saravanan Coimbatore wrote: > Hi Amos, > > MSFT uses a handshake mechanism to sync files between enterprise and > Cloud. We use squid with icap plugins to analyze data. > > The handshake is BITS_POST which is based on HTTP 1.1. When we > enabled the icap plugin, the reque

Re: [squid-users] ssl-bump and accel

2016-01-10 Thread Amos Jeffries
On 10/01/2016 10:26 p.m., Nir Krakowski wrote: > 1. You're forgetting I only refer specific traffic using /etc/hosts to > squid. You missed my point. 1) clientConn is where the traffic *came from*. Not where it is going to. 2) Host: header verification is only relevant to MITM (intercept/tproxy

Re: [squid-users] ssl-bump and accel

2016-01-10 Thread Nir Krakowski
1. You're forgetting I only refer specific traffic using /etc/hosts to squid. 2. What do you suggest ? I want to use the SNI as the direction of the traffic, not the forwarded IP address. On Sun, Jan 10, 2016 at 6:30 AM, Amos Jeffries wrote: > On 9/01/2016 7:48 a.m., Nir Krakowski wrote: > > Thi