[squid-users] [squid-announce] Squid 3.5.24 is available

2017-01-30 Thread Amos Jeffries
The Squid HTTP Proxy team is very pleased to announce the availability of the Squid-3.5.24 release! This release is a bug fix release resolving several issues found in the prior Squid releases. The major changes to be aware of: * Mitigate DoS attacks that use client-initiated SSL/TLS renegotia

[squid-users] X-Forwarded-For breaks a site

2017-01-30 Thread Andrea Venturoli
Hello. I've been invited to visit a web site and I couldn't see it. Bypassing squid would solve the problem, so I made some some researches and saw that adding "forwarded_for transparent" to my config would do. I'm wondering what the reason might be... tcpdump showed that: 1) initial connecti

Re: [squid-users] X-Forwarded-For breaks a site

2017-01-30 Thread Matus UHLAR - fantomas
On 30.01.17 12:09, Andrea Venturoli wrote: The answer to a direct connection (or to Squid with "forwarded_for transparent") is: HTTP/1.1 303 See other Date: Mon, 30 Jan 2017 09:56:18 GMT Server: Apache X-Powered-By: PHP/5.3.29 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-ca

[squid-users] Log Setup

2017-01-30 Thread creditu
I have a 3.1 accelerator and have set the logs up to emulate _httpd_log. On the standard squid log I can see which backend server the request was sent to: 1481343537.601 1 192.168.1.227 TCP_MISS/200 496 GET https://192.168.1.102/ - ROUNDROBIN_PARENT/192.168.1.21 text/html When I turn on ht

Re: [squid-users] Squid 3.5.24 is available

2017-01-30 Thread Alex Rousskov
On 01/30/2017 12:08 AM, Amos Jeffries wrote: > * Bug #3940 pt2: Make 'cache deny' do what is documented > > There was a small regression in 3.5.23 release fix for bug 3940. The > 'cache deny' rules were not being obeyed. Surprisingly this has had no > complaints. There were complaints. That "small

[squid-users] irregular traffic when using proxy, not if NATed

2017-01-30 Thread le dahut
Hello. On certain upload websites, the traffic monitor shows an irregular traffic when uploading through squid, while uploading NATed (not using squid) gives a regular traffic. Traffic monitoring on the client gives this when using squid : https://dev-eole.ac-dijon.fr/attachments/download/197

Re: [squid-users] Log Setup

2017-01-30 Thread Amos Jeffries
On 31/01/2017 3:46 a.m., creditu wrote: > I have a 3.1 accelerator and have set the logs up to emulate _httpd_log. Apache ("httpd") is a web server. Its logging format was not designed for use by proxies nor to display the type of information routinely handled by proxies (and CDN in your case). T