[squid-users] ACLs allow/deny logic

2017-06-26 Thread Vieri
Hi, I'd like to allow by default and deny only according to the ACLs I define. Here's an example with Telegram. I'd like to deny all application/octet-stream mime types in requests and replies except for a set of IP addresses or domains. acl denied_restricted1_mimetypes_req req_mime_type -i "/

Re: [squid-users] annotation and fast / slow acl

2017-06-26 Thread FUSTE Emmanuel
Le 21/06/2017 à 19:17, Amos Jeffries a écrit : > On 22/06/17 04:51, FUSTE Emmanuel wrote: >> So arbitrary k- v pair not used by the acl helper protocol could be >> matched against with the note acl ? >> How it relate to the defined/reserved tag= and clt_conn_tag= keywords of >> the acl helper proto

Re: [squid-users] ACLs allow/deny logic

2017-06-26 Thread Amos Jeffries
On 26/06/17 20:46, Vieri wrote: Hi, I'd like to allow by default and deny only according to the ACLs I define. Here's an example with Telegram. I'd like to deny all application/octet-stream mime types in requests and replies except for a set of IP addresses or domains. Er, deny is the opposi

[squid-users] Squid 3.5.26 for Microsoft Windows 64-bit is available

2017-06-26 Thread Rafael Akchurin
Greetings everyone, The CygWin based build of Squid proxy for Microsoft Windows version 3.5.26 is now available (amd64 only!). * Original release notes are at http://www.squid-cache.org/Versions/v3/3.5/squid-3.5.26-RELEASENOTES.html . * Ready to use MSI package can be downloaded from http://squ

Re: [squid-users] Squid 3.5.26 for Microsoft Windows 64-bit is available

2017-06-26 Thread Benjamin E. Nichols
Thank you! :P Greetz everyone! On 6/26/2017 6:24 AM, Rafael Akchurin wrote: Greetings everyone, The CygWin based build of Squid proxy for Microsoft Windows version 3.5.26 is now available (amd64 only!). * Original release notes are at http://www.squid-cache.org/Versions/v3/3.5/squid-3.5

Re: [squid-users] ACLs allow/deny logic

2017-06-26 Thread Vieri
From: Amos Jeffries >> I'd like to allow by default and deny only according to the ACLs I define. >> >> Here's an example with Telegram. I'd like to deny all >> application/octet-stream mime types in requests >> and replies except for a set of IP addresses or

[squid-users] Squid caching bad objects

2017-06-26 Thread Razor Cross
Hi, Amos, We are using squid 3.5. for our server. Recently we have noticed that squid is caching incomplete objects in case of chunked response. We have gone through the squid code. It looks likes squid is caching incomplete response in case of EOF from the server even though it does not receive t

Re: [squid-users] Squid caching bad objects

2017-06-26 Thread Alex Rousskov
On 06/26/2017 10:11 AM, Razor Cross wrote: > We are using squid 3.5. for our server. Recently we have noticed that > squid is caching incomplete objects in case of chunked response. > > We have gone through the squid code. It looks likes squid is caching > incomplete response in case of EOF from

[squid-users] NTLM authentication worked in Squid 2.7.STABLE8 Squid Web Proxy, now need it in v3.5 hosted on Windows server 2k12

2017-06-26 Thread Todd Pearson
I am hosting the squid proxy on Windows 2K12 server.   Squid 2.7.STABLE8 Squid Web Proxy version worked well for authentication until recent Windows 10 update killed Sha1.  Now I am upgrading to squid proxy version 3.5.x.x to restore authentication.   The below settings are longer available in

[squid-users] HIER_NONE on TCP_MISS?

2017-06-26 Thread bump skier
Hi, I'm trying to understand the following behavior I'm seeing with Squid running in accelerator mode. In short, I'm seeing some TCP_MISS for requests to a static javascript file which is initially cached and returned as a cache hit. I suspect the missed cache hits are due to the cache size being

Re: [squid-users] ACLs allow/deny logic

2017-06-26 Thread Vieri
Please bear with me because I still don't quite grasp the AND logic with ACLs. Let's consider the logic "http_access deny (if) X (and) Y (and) Z" and the following squid configuration section: [squid.conf - start] acl denied_restricted1_mimetypes_req req_mime_type -i "/usr/local/proxy-settings/