[squid-users] runing squid on second processor

2016-04-29 Thread joe
hi i have 2 cpu 4 core each i need to leave alone first processor and use the second one for squid and its helper is that will do ??? taskset 0x00f0 squid -YC -f /etc/squid/squid.conf or other way around ?? so i can keep the kernel and other program running on first cpu not interfere with s

Re: [squid-users] Block VPN access like hola.org ,ultrasurf

2016-04-29 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 AFAIK, every proxy admin faced with excessively smart users who want to bypass a proxy. If you think that this is not true in your case - it means you not know yet. While you suffer prince Hamlet's ethical dilemma - "To bump or not to bump - that

Re: [squid-users] Using dont_verify_peer

2016-04-29 Thread Markey, Bruce
Ok that makes more sense now. Thanks to everyone for the tips. I'm going to work on this over the next few days and see where I end up. Bruce Markey | Network Security Analyst STEINMAN COMMUNICATIONS 717.291.8758 (o) | bmar...@steinmancommunications.com 8 West King St | PO Box 1328, Lancaster

Re: [squid-users] Block VPN access like hola.org ,ultrasurf

2016-04-29 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 The another option is using advanced DPI with database. Like China government uses. Squid itself can't. 29.04.16 16:33, Reet Vyas пишет: > Hi, > > I have working trasparent squid , Some users are using proxy vpn in moziilla as addon and bypassing

Re: [squid-users] Using dont_verify_peer

2016-04-29 Thread Alex Rousskov
On 04/28/2016 02:32 PM, Markey, Bruce wrote: > I’ve been having to actually remove folks from the proxy so they could work. > I can’t deny users access to the sites they need. > all I really wanted was to keep stats on sites visited. Yours and many other passive monitoring use cases call for a no

Re: [squid-users] Using dont_verify_peer

2016-04-29 Thread Alex Rousskov
On 04/28/2016 02:56 PM, Rafael Akchurin wrote: > According to > https://www.ssllabs.com/ssltest/analyze.html?d=agentimediaservices.com > the server does not send the whole chain of certificates and imho squid > cannot automatically download the intermediate certificates like > browsers do. Yes,

[squid-users] Squid reverse proxy: www.site1.com to www.site2.com/foo/

2016-04-29 Thread Roberto Carna
Dear, I'm using Squid in reverse proxy mode. Everything is OK, but now I have to do this: If a user put in the browser: http://www.site1.com Squid reverse has to redirect to: http://www.site2.com/foo/ How can I do this??? Special thanks, Roberto _

Re: [squid-users] Block VPN access like hola.org ,ultrasurf

2016-04-29 Thread Yuri Voinov
Not with squid, man. Only on Cisco/another router by IP. ip access-list extended TO_INET remark Hamachi deny ip 25.0.0.0 0.255.255.255 any deny ip 64.34.106.0 0.0.0.255 any deny ip any host 69.25.21.195 deny ip any host 74.201.75.195 deny ip any host 146.255.195.92 remark ZenMat

Re: [squid-users] Block VPN access like hola.org ,ultrasurf

2016-04-29 Thread Yuri Voinov
Not with squid, man. Only on Cisco/another router by IP. ip access-list extended TO_INET remark Hamachi deny ip 25.0.0.0 0.255.255.255 any deny ip 64.34.106.0 0.0.0.255 any deny ip any host 69.25.21.195 deny ip any host 74.201.75.195 deny ip any host 146.255.195.92 remark ZenMat

[squid-users] Block VPN access like hola.org ,ultrasurf

2016-04-29 Thread Reet Vyas
Hi, I have working trasparent squid , Some users are using proxy vpn in moziilla as addon and bypassing my squid, Please tell me how to block all hola.org vpn and ulrta surf, I have already blocked websites,but seems not working. Please let me know how to block these vpn access. _