[squid-users] redirect based on url (302)

2018-09-21 Thread uppsalanet
Hi, We use squid to limit web traffic to a few internal sites, the computers are in in public areas. That works good. Now I have a new case: If a user goes to page "https://browzine.com"; and choose to view a magazine they get redirected (302) to an other site. I would like to open for that redire

Re: [squid-users] Any suggestions or comments about my configuration? squid 3.5.20

2018-09-21 Thread neok
Thank you very much Amos! Your indications have helped me a lot. I have been able to apply them to practically all of them. I share my configuration in case someone with the same objectives can use it. Greetings! squid.conf ### Negotiate/NTLM and Negotiate/Kerberos authentication auth_param neg

Re: [squid-users] Is there any way to cache or forward https requests to an http proxy using Squid?

2018-09-21 Thread Alex Rousskov
On 09/20/2018 03:26 PM, Brett Anderson wrote: > Should I build from the master or a more recent branch? IIRC, the unofficial branch you are using is the only branch containing SslBump with cache_peer" feature today. We are working on submitting that code for the official review. Please note that a

Re: [squid-users] About SSL peek-n-splice/bump configurations

2018-09-21 Thread Julian Perconti
Hi all. I will go (finally) with this sslBump config. Although I still have some doubts... I think that It´s time to finish this thread. # TLS CFG acl noBumpSites ssl::server_name_regex -i "/etc/squid/url.nobump" # steps ACL acl step1 at_step SslBump1 acl step2 at_step SslBump2 acl step3 at_st

Re: [squid-users] About SSL peek-n-splice/bump configurations

2018-09-21 Thread Alex Rousskov
On 09/21/2018 09:08 AM, Julian Perconti wrote: > I will go (finally) with this sslBump config. Although I still have some > doubts... > I think that It´s time to finish this thread. I am confused because "you think it is time to finish this thread" but you are asking new questions. Please clarif

Re: [squid-users] redirect based on url (302)

2018-09-21 Thread Amos Jeffries
On 22/09/18 2:43 AM, uppsalanet wrote: > Hi, > We use squid to limit web traffic to a few internal sites, the computers are > in in public areas. That works good. Now I have a new case: > > If a user goes to page "https://browzine.com"; and choose to view a magazine > they get redirected (302) to

Re: [squid-users] About SSL peek-n-splice/bump configurations

2018-09-21 Thread Julian Perconti
> > I will go (finally) with this sslBump config. Although I still have some > doubts... > > I think that It´s time to finish this thread. > > I am confused because "you think it is time to finish this thread" but you are > asking new questions. Please clarify, do you want answers to the questions

Re: [squid-users] Help: squid restarts and squidGuard die

2018-09-21 Thread Donald Muller
> -Original Message- > From: squid-users On Behalf > Of Amos Jeffries > Sent: Thursday, September 20, 2018 3:50 PM > To: squid-users@lists.squid-cache.org > Subject: Re: [squid-users] Help: squid restarts and squidGuard die > > On 21/09/18 3:46 AM, Donald Muller wrote: > > > >> -Ori

[squid-users] url_rewrite_program doesnt' work after cloning

2018-09-21 Thread Roberto Carna
Dear, I have a Squid 3.5 server working OK. After cloning this server two times, both the new two servers don't execute the following line from /etc/squid/squid.conf: url_rewrite_program /usr/bin/squidGuard -c /etc/squidguard/squidGuard.conf If I execute "/usr/bin/squidGuard -c /etc/squidguard/s

Re: [squid-users] Is there any way to cache or forward https requests to an http proxy using Squid?

2018-09-21 Thread Brett Anderson
Thanks again Alex, For anyone else trying to solve this issue, here's a repo I created which sets everything up in Docker to allow ssl_bump and cache_peer to work. https://github.com/brett--anderson/squid_proxy On Fri, Sep 21, 2018 at 7:53 AM Alex Rousskov < rouss...@measurement-factory.com> wrot

Re: [squid-users] About SSL peek-n-splice/bump configurations

2018-09-21 Thread Alex Rousskov
On 09/21/2018 09:08 AM, Julian Perconti wrote: > ssl_bump peek step1 > ssl_bump splice noBumpSites > ssl_bump stare step2 > # Second rule: > ssl_bump splice noBumpSites > > I think that this rule should implicity match only at step2. I do not know what "implicitly match" means here, but yes,