Re: [squid-users] How to bypass Squid proxy in intercept mode using acl/always_direct

2016-12-27 Thread Matus UHLAR - fantomas
On 26.12.16 14:07, mabi wrote: I am using Squid 3.5.20 in intercept mode for HTTP and HTTPS traffic with my OpenBSD 6.0 firewall. For some internal servers located on two different subdomains I would like to access these directly and as such bypass the Squid proxy. Is this possible to achieve

Re: [squid-users] squid 4.0.17 accept-encoding.. sending gzip?!

2016-12-27 Thread Eliezer Croitoru
And what shows in the access.log when you fetch this object? The response headers are missing couple things. Also you are using a heuristic refresh_pattern that should not work and it's wrong to use such. The first thing is to change the refresh pattern to something more connected to reality

Re: [squid-users] squid 4.0.17 accept-encoding.. sending gzip?!

2016-12-27 Thread Heiler Bemerguy
Hi, refresh_pattern -i \.(jp[eg]{1,2}|pdf|gif|pn[pg]|bmp|tiff|ico|swf|css|js|ad|png)$ 10080 80% 120960 ignore-no-store ignore-reload ignore-must-revalidate ignore-private override-expire store-stale But it shouldn't change the length of the object, the encoding type of the object, the

Re: [squid-users] squid 4.0.17 accept-encoding.. sending gzip?!

2016-12-27 Thread Eliezer Croitoru
May I ask how did you manager to tell squid to cache a no-cache object? >From the dump it states: Cache-Control: max-age=0, no-cache, no-store, must-revalidate Which means it should not be cached.. Eliezer Eliezer Croitoru Linux System Administrator

Re: [squid-users] ACL and outgoing IP

2016-12-27 Thread Antony Stone
On Tuesday 27 December 2016 at 17:03:52, qdmetro wrote: > I have a squid connected behind a firewall. On the firewall, only the Ip of > the squid (192.168.1.1) is allowed to go on Internet. > > Usually, when a user authenticate itself on the proxy, all the requests use > the outgoing IP of the

[squid-users] ACL and outgoing IP

2016-12-27 Thread qdmetro
Hello, I have an issue with acl and outgoing ip address. I have a squid connected behind a firewall. On the firewall, only the Ip of the squid (192.168.1.1) is allowed to go on Internet. Usually, when a user authenticate itself on the proxy, all the requests use the outgoing IP of the squid

Re: [squid-users] squid 4.0.17 accept-encoding.. sending gzip?!

2016-12-27 Thread Heiler Bemerguy
The server doesn't define any "content-encoding". This is the *original **server *reply, tcpdumped: HTTP/1.1 200 OK Set-Cookie: ACE-STICKY=R1291873686; path=/; expires=Mon, 26-Dec-2016 23:51:26 GMT Date: Mon, 26 Dec 2016 19:36:06 GMT Accept-Ranges: bytes Content-Length:

Re: [squid-users] squid 4.0.17 accept-encoding.. sending gzip?!

2016-12-27 Thread Heiler Bemerguy
Hey dudes, thanks for the replies.. Client GET say it won't accept any encoding format. Why is squid compressing it and sending as compressed to a client that explicity says it doesn't accept encoding? Is this really correct? Because no browser is liking it here. Even more, I think no data

Re: [squid-users] squid 4.0.17 accept-encoding.. sending gzip?!

2016-12-27 Thread Amos Jeffries
On 2016-12-27 13:07, Alex Rousskov wrote: On December 26, 2016 10:11:55 AM Heiler Bemerguy wrote: *Accept-Encoding: none* *Content-Encoding: gzip* These are end-to-end headers. Squid does not modify or add them (unless you tell it to do that). The origin server does not honor the bogus

Re: [squid-users] Squid Websocket Issue

2016-12-27 Thread Hardik Dangar
Hey Alex, actually its reverse. If i remove !serverIsws somehow websockets will not work. conversion does not happen and i get 400 bad request. whereas if i put !serverIsws then request is converted and status code is 101 acl serverIsws ssl::server_name_regex ^w[0-9]+\.web\.whatsapp\.com$ acl