Re: [squid-users] Is this proper usage of Squid?

2017-01-07 Thread Eddie B
Thanks Amos. Looks like we will be using eCAP. One other possible scenario comes to mind - I am not sure if this is feasible. When the block is via DNS (not IP, not all video streaming block), could we: . create CNAMEs for all vimeo domains involved in delivering video .

Re: [squid-users] Is this proper usage of Squid?

2017-01-07 Thread Amos Jeffries
On 2017-01-08 10:59, Eddie B wrote: Can we accomplish the above using Squid? A basic CDN / reverse-proxy setup does most of what you ask. You will need to then throw in some content adaptation (ICAP or eCAP) to handle URLs in the response HTML and any scripts. Not knowing what the

[squid-users] Is this proper usage of Squid?

2017-01-07 Thread Eddie B
We have embedded Vimeo videos on a site accessible only to logged in users. Because of different firewalls, using different types of blocks, the videos sometimes do not work for the client. Aside from cases where the firewall blocks any video streaming, we want to serve video to clients that

[squid-users] Citrix Receiver client with Squid transparent proxy to access Citrix XenApp Server

2017-01-07 Thread mabi
Hi, Is it possible using a Citrix Receiver client behind a Squid 3.5.20 transparent proxy to connect to a Citrix XenApp server on the internet? If someone already managed to achieve this I would be interested to know how. For me it simply does not work, the Citrix Receiver client throws the

Re: [squid-users] keep source ip when user connect over squid using ip:port

2017-01-07 Thread --Ahmad--
I’m using squid as bridge like injecting some urls thats it thanks > On Jan 7, 2017, at 8:35 PM, Antony Stone > wrote: > > On Saturday 07 January 2017 at 19:23:47, --Ahmad-- wrote: > >> hey mate i total understand Tporxy with CISCO /wccp >> >> but I’m

Re: [squid-users] keep source ip when user connect over squid using ip:port

2017-01-07 Thread Antony Stone
On Saturday 07 January 2017 at 19:23:47, --Ahmad-- wrote: > hey mate i total understand Tporxy with CISCO /wccp > > but I’m asking here other way like connecting ip:port and keep squid using > my original ip as source So, where do you expect the reply packets from the remote web server to end

Re: [squid-users] keep source ip when user connect over squid using ip:port

2017-01-07 Thread --Ahmad--
hey mate i total understand Tporxy with CISCO /wccp but I’m asking here other way like connecting ip:port and keep squid using my original ip as source cheers > On Jan 7, 2017, at 8:20 PM, Matus UHLAR - fantomas wrote: > > On 07.01.17 19:25, --Ahmad-- wrote: >> hey folks

Re: [squid-users] keep source ip when user connect over squid using ip:port

2017-01-07 Thread Matus UHLAR - fantomas
On 07.01.17 19:25, --Ahmad-- wrote: hey folks . I’m just wondering if possible . i have a basic squid on ip:port . i want to connect over it using ip:port from my browser . also … when i visit websites …. i want my ip (router ip) not squid ip to be shown to the websites . is that possible

[squid-users] keep source ip when user connect over squid using ip:port

2017-01-07 Thread --Ahmad--
hey folks . I’m just wondering if possible . i have a basic squid on ip:port . i want to connect over it using ip:port from my browser . also … when i visit websites …. i want my ip (router ip) not squid ip to be shown to the websites . is that possible ? i know its weird … but i want squid

Re: [squid-users] ssl_bump with intermediate CA

2017-01-07 Thread senor
Thank you Amos. I agree that adding the anchor is generally harmless and you've chosen your battles wisely. Also thank you Garri. I must have missed your response confirming the same. For current squid versions the wiki page is misleading according to all credible references I can find. Any

Re: [squid-users] Squid memory leak on ubuntu 14.04

2017-01-07 Thread Amos Jeffries
On 2017-01-07 17:33, Eliezer Croitoru wrote: I will try to build a binary package for 12.04 and 14.04 of 3.5.23. Please do that by taking the official source .deb package and just re-building it (and libecap3 package) for the older systems. No special changes. There are several