Re: [squid-users] Pages sometimes load as a mess of random (?) symbols

2017-10-05 Thread Amos Jeffries
On 05/10/17 19:42, Grey wrote: Sorry for not including enough informatio nin the first place. 1. Here's my config, keep in mind it's a test server that will eventually replace the one (not updated) we're using right now so the configuration is kinda bare-bones: ### TESTSQUID1 ### http_port 312

Re: [squid-users] Enable tproxy in Squid 3.5 running on Debian 9

2017-10-05 Thread Amos Jeffries
On 05/10/17 15:01, xpro6000 wrote: I'm trying to setup tproxy with Squid 3.5 for the purpose of having the same outgoing ip as the connecting ip. (I have thousands of IPs and I can not add them one by one) I started with a fresh install of Debian 9, installed Squid by apt install squid then

[squid-users] New Squid 3.5 reconfigure causes service down

2017-10-05 Thread Nicola Ferrari (#554252)
Hi List! We're experiencing problems with a just-upgraded squid install (from Debian 8 to Debian 9, using packages in repos). Here are the details from squid -version: Squid Cache: Version 3.5.23 Service Name: squid Debian linux We use "negotiate kerberos" authenticators to offer Active Director

Re: [squid-users] Pages sometimes load as a mess of random (?) symbols

2017-10-05 Thread Grey
Firstly, thanks a lot for taking the time to check my configuration and provide such detailed suggestions; I think I've followed all of them and fixed the problems you pointed out. We have a Windows domain and all those "all" directives where inherited from our old proxy server (running Squid verso

[squid-users] Is your kerberos ticket expired?

2017-10-05 Thread erdosain9
Hi. All is working fine, but im having this error in the mail of root -- From r...@squid.domain.lan Tue Oct 3 04:00:02 2017 Return-Path: X-Original-To: root Delivered-To: r...@squid

Re: [squid-users] New Squid 3.5 reconfigure causes service down

2017-10-05 Thread Alex Rousskov
On 10/05/2017 03:20 AM, Nicola Ferrari (#554252) wrote: > issuing the "squid -k reconfigure" command (i.e. to > adjust acls in conf file) the result is not just a configuration reload, > but authenticators processes are restarting, As you have discovered already, running heavy unnecessary actions

Re: [squid-users] New Squid 3.5 reconfigure causes service down

2017-10-05 Thread Nicola Ferrari (#554252)
On 05/10/2017 18:25, Alex Rousskov wrote: > The "couple of minutes" part might be related to your upgrade and, if > so, you may be able to avoid such delays. For list readers not familiar > with Debian releases, which _Squid_ version are you upgrading from? > I was running squid 3.4 on top of Debi

Re: [squid-users] Enable tproxy in Squid 3.5 running on Debian 9

2017-10-05 Thread xpro6000
I'm back to square one then, and it looks like there is no way to tell Squid to use the same connecting ip for the outgoing ip, which is what I need. On Thu, Oct 5, 2017 at 3:49 AM, Amos Jeffries wrote: > On 05/10/17 15:01, xpro6000 wrote: > >> I'm trying to setup tproxy with Squid 3.5 for the p

Re: [squid-users] New Squid 3.5 reconfigure causes service down

2017-10-05 Thread Alex Rousskov
On 10/05/2017 10:44 AM, Nicola Ferrari (#554252) wrote: > On 05/10/2017 18:25, Alex Rousskov wrote: >> The "couple of minutes" part might be related to your upgrade and, if >> so, you may be able to avoid such delays. For list readers not familiar >> with Debian releases, which _Squid_ version are

Re: [squid-users] Enable tproxy in Squid 3.5 running on Debian 9

2017-10-05 Thread Alex K
You will need to transpareny redirect the traffic and not explicitly pointing your browser to squid. Seems that the mentioned firewall rules are correct. You will need a policy route also for the marked traffic. On Oct 5, 2017 7:54 PM, "xpro6000" wrote: I'm back to square one then, and it looks

[squid-users] SNI-based forwarding to parent proxy

2017-10-05 Thread C. Kroeger
Hi there, i've been new to squid and trying to get a certain problem solved. I have a setup with an VPN server, redirecting any traffic to its port 80/443 to a squid server. The users within that VPN can browse the web (both http and https) without any problems. However, I need to redirect http(s

Re: [squid-users] Enable tproxy in Squid 3.5 running on Debian 9

2017-10-05 Thread Eliezer Croitoru
Hey, Can you clarify the network topology of your setup? Also is squid another machine on lan and you are using another router or squid sits in the a DMZ? Can you add ip addresses of: - client machine - squid - router of this network? Thanks, Eliezer http://ngtech.co.il/lmgtfy/ Linux Syste

Re: [squid-users] SSL Bump Failures with Google and Wikipedia

2017-10-05 Thread Eliezer Croitoru
Hey Yuri and Rafael, I have tried to find a site which uses brotli compression but yet to find one. Also I have not seen any brotli request headers in firefox or chrome, maybe there is a specific browser which uses it? Thanks, Eliezer Eliezer Croitoru Linux System Administrator Mobile: +97

Re: [squid-users] YouTube\GoogleVideo caching is here, tested and verified.

2017-10-05 Thread Mohd Akhbar
Hi, would you mind sharing the details steps, or have you documented it anywhere that we can refer. For me, i would like to test in my school env and maye al so be beneficial for education purposes. Another thing is, does you solution will save a specific video res like 720p or is it vbr ? And wha

Re: [squid-users] SSL Bump Failures with Google and Wikipedia

2017-10-05 Thread Rafael Akchurin
Hello Eliezer, From desktop ff/chrome goto youtube. It will be br encoded. Best regards, Rafael Akchurin > Op 6 okt. 2017 om 02:43 heeft Eliezer Croitoru het > volgende geschreven: > > Hey Yuri and Rafael, > > I have tried to find a site which uses brotli compression but yet to find one. > A

Re: [squid-users] New Squid 3.5 reconfigure causes service down

2017-10-05 Thread Amos Jeffries
On 06/10/17 05:44, Nicola Ferrari (#554252) wrote: On 05/10/2017 18:25, Alex Rousskov wrote: The "couple of minutes" part might be related to your upgrade and, if so, you may be able to avoid such delays. For list readers not familiar with Debian releases, which _Squid_ version are you upgrading