Re: [squid-users] Preparing for shutdown after xxx requests

Hey David, Are you using a squid instance with some old config file? Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of David

Re: [squid-users] Squid3: icmp_sock: (97) Address family not supported by protocol / pinger: Unable to start ICMPv6 pinger

Hey, Pinger is not a must but a luxury piece of software. It will make your and others life easier but you can avoid it playing with the configuration option: http://www.squid-cache.org/Doc/config/pinger_enable/ And if you have disabled ipv6 in some way it would be probably wise to start

Re: [squid-users] Latest ssl and Squid stable compile issue

On Thu, 2016-06-23 at 17:47 +1200, Amos Jeffries wrote: > Yay that you got it going with LibreSSL. > > But I'm still interested in why you got the errors in the first place > with OpenSSL. It is supposed to be the better supported one :-P > > So if you have the time to assist my edufication; > >

Re: [squid-users] cache_peer directive with SNI

Tried both and individually; nothing doing. I keep getting from Squid a TCP_MISS/503 to which the client page states: (54) Connection reset by peer (TLS code: SQUID_ERR_SSL_HANDSHAKE) Handshake with SSL server failed: [No Error] I’m currently using: Squid Cache version 3.5.19 I just tried subst

Re: [squid-users] Squid3: icmp_sock: (97) Address family not supported by protocol / pinger: Unable to start ICMPv6 pinger

OK Eliezer, thanks a lotI will disable IPv6 and compile Squid3 again disabling ICMP (pinger) also because I don't need these features at all. Regards, Alejandro 2016-06-23 4:54 GMT-03:00 Eliezer Croitoru : > Hey, > > > > Pinger is not a must but a luxury piece of software. > > It will make

[squid-users] Squid in Air Planes WiFi system, how should it be used?

Since Internet is starting to flow into the "Flying ships" industry I started to wonder what are the limits? In the air the network connections are very low quality despite to the fact that they can transfer lots of data. So the OS will probably handle all the lower network issues and will leave to

Re: [squid-users] https antivirus proxy necessary?

Hey, Sorry for not responding earlier. Your question regarding having two layers of AV technically depends on what both are offering as a product. We can spate the question of unwrapping HTTPS\TLS connections from inspecting the HTTPS content using an AV. If you have a trusted source and as an exa

Re: [squid-users] https antivirus proxy necessary?

On 06/22/2016 11:10 AM, hans.mey...@fn.de wrote: Do you think it's necessary to have an additional https antivir proxy to normal client antivirus? We are using Avast Business that already offers a web protection. Can an additional antivir proxy significant higher the level of protection? In g

Re: [squid-users] https antivirus proxy necessary?

Hello Eliezer and Hans, Our github.com repo has all the scripts necessary to rebuild latest Squid 3.5.19 with SSL Bump and latest ecap on Ubuntu 14.04 see https://github.com/diladele/squid-ubuntu. We reuse the Debian Testing package and apply some simple patches on it. I am pretty sure this is

Re: [squid-users] cache_peer directive with SNI

Yes, you are right. I ran into the same problem as you did, and now I remember how I got it to work. I manually patched the version of squid I was using to send SNI. Let me if you are interested in going that route. If I remember right, it was just a 1 to 3 line-patch. On Thu, Jun 23, 2016 at 5:31

Re: [squid-users] Squid in Air Planes WiFi system, how should it be used?

Em 23/06/2016 10:22, Eliezer Croitoru escreveu: Since Internet is starting to flow into the "Flying ships" industry I started to wonder what are the limits? In the air the network connections are very low quality despite to the fact that they can transfer lots of data. So the OS will probably han

Re: [squid-users] Latest ssl and Squid stable compile issue

On 23/06/2016 10:56 p.m., James Lay wrote: > Ah...well I went with this repo: > git clone https://github.com/openssl/openssl.git > And the errors I posted were where I stoppedunfortunately I've > already nuked the repo off the drive otherwise I'd give you the exact > info. I can tell you I got

Re: [squid-users] Squid3: icmp_sock: (97) Address family not supported by protocol / pinger: Unable to start ICMPv6 pinger

On 24/06/2016 1:19 a.m., Alejandro Cabrera Obed wrote: > OK Eliezer, thanks a lotI will disable IPv6 and compile Squid3 again > disabling ICMP (pinger) also because I don't need these features at all. > Maybe yes. Maybe no. pinger is a tricky one. It is used to record RTT for each server conn

Re: [squid-users] cache_peer directive with SNI

On 24/06/2016 3:40 a.m., Hector Chan wrote: > Yes, you are right. I ran into the same problem as you did, and now I > remember how I got it to work. I manually patched the version of squid I > was using to send SNI. Let me if you are interested in going that route. > If I remember right, it was jus

Re: [squid-users] Forward loop when intercepting mode to proxy traffic to local VM

On 23/06/2016 4:54 a.m., jblank wrote: > To be honest, I am not 100% clear on Squid's various modes. If reverse > proxy mode is capable of doing the decrypt/re-encrypt stuff, I'm fine > with using it. Any pointers to HOWTOs or FAQs that might help? has a sect

Re: [squid-users] Preparing for shutdown after xxx requests

we have reinstalled cleanly Squid, have squid -z and it works for some time, then squid terminates with: DiskThreadsDiskFile::openDone: (2) No such file or directory the original config file is the one below. thank you - David 2016/06/24 06:26:53 kid1| Set Current Directory to /var/cache/squ