Re: [squid-users] TCP_MISS_ABORTED only for one site

2016-08-31 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 May be upgrade? 3.3.x is antique. 01.09.2016 2:48, Yuri Voinov пишет: > > 1472676457.210 5829 127.0.0.1 TCP_MISS/302 512 GET http://www.ipiranga.com.br/ - HIER_DIRECT/177.67.60.32 text/html > 1472676457.633366 127.0.0.1 TCP_MISS/302 739 GET

Re: [squid-users] TCP_MISS_ABORTED only for one site

2016-08-31 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 1472676457.210 5829 127.0.0.1 TCP_MISS/302 512 GET http://www.ipiranga.com.br/ - HIER_DIRECT/177.67.60.32 text/html 1472676457.633366 127.0.0.1 TCP_MISS/302 739 GET http://www.ipiranga.com.br/wps/portal/ipiranga - HIER_DIRECT/177.67.60.32 - 1

[squid-users] TCP_MISS_ABORTED only for one site

2016-08-31 Thread Rejaine Monteiro
hi, we are having trouble accessing (only) that site below. all other sites are accessing normally. TCP_MISS_ABORTED/000 0 GET http://www.ipiranga.com.br/ - H (the site in question works with direct access to internet - without proxy) discarded problems with cpu, firewall rules, memory, ac

Re: [squid-users] Transparent Proxy on OSX Yosemite

2016-08-31 Thread Shively, Gregory
> On 31/08/2016 11:19 a.m., Shively, Gregory wrote: > > I'm attempting to get a squid working as a transparent proxy on OSX > > Yosemite. Every attempt ended with a "Forward loop detected". I > > initially started with the version from homebrew and moved to just > > compiling myself to see if I

Re: [squid-users] TCP_TUNNEL_ABORTED/200?

2016-08-31 Thread Alex Rousskov
On 08/31/2016 08:25 AM, Amos Jeffries wrote: > On 31/08/2016 8:20 p.m., Ralf Hildebrandt wrote: >> I can't find anything on what exactly would cause a >> "TCP_TUNNEL_ABORTED/200" > A client that disconnects before the server has finished sending data, If "has finished sending" means "closed conne

Re: [squid-users] TCP_TUNNEL_ABORTED/200?

2016-08-31 Thread Alex Rousskov
On 08/31/2016 02:20 AM, Ralf Hildebrandt wrote: > One of our users is trying to connect to somw windows remoteapps via > out squid proxy. > > Logging in does seem to work, but somewhere along the line, the user > is getting error messages. In our logs we're seeing the encrypted > traffic (TCP_TUNN

Re: [squid-users] HTTPS chrome - SHA1 this page is insecure

2016-08-31 Thread Alex Rousskov
On 08/31/2016 09:15 AM, Amos Jeffries wrote: > On 1/09/2016 2:26 a.m., erdosain9 wrote: >> Hi. >> Im using ssl-bump.. all ir working fine, but i want to know if it is >> possible that which is not seen crossed out and red "https". >> This happen just in Chrome >> This page is insecure (broken HTTPS

Re: [squid-users] Limit Bandwith for youtube....

2016-08-31 Thread Amos Jeffries
On 31/08/2016 8:13 a.m., erdosain9 wrote: > Thanks. > But... > I'm misunderstanding ? > Tx , is not the download? TX is sent bytes. It depends on what your interfaces mean, but it looks to me like it is uploads. There are known bugs in delay pools but they cause very specific low number of multip

Re: [squid-users] HTTPS chrome - SHA1 this page is insecure

2016-08-31 Thread Amos Jeffries
On 1/09/2016 2:26 a.m., erdosain9 wrote: > Hi. > Im using ssl-bump.. all ir working fine, but i want to know if it is > possible that which is not seen crossed out and red "https". > This happen just in Chrome > This page is insecure (broken HTTPS) > SHA-1 Certificate > The certificate for this sit

Re: [squid-users] Debugging NTLM problem

2016-08-31 Thread Amos Jeffries
On 1/09/2016 12:37 a.m., akn ab wrote: > Dear all, > i'm facing a strange problem using squid 3.5.20 with ntlm transparent > authentication. > I cannot use kerberos auth because i need to pass DOMAIN\user to my parent > proxy > with x-authenticated-user header, and the form USERNAME@DOMAIN is no

Re: [squid-users] Squid 3.5.20 rock store and enable-disk-io

2016-08-31 Thread Alex Rousskov
On 08/31/2016 02:46 AM, FredB wrote: > I saw this in rock store documentation > > If possible, Squid using Rock Store creates a dedicated kid > process called "disker" to avoid blocking Squid worker(s) on disk > I/O. One disker kid is created for each rock cache_dir. Disk

Re: [squid-users] Transparent Proxy on OSX Yosemite

2016-08-31 Thread Amos Jeffries
On 31/08/2016 11:19 a.m., Shively, Gregory wrote: > I'm attempting to get a squid working as a transparent proxy on OSX > Yosemite. Every attempt ended with a "Forward loop detected". I > initially started with the version from homebrew and moved to just > compiling myself to see if I could figure

[squid-users] HTTPS chrome - SHA1 this page is insecure

2016-08-31 Thread erdosain9
Hi. Im using ssl-bump.. all ir working fine, but i want to know if it is possible that which is not seen crossed out and red "https". This happen just in Chrome This page is insecure (broken HTTPS) SHA-1 Certificate The certificate for this site expires in 2017 or later, and the certificate chain c

Re: [squid-users] TCP_TUNNEL_ABORTED/200?

2016-08-31 Thread Amos Jeffries
On 31/08/2016 8:20 p.m., Ralf Hildebrandt wrote: > One of our users is trying to connect to somw windows remoteapps via > out squid proxy. > > Logging in does seem to work, but somewhere along the line, the user > is getting error messages. In our logs we're seeing the encrypted > traffic (TCP_TUN

[squid-users] Debugging NTLM problem

2016-08-31 Thread akn ab
Dear all,   i'm facing a strange problem using squid 3.5.20 with ntlm transparent authentication. I cannot use kerberos auth because i need to pass DOMAIN\user to my parent proxy with x-authenticated-user header, and the form USERNAME@DOMAIN is not supported. Users can surf the web without prob

Re: [squid-users] Squid 3.5.20 rock store and enable-disk-io

2016-08-31 Thread FredB
> > --enable-disk-io=AIO,Blocking,DiskThreads,IpcIo,Mmapped Wrong sorry, crash with diskd only because DiskDaemon is missing > > But there is a segfault at start, FI same result with diskd ... > > OK so I'm trying now --enable-disk-io=yes and there no more disker > process, I'm doing somethi

[squid-users] Squid 3.5.20 rock store and enable-disk-io

2016-08-31 Thread FredB
Hello, I saw this in rock store documentation If possible, Squid using Rock Store creates a dedicated kid process called "disker" to avoid blocking Squid worker(s) on disk I/O. One disker kid is created for each rock cache_dir. Diskers are created only when Squid,

[squid-users] TCP_TUNNEL_ABORTED/200?

2016-08-31 Thread Ralf Hildebrandt
One of our users is trying to connect to somw windows remoteapps via out squid proxy. Logging in does seem to work, but somewhere along the line, the user is getting error messages. In our logs we're seeing the encrypted traffic (TCP_TUNNEL/200 CONNECT remoteapps.eortc.be:443), but then we're gett