Re: [squid-users] Squid - Can't visit (government site and Banking Site) - Please help

2020-04-27 Thread russel0901
okay will try to upgarde... our goal is to have a squid proxy that will allow all website (without any restriction) reason: I only need the squid proxy to monitor the website visit of the user via sqstat and SARG (squid analyze report generator) Problem: all website is okay only government site

Re: [squid-users] Squid - Can't visit (government site and Banking Site) - Please help

2020-04-27 Thread Matus UHLAR - fantomas
On 27.04.20 02:17, russel0901 wrote: okay will try to upgarde... our goal is to have a squid proxy that will allow all website (without any restriction) this is the standard behaviour. Note that you should only allow your clients, not clients from the internet reason: I only need the squid p

Re: [squid-users] Squid - Can't visit (government site and Banking Site) - Please help

2020-04-27 Thread russel0901
I made a new Config and upgrade to CentOS 8.1xxx and Squid 4.4 STILL CAN'T VISIT THE WEBSITE (GOVT SITE AND BANKING SITES) This is my Squid.conf # # Recommended minimum configuration: # # Example rule allowing access from your local networks. # Adapt to list your (internal) IP networks from wh

Re: [squid-users] Squid - Can't visit (government site and Banking Site) - Please help

2020-04-27 Thread Matus UHLAR - fantomas
On 27.04.20 07:31, russel0901 wrote: I made a new Config and upgrade to CentOS 8.1xxx and Squid 4.4 STILL CAN'T VISIT THE WEBSITE (GOVT SITE AND BANKING SITES) stop shouting... what is your error message and what is the message in logs? what do your clients have configured in browsers? are yo

[squid-users] Help regarding configuring a native FTP proxy

2020-04-27 Thread Dawood Aijaz
Hi, After Amos Jeffries pointed out that there is native FTP support in squid as of Cv3.5.But I am unable to find any help regarding configuration and any tutorial to help me do this task Can anyone share configuration for setting up native FTP proxy, Regards, Dawood Aijaz ___

Re: [squid-users] failing https requests

2020-04-27 Thread Adam Weremczuk
Thanks Amos for the hint. Tcpdump in source reveals the following: HTTP/1.1 400 Bad Request Server: squid/3.5.27 Mime-Version: 1.0 Date: Mon, 27 Apr 2020 13:34:47 GMT Content-Type: text/html;charset=utf-8 Content-Length: 4000 X-Squid-Error: ERR_INVALID_REQ 0 Vary: Accept-Language Content-Languag

Re: [squid-users] Help regarding configuring a native FTP proxy

2020-04-27 Thread Matus UHLAR - fantomas
On 27.04.20 18:46, Dawood Aijaz wrote: After Amos Jeffries pointed out that there is native FTP support in squid as of Cv3.5.But I am unable to find any help regarding configuration and any tutorial to help me do this task Can anyone share configuration for setting up native FTP proxy, I belie

Re: [squid-users] failing https requests

2020-04-27 Thread Matus UHLAR - fantomas
On 27.04.20 15:03, Adam Weremczuk wrote: Tcpdump in source reveals the following: HTTP/1.1 400 Bad Request does TCPDUMP show the request too? Maybe you use intercepted connections on standard http_port or you use squid as destination server without specifying vhost? -- Matus UHLAR - fantomas,

Re: [squid-users] Squid - Can't visit (government site and Banking Site) - Please help

2020-04-27 Thread russel0901
Hi again... sorry i was not shouting just making the message capitalize. the message on my logs is... TCP_TUNNEL/200 39 CONNECT www.bancnetonline.com:443 - HIER_DIRECT/203.131.77.194 - but still i can't visit the site... weird problem: sometimes the website can be visited but rarely happen, mos

[squid-users] explicit proxy and iptables

2020-04-27 Thread Vieri
Hi, I've been using Squid + TPROXY in transparent sslbump mode for quite a while now, but I'd like to use an explicit proxy with user authentication instead. I have Squid on my first firewall/gateway node, and then I have another gateway (node 2) where all the HTTP requests go through, with mul

[squid-users] Best way to prevent squid from bumping CONNECTs

2020-04-27 Thread Scott
Hi, my experience with ssl_bump is that it tries to bump SSL connections whether presented to Squid explicitly or implicitly. I have a device with two pieces of software, one configured with Squid explicitly, one that requires intercept (via WCCP). So both explicit CONNECT messages arrive at s

Re: [squid-users] Best way to prevent squid from bumping CONNECTs

2020-04-27 Thread Alex Rousskov
On 4/27/20 12:21 PM, Scott wrote: > my experience with ssl_bump is that it tries to bump SSL connections whether > presented to Squid explicitly or implicitly. * For http_port configured with an ssl-bump flag, HTTP CONNECT tunnels are sent to the SslBump code. * For https_port configured with a

[squid-users] Using a Baltimore root certificate in transparent ssl proxying

2020-04-27 Thread Lei Wen
Hi, We were able to set up the squid in a host to container infrastructure. That is saying the squid is installed on host, proxying traffic from the container on the same host. With transparent proxy including SSL traffic. Another feature we enabled is request_header_access and request_header_r