[squid-users] helperHandleRead: unexpected read

2019-10-31 Thread 499258179
I just start learn squid, and i find a 2019/11/01 00:06:14 kid1| helperHandleRead: unexpected read from timecheck #Hlpr8, 3 bytes 'OK ' 2019/11/01 00:06:20 kid1| helperHandleRead: unexpected read from timecheck #Hlpr6, 3 bytes 'OK in my cache log, timecheck is my php auth for squid I have follow

[squid-users] optional verification of clients?

2019-10-31 Thread Antonio SJ Musumeci
Is there a way to do something similar to NGINX's "ssl_verify_client optional;"? ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Unsuccessful at using Squid v4 with intercept

2019-10-31 Thread FOUTREL Sébastien
De : squid-users de la part de Antony Stone Envoyé : mercredi 30 octobre 2019 17:39 À : squid-users@lists.squid-cache.org Objet : Re: [squid-users] Unsuccessful at using Squid v4 with intercept On Wednesday 30 October 2019 at 17:11:29, FOUTREL Sébastien

Re: [squid-users] Squid proxy will forward message with 'alternating host header' but logs another?

2019-10-31 Thread Alex Rousskov
On 10/31/19 7:48 AM, Mark Bergman wrote: > logformat combined2 ... %ru ... "%>h" > example log line: > ... http://www.google.com/ ... "...Orig-Host: > someevilhost.appspot.com\r\nHost: > www.google.com\r\n"  > I'm looking for a  way to have Squid log the original request You

Re: [squid-users] Squid proxy will forward message with 'alternating host header' but logs another?

2019-10-31 Thread Mark Bergman
reincluded the list for completeness and archiving. We're building a setup where I want to be able to find domain fronting [ https://en.wikipedia.org/wiki/Domain_fronting] attempts in the logs used test script: > > import requests > proxies = {'http': 'http://10.0.0.4:8080',} > headers =

Re: [squid-users] Squid proxy will forward message with 'alternating host header' but logs another?

2019-10-31 Thread Amos Jeffries
On 31/10/19 8:48 pm, Mark Bergman wrote: > Can i stop squid from 'repairing' host headers? Yes. For context: RFC 7230 : "If the target URI includes an authority component, then a client MUST send a field-value for Host that is identical to that authority component" "If the target URI

Re: [squid-users] acl for matching URLs (non-regex)

2019-10-31 Thread Amos Jeffries
On 28/10/19 6:10 am, Felix Leimbach wrote: > Hi, > > I want to include the URLhaus blacklist [1] to protect my users from malware, > since squidblacklists.org doesn't seem to be actively maintained anymore (RIP > Ben Nichols). > > However there does not seem to exist an acl type that can match

[squid-users] Squid proxy will forward message with 'alternating host header' but logs another?

2019-10-31 Thread Mark Bergman
Can i stop squid from 'repairing' host headers? I've been all over this for hours, I can only lead this back to this change in 1999 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=50292 I wan't this sample code to do trough squid what it would do without a proxy at all and i want squid to log

Re: [squid-users] ssl bump intermediate certificate

2019-10-31 Thread Amos Jeffries
On 31/10/19 9:49 am, Marek Greško wrote: > Hello, > > Matus, I also found the document. It should be sending the chain, but > is not. When I specify cafile option it responds I shoud use > tls-cafile. But in either case it is not sending. > > Walter, if squid has such requirement, then it is