Re: [squid-users] Centos 7 squid 3.5.2 / kid2| commBind: Cannot bind socket FD 782 to [::]: (2) No such file or directory

2016-06-09 Thread --Ahmad--
hi Mr elieizer i already check the mailing list before i post here , but no luck with me . i don’t think its a permissions issue i have the file /var/run/squid is missing and there is /var/run/squid.pid and it has the squid permissions kindly can you point to me if i figure it out us

[squid-users] squid-3.5.19 crash(Segment Violation)

2016-06-09 Thread asakura
Hello, I need help about squid-3.5.19 crash(Segment Violation) I posted question at 2016 March(attached last sentence) And at last month, I upgrade squid 3.5.1 to 3.5.19, then solved this issue(Thank you!) But other problem occured. When I change squid.conf and reconfigure squid, sometimes squid

[squid-users] Unable to IPv6 DNAT & intercept (Debian Stretch, Linux 3.16.0, Squid 3.5.19)

2016-06-09 Thread Joni Kähärä
Hello list, I'm approaching you with a question regarding intercept proxying and IPv6. I have a working IPv4 setup that redirects port 80 traffic to a port that Squid is listening on: -A PREROUTING -s -p tcp -m tcp --dport 80 -j REDIRECT --to-ports When I try to duplicate this behaviour on

[squid-users] Response Blocked from sites with multiple IPs (Host Header Forgery)

2016-06-09 Thread Eng Hooda
Hello Squid Users, I have just started using squid less than a week ago . My setup is a transparent proxy with sslbump , I peek for media streaming sites then terminate their connections then I splice all. I noticed that some https sites (not all of the time) , does not respond , when Investigate

[squid-users] Skype makes Squid with ssl_bump crash

2016-06-09 Thread Bruno de Paula Larini
Hi list. I'm experiencing some crashes on Squid workers and eventually on the parent process while using a mixed authenticated/intercepted ssl_bump + Skype (7.21.0.100). After searching for some clues, I've found this: Changes to squid-3.5.9 (17 Sep 2015): ... - Bug 4309: crash during

Re: [squid-users] DNS lookup fails initially for FQDN in squid

2016-06-09 Thread Aashima Madaan
Any updates on this issue? and regarding patch ? Thanks Aashima ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Centos 7 squid 3.5.2 / kid2| commBind: Cannot bind socket FD 782 to [::]: (2) No such file or directory

2016-06-09 Thread Eliezer Croitoru
Hey Ahmad, I do not why you are suffering from the issue. The options are: - Selinux - Permission - Directory existence - Self compiled kernel withtou IPV6 support - And many more >From my point of view I suggest first to try my RPMs as it wor

Re: [squid-users] Response Blocked from sites with multiple IPs (Host Header Forgery)

2016-06-09 Thread Eliezer Croitoru
Hey, There are couple basic missing parts about the setup. - What OS are you using? - How do you Intercept the connections? Tproxy? Intercept? - Do the client use the same DNS server as the proxy server? - Are you using some kind of local caching service? Such as Bind\Unbo

Re: [squid-users] Unable to IPv6 DNAT & intercept (Debian Stretch, Linux 3.16.0, Squid 3.5.19)

2016-06-09 Thread Amos Jeffries
On 10/06/2016 3:48 a.m., Joni Kähärä wrote: > Hello list, > > I'm approaching you with a question regarding intercept proxying and IPv6. > I have a working IPv4 setup that redirects port 80 traffic to a port that > Squid is listening on: > > -A PREROUTING -s -p tcp -m tcp --dport 80 -j REDIR

Re: [squid-users] Skype makes Squid with ssl_bump crash

2016-06-09 Thread Amos Jeffries
On 10/06/2016 7:20 a.m., Bruno de Paula Larini wrote: > Hi list. > > I'm experiencing some crashes on Squid workers and eventually on the > parent process while using a mixed authenticated/intercepted ssl_bump + > Skype (7.21.0.100). After searching for some clues, I've found this: > > Changes to

Re: [squid-users] Response Blocked from sites with multiple IPs (Host Header Forgery)

2016-06-09 Thread Amos Jeffries
On 10/06/2016 6:09 a.m., Eng Hooda wrote: > Hello Squid Users, > I have just started using squid less than a week ago . > My setup is a transparent proxy with sslbump , I peek for media streaming > sites then terminate their connections then I splice all. > I noticed that some https sites (not all

Re: [squid-users] DNS lookup fails initially for FQDN in squid

2016-06-09 Thread Amos Jeffries
On 10/06/2016 8:06 a.m., Aashima Madaan wrote: > Any updates on this issue? and regarding patch ? > Is the reply-to function of yoru mailer working? This is the 11th unique thread you started under this same name in the past few weeks. The patch I came up with in thread #6 was an experiment to

Re: [squid-users] Peek'n Splice (ssl_bump) and authentication Somewhat OT: Content Filter with https

2016-06-09 Thread Sergio Belkin
2016-06-08 20:30 GMT-03:00 Marcus Kool : > > > On 06/08/2016 07:53 PM, Sergio Belkin wrote: > >> >> Thanks Eliezer, good summary. I've changed the subject to reflect better >> the issue. As far I undestand from documention one can bump https only by >> interception. >> > > No. ssl-bump works very

Re: [squid-users] Peek'n Splice (ssl_bump) and authentication Somewhat OT: Content Filter with https

2016-06-09 Thread Amos Jeffries
On 10/06/2016 2:26 p.m., Sergio Belkin wrote: > 2016-06-08 20:30 GMT-03:00 Marcus Kool : > >> >> >> On 06/08/2016 07:53 PM, Sergio Belkin wrote: >> >>> >>> Thanks Eliezer, good summary. I've changed the subject to reflect better >>> the issue. As far I undestand from documention one can bump https