Re: [squid-users] skipLeadingSpace

2017-04-14 Thread Alex Rousskov
On 04/14/2017 03:30 PM, joseph wrote: > is this correct ?? > > char * > skipLeadingSpace(char *aString) > { > char *result = aString; > > while (xisspace(*aString)) > ++aString; > > return result; > } No, the above code is incorrect. It does nothing [useful]. The bug was

Re: [squid-users] HTTPS woes

2017-04-14 Thread Olly Lennox
Hi Guys. I'm still struggling with this. I'm trying to build a version of 3.5 but I just can't get it to work. I'm currently attempting to rebuild the stretch package with SSL enabled but build keeps failing with the following: ../../src/ssl/gadgets.h:83:45: error: âCRYPTO_LOCK_X509â was not

Re: [squid-users] [RFC] Changes to http_access defaults

2017-04-14 Thread Alex Rousskov
On 04/14/2017 06:22 AM, Amos Jeffries wrote: > To override the propsed default you *add* ports to the Safe_ports and > CONNECT_ports (ala SSL_Ports) lines to make them no longer be denied. > acl Safe_ports port 0-65535 > acl SSL_Ports port 0-65535 Thank you for sharing this important detail!

Re: [squid-users] [RFC] Changes to http_access defaults

2017-04-14 Thread Matus UHLAR - fantomas
On 13.04.17 06:16, Amos Jeffries wrote: What are peoples opinions about making the following items built-in defaults? acl Safe_ports port 21 80 443 acl CONNECT_ports port 443 acl CONNECT method CONNECT shouldn't that be more like following? acl Safe_ports port 80 acl CONNECT_ports port 21

Re: [squid-users] [RFC] Changes to http_access defaults

2017-04-14 Thread Alex Rousskov
On 04/14/2017 04:19 AM, joseph wrote: > System administrator should have possibility to override ANY default. I do not know why you are saying the above. AFAIK, everybody is in agreement that admins should be able to overwrite any defaults, at least at the level of the configured Squid

Re: [squid-users] [RFC] Changes to http_access defaults

2017-04-14 Thread Amos Jeffries
On 14/04/2017 4:52 a.m., Alex Rousskov wrote: > On 04/13/2017 10:39 AM, Alex Rousskov wrote: > >> The "many folks misconfigure access rules" problem may not have a >> good solution (under Squid control); we should be careful not to make >> things worse while not solving the unsolvable problem. >

Re: [squid-users] Multiple http_access Logic At the same time

2017-04-14 Thread Amos Jeffries
On 15/04/2017 1:25 a.m., Serhat Koroglu wrote: > Hello, > > I'm trying to manage squid users to access the proxy if they logged > in and the site url is allowed in my url list. They are running one > by one. If logged in accesses but not check the url and vice versa. > But I want both of them.

Re: [squid-users] Squid proxy with ssl-bump - unrecognized: 'ssl-bump' error

2017-04-14 Thread Amos Jeffries
On 15/04/2017 1:17 a.m., Mohammed al-jakry wrote: > > > > Dears, > > Thanks for adding me to the list… > > > I would like to install squid proxy with SSL bump, I am working on my Virtual > lab and once everything is ok I will Test it on the real network. I already > created I directory

[squid-users] Multiple http_access logic at the same time

2017-04-14 Thread Serhat Koroglu
Hello, I'm trying to manage squid users to access the proxy if they logged in and the site url is allowed in my url list. They are running one by one. If logged in accesses but not check the url and vice versa. But I want both of them. Here is my config part. auth_param basic program

[squid-users] Multiple http_access Logic At the same time

2017-04-14 Thread Serhat Koroglu
Hello, I'm trying to manage squid users to access the proxy if they logged in and the site url is allowed in my url list. They are running one by one. If logged in accesses but not check the url and vice versa. But I want both of them. Here is my config part. auth_param basic program

[squid-users] Squid proxy with ssl-bump - unrecognized: 'ssl-bump' error

2017-04-14 Thread Mohammed al-jakry
Dears, Thanks for adding me to the list… I would like to install squid proxy with SSL bump, I am working on my Virtual lab and once everything is ok I will Test it on the real network. I already created I directory for the cert and generated the cert as below: #Generate Private Key

Re: [squid-users] [squid-dev] [RFC] Changes to http_access defaults

2017-04-14 Thread Amos Jeffries
On 13/04/2017 1:15 p.m., Alex Rousskov wrote: > On 04/12/2017 12:16 PM, Amos Jeffries wrote: > >> Changes to http_access defaults > > Clearly stating what you are trying to accomplish with these changes may > help others evaluate your proposal. Your initial email focuses on _how_ > you are going

Re: [squid-users] HTTPS woes

2017-04-14 Thread Olly Lennox
Thanks Rafael, I'm trying this out now, have had to enable the stretch repos but seems to be building! oli...@lennox-it.uk lennox-it.uk tel: 07900 648 252 From: Rafael Akchurin To: "squid-users@lists.squid-cache.org"

Re: [squid-users] [squid-dev] [RFC] Changes to http_access defaults

2017-04-14 Thread Amos Jeffries
On 14/04/2017 3:58 a.m., Yuri Voinov wrote: > > > 13.04.2017 21:14, Dan Purgert пишет: >> Quoting Alex Rousskov : >> >>> On 04/12/2017 12:16 PM, Amos Jeffries wrote: >>> Changes to http_access defaults >>> >>> Clearly stating what you are trying to

Re: [squid-users] HTTPS woes

2017-04-14 Thread Olly Lennox
(Sorry, reposted because first email was too big I've edited out some bits) No I'm not getting much luck finding these, This is the result of my make install, has it installed right? result of make - Making all in compat make[1]: Entering directory

Re: [squid-users] [squid-dev] [RFC] Changes to http_access defaults

2017-04-14 Thread Amos Jeffries
On 14/04/2017 3:14 a.m., Dan Purgert wrote: > Quoting Alex Rousskov : > >> On 04/12/2017 12:16 PM, Amos Jeffries wrote: >> >>> Changes to http_access defaults >> >> Clearly stating what you are trying to accomplish with these changes may >> help others evaluate

Re: [squid-users] HTTPS woes

2017-04-14 Thread Antony Stone
On Friday 14 April 2017 at 13:52:08, Olly Lennox wrote: > I've tried building it and it seems to have make install -ed correctly but > I'm getting "command not found" when I try to execute squid3. Well, what command are you trying to run (the one which is "not found")? And what do you from

Re: [squid-users] HTTPS woes

2017-04-14 Thread Amos Jeffries
On 14/04/2017 11:52 p.m., Olly Lennox wrote: > I've tried building it and it seems to have make install -ed > correctly but I'm getting "command not found" when I try to execute > squid3. Is there a step I'm missing? Debian latest and custom builds use the binary name 'squid' for versions 3.5+.

Re: [squid-users] HTTPS woes

2017-04-14 Thread Olly Lennox
I've tried building it and it seems to have make install -ed correctly but I'm getting "command not found" when I try to execute squid3. Is there a step I'm missing? oli...@lennox-it.uk lennox-it.uk tel: 07900 648 252 From: Rafael Akchurin To:

Re: [squid-users] HTTPS woes

2017-04-14 Thread Rafael Akchurin
>>> Then my config in Squid is like this, the dhparams file I generated as per >>> instructions in the squid wiki: >> First of all: what's Squid's version? > And secondly; are you sufficiently capable with Debian to (cross-)build your > own Squid package that can run on Raspian? > The Debian

Re: [squid-users] HTTPS woes

2017-04-14 Thread Amos Jeffries
On 14/04/2017 6:00 a.m., Yuri Voinov wrote: > > > 13.04.2017 22:57, Olly Lennox пишет: >> Hi There, >> >> I've been battling for the last few days on a little project to setup a >> Raspberry PI device as a small parental blocking server. I've managed to >> configure the device to work as a

Re: [squid-users] Squid Proxy with simple iptable rule ...

2017-04-14 Thread Amos Jeffries
On 13/04/2017 11:46 p.m., Arsalan Hussain wrote: > Dear All, > > I am facing problem with iptable rules for squid 3.5.23. my simple squid > configuration is attached and also iptable rules. > > It works fine when i restart squid, iptables, network services but after a > while it give problem of

Re: [squid-users] [RFC] Changes to http_access defaults

2017-04-14 Thread joseph
Alex Rousskov wrote > On 04/13/2017 10:39 AM, Alex Rousskov wrote: > >> The "many folks misconfigure access rules" problem may not have a >> good solution (under Squid control); we should be careful not to make >> things worse while not solving the unsolvable problem. > > > Here is an