Re: [squid-users] wiki.squid-cache.org SSL configuration problem ...

2017-08-08 Thread Francesco Chemolli
> On 8 Aug 2017, at 19:06, Walter H. wrote: > > Hello, > > the intermediate certificate which is provided doen't go with the end entitiy > certificate ... > > the intermediate that is provided: Let's Encrypt Authority X1 > the intermediate that should be provided:

[squid-users] kernel: Out of memory: Kill process (squid)

2017-08-08 Thread Cherukuri, Naresh
Hello, I am getting a problem every 19 hours which is squid takes all RAM memory, when my physical memory is full it started using swap space until my swap is full. Finally (OOM) is activating on server and killing all squid child's one by one at last squid parent. Can someone help me how to

[squid-users] Simple ACL help for Kerberos authenticated sessions

2017-08-08 Thread Markus Moeller
Hi, When using the latest squid 4 release you can use %note{group} to get the group information from the Negotiate Kerberos helper to transfer the PAC group SIDs to the external ACL helper. squid.conf ... external_acl_type test_acl ipv4 %LOGIN %note{group}

[squid-users] wiki.squid-cache.org SSL configuration problem ...

2017-08-08 Thread Walter H.
Hello, the intermediate certificate which is provided doen't go with the end entitiy certificate ... the intermediate that is provided: Let's Encrypt Authority X1 the intermediate that should be provided: Let's Encrypt Authority X3 for more see:

Re: [squid-users] Lots of "error:transaction-end-before-headers" in my log

2017-08-08 Thread Alex Rousskov
On 08/08/2017 06:00 AM, Ralf Hildebrandt wrote: > I'm getting quite a bit of "transaction-end-before-headers" errors in > my access.log. > > 1502192404.759 00 10.43.25.85 NONE/000 0 NONE > error:transaction-end-before-headers - HIER_NONE/- - accessRule=- - > Some statistics: >

Re: [squid-users] Upper limit on the number of regular expressions in url_regex?

2017-08-08 Thread Ralf Hildebrandt
* Ralf Hildebrandt : > But why is it failing? I reordered the file sort -r /etc/squid5/generated-rw_urlbl.acl > /etc/squid5/generated-rw_urlbl.acl.new mv /etc/squid5/generated-rw_urlbl.acl.new /etc/squid5/generated-rw_urlbl.acl and reconfigured squid: 2017/08/08

[squid-users] Upper limit on the number of regular expressions in url_regex?

2017-08-08 Thread Ralf Hildebrandt
I'm using this in squid-5.0: acl markRw_urlbl annotate_transaction accessRule=rw_urlbl acl rw_urlbl url_regex "/etc/squid5/generated-rw_urlbl.acl" http_access deny rw_urlbl markRw_urlbl deny_info http://proxy.charite.de/rw_urlbl/ markRw_urlbl # https://ransomwaretracker.abuse.ch/blocklist/

[squid-users] IPv6 and TPROXY

2017-08-08 Thread Walter H.
Hello, I did at the ip6tables like this: https://wiki.squid-cache.org/Features/Tproxy4#iptables_on_a_Router_device iptables -t mangle -N DIVERT iptables -t mangle -A DIVERT -j MARK --set-mark 1 iptables -t mangle -A DIVERT -j ACCEPT iptables -t mangle -A PREROUTING -i br0 -p tcp -m socket -j

[squid-users] Crash: every 19 hours: kernel: Out of memory: Kill process (squid)

2017-08-08 Thread Cherukuri, Naresh
Hello, I am new to squid. I am getting a problem every 19 hours squid takes all RAM memory, then started taking swap in 20 minutes my swap is full. Then server side (OOM) is activating and killing all squid child's then finally killing squid parent. Can someone help me how to address this

[squid-users] Lots of "error:transaction-end-before-headers" in my log

2017-08-08 Thread Ralf Hildebrandt
I'm getting quite a bit of "transaction-end-before-headers" errors in my access.log. Example: 1502192404.344 00 141.42.194.147 NONE/000 0 NONE error:transaction-end-before-headers - HIER_NONE/- - accessRule=- - 1502192404.344 00 141.42.194.147 NONE/000 0 NONE