Re: [squid-users] Cache-Peer - Negotiate

On 22/03/2017 1:26 a.m., Hareesh wrote: > Hi, > I am trying to setup Squid as a local HTTP child proxy to a parent/corporate > Cisco Ironport WSA proxy. I need help in setting up authentication(Negotiate) > to be done automatically from any client who is trying to access internet > through the

Re: [squid-users] ext_wbinfo_group_acl is not working

On 22/03/2017 1:04 a.m., Verónica Ovando wrote: >>> Hi, everybody! >>> >>> >>> I have my Squid 3.4.8 running in Debian Jessie. It has been working with >>> Active Directory authentication for more than a year without any kind of >>> problem. But since a couple of weeks ago, suddenly, it stopped

[squid-users] Assistance with WCCPv2 Setup with Cisco Router

Sorry, I didn't see your original reply. I will look into these issues and troubleshoot further, thank you. Cooper From: squid-users on behalf of squid-users-requ...@lists.squid-cache.org

Re: [squid-users] Squid Authentication with HTTP REST API

On 20/03/2017 7:49 p.m., Serhat Koroglu wrote: > Sorry for late reply. > > I have find a suitable solution for validation through a http web > service. Here tells developing custom helper even using php: > http://freesoftwaremagazine.com/articles/authentication_with_squid/ > That's nice. > > >

Re: [squid-users] Assistance with WCCPv2 Setup with Cisco Router (Yuri Voinov)

Hello, I'm not sure if I understand what you're asking me to check. I've followed the steps in the configuration examples provided and it's still not working. The Squid proxy and Cisco router are both configured to use GRE as you mentioned in your other message: R3#show ip wccp summary

Re: [squid-users] Squid Authentication with HTTP REST API

On 20/03/2017 9:27 p.m., Eliezer Croitoru wrote: > Hey Serhat, > > The right way to support OAUTH2 or any similar idea would be using an ICAP > service or ECAP module(to my knowledge). Sigh. Another perfect example of how giving us incorrect information results in bad answers. OAuth2 is an

Re: [squid-users] URL list from a URL

The current StoreID helper can be converted pretty fast into what he needs. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of

Re: [squid-users] URL list from a URL

On 03/21/2017 02:30 PM, Jason B. Nance wrote: > I should have mentioned that I'm not caching, I'm only using Squid > for whitelisting in this case. Would you still say this is the right > path? No. You probably have two better options: 1. Use a file with list of mirror URLs as an ACL

Re: [squid-users] URL list from a URL

22.03.2017 2:32, Jason B. Nance пишет: > I'm sorry, this message was sent prematurely. :-\ > > Completed message follows. > > > Hi Yuri, > > I should have mentioned that I'm not caching, I'm only using Squid for > whitelisting in this case. Would you still say this is the right path? It >

[squid-users] [RFC] Do not use idle dead peers

Hello, This Request For Comments proposes to remove a subtle Squid (mis)feature. If you happen to use the feature detailed below or know somebody who does, please speak up to protect it! If nobody defends this feature, we may remove it (to get rid of its bad side effects). If you use

Re: [squid-users] URL list from a URL

I'm sorry, this message was sent prematurely. :-\ Completed message follows. Hi Yuri, I should have mentioned that I'm not caching, I'm only using Squid for whitelisting in this case. Would you still say this is the right path? It seems that there is a fair amount of hard coding in this

Re: [squid-users] URL list from a URL

Hi Yuri, I should have mentioned that I'm not caching, I'm only using Squid for whitelisting in this case. Would you still say this is the right path? It seems that there is a fair amount of hard coding in this method at least based on: - Original Message - From: "Yuri Voinov"

Re: [squid-users] Assistance with WCCPv2 Setup with Cisco Router

PS. You configured GRE tunnel, as I can see. Check it defined on both sides: on router and on your proxy box. Also note, GRE will process on router CPU, instead of L2 redirection, which is runs on control plane and hardware accelerated. 22.03.2017 1:04, Waldon, Cooper пишет: > > Hello All, > >

Re: [squid-users] Assistance with WCCPv2 Setup with Cisco Router

Ah, forgot about this: http://wiki.squid-cache.org/ConfigExamples/Intercept 22.03.2017 1:04, Waldon, Cooper пишет: > > Hello All, > > > > I’m trying to set up a transparent proxy for http and https using > Cisco Routers and Squid. I have followed the configuration examples > that are listed

Re: [squid-users] Assistance with WCCPv2 Setup with Cisco Router

22.03.2017 1:04, Waldon, Cooper пишет: > > Hello All, > > > > I’m trying to set up a transparent proxy for http and https using > Cisco Routers and Squid. I have followed the configuration examples > that are listed under the wccp2 overview section >

Re: [squid-users] URL list from a URL

Yes. Functionality you required is: http://wiki.squid-cache.org/Features/StoreID 21.03.2017 21:52, Jason B. Nance пишет: > Hello, > > I'm using Squid 3.5.20 and wonder if it is possible to define an ACL which > retrieves the list of URLs from another URL (similar to pointing to a file). >

Re: [squid-users] squid-users Digest, Vol 31, Issue 61

On Tuesday 21 March 2017 at 17:29:36, christian brendan wrote: > Thanks a lot for the information. > I will try this and give feedback. > Best Regards Please note both of the following for when you post your feedback: 1. The request inserted into the email you replied to by the mailing list

Re: [squid-users] squid-users Digest, Vol 31, Issue 61

Thanks a lot for the information. I will try this and give feedback. Best Regards On Tue, Mar 21, 2017 at 1:00 PM, wrote: > Send squid-users mailing list submissions to > squid-users@lists.squid-cache.org > > To subscribe or unsubscribe via the

[squid-users] URL list from a URL

Hello, I'm using Squid 3.5.20 and wonder if it is possible to define an ACL which retrieves the list of URLs from another URL (similar to pointing to a file). In this specific use case it is to allow a Foreman server to sync Yum content from the CentOS mirrors. I tell Foreman to use the

Re: [squid-users] Load balance on two internet connections

On 21.03.2017 15:46, TarotApprentice wrote: If I have two internet connections is it possible to spread the traffic between them? I have a single squid 3.5 instance as an explicit proxy under Linux. Hello. I use output load balancing network traffic between 3 ISP using linux load-balancing

Re: [squid-users] Squid blocking own OCSP/AIA requests

On 03/21/2017 04:35 AM, Markus Wernig wrote: > > 2017-03-21 10:35:08.338 +0100 000137 - TCP_DENIED/403 3607 GET > http://apps.identrust.com/roots/dstrootcax3.p7c - HIER_NONE/- > text/html;charset=utf-8 - > 2017-03-21 10:35:08.345 +0100 000161 10.254.254.2 NONE/200 0 CONNECT >

Re: [squid-users] Load balance on two internet connections

On 22.03.17 00:46, TarotApprentice wrote: If I have two internet connections is it possible to spread the traffic between them? I have a single squid 3.5 instance as an explicit proxy under Linux. you can use multiple outgoing IP Addresses in squid

[squid-users] Cache-Peer - Negotiate

Hi, I am trying to setup Squid as a local HTTP child proxy to a parent/corporate Cisco Ironport WSA proxy. I need help in setting up authentication(Negotiate) to be done automatically from any client who is trying to access internet through the child proxy. So here is what I did. -

Re: [squid-users] ext_wbinfo_group_acl is not working

>> Hi, everybody! >> >> >> I have my Squid 3.4.8 running in Debian Jessie. It has been working with >> Active Directory authentication for more than a year without any kind of >> problem. But since a couple of weeks ago, suddenly, it stopped authenticate >> users, asking for credentials

Re: [squid-users] Squid Transparent/intercept Issues

On Tuesday 21 March 2017 at 12:00:05, christian brendan wrote: > > Today's Topics: > >1. Re: Squid Transparent/intercept Issues (Antony Stone) > >2. Re: SMP and AUFS (Matus UHLAR - fantomas) > >3. Re: SMP and AUFS (Alex Rousskov) > >4. Re: squid workers question (Alex Rousskov) >

Re: [squid-users] Squid Transparent/intercept Issues

u postu. > Eagles may soar, but weasels don't get sucked into jet engines. > > > -- > > Message: 6 > Date: Mon, 20 Mar 2017 14:08:48 -0600 > From: Alex Rousskov <rouss...@measurement-factory.com> > To: squid-users@lists.squid-cache.org > Subject: Re: [

[squid-users] Squid blocking own OCSP/AIA requests

Hi all I have configured Squid 4.0.18 (CentOS) with sslbump and clamav as ecap_service. This works well. One thing I've noticed though, are constant log entries like this in access.log: 2017-03-21 10:35:08.338 +0100 000137 - TCP_DENIED/403 3607 GET

Re: [squid-users] blocking or allowing specific youtube videos

ufdbGuard is a URL filter which given the input www.youtube.com/watch?v=XX blocks the following URLs: www.youtube.com/watch?v=XX www.youtube.com/embed/XX www.youtube.com/get_video_info?video_id=XX ytimg.googleusercontent.com/vi/XX/

Re: [squid-users] blocking or allowing specific youtube videos

Hello Sohan, I guess this may be helpful in your project https://docs.diladele.com/faq/filtering/youtube_allow_only_specific_video.html This can easily be done within squid.conf (ICAP is not required). Best regards, Rafael Akchurin Diladele B.V. https://www.diladele.com -- Please take a look

[squid-users] blocking or allowing specific youtube videos

Project subject is blocking or allowing specific youtube videos. For that research I hope to add more features but currently I’m stuck to take full urls from clients. According to my project, environment should be client server environment. All the client’s youtube traffic should be manage through