Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Arctic5824
hey sorry i accidently directly sent it again, instead of the email list: On Tuesday, June 22nd, 2021 at 3:50 PM, Antony Stone wrote: > You might want to be aware that this is illegal in many countries, and a > number of Internet Service Providers have been sued and/or fined for > manipulati

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Arctic5824
On Tuesday, June 22nd, 2021 at 3:37 PM, Antony Stone wrote: > On Wednesday 23 June 2021 at 00:06:21, Coenraad Loubser wrote: > > > I'm sure there are many other ways to do this too... again, what's your > > > > real use case here? > > My guess now that I know Arctic 5824 is deliberately running

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Arctic5824
On Tuesday, June 22nd, 2021 at 3:37 PM, Antony Stone wrote: > On Wednesday 23 June 2021 at 00:06:21, Coenraad Loubser wrote: > > > I'm sure there are many other ways to do this too... again, what's your > > > > real use case here? > > My guess now that I know Arctic 5824 is deliberately runni

Re: [squid-users] Data not being cached

2021-06-22 Thread Darwin O'Connor
On 2021-06-22 8:00 a.m., squid-users-requ...@lists.squid-cache.org wrote: On 21/06/21 6:41 am, Darwin O'Connor wrote: I run a transit prediction web app . It connects to a variety of web APIs to collect the real time transit data it needs. The app's activities are spli

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Arctic5824
On Tuesday, June 22nd, 2021 at 2:15 PM, Antony Stone wrote: > > > > What!? > > > > That is not even one of your listed IP addresses. > > > > Are you really running an open proxy on the Internet!? > > > > Please turn it off now until you understand the advice Alex and I are Hey Antony, I appreci

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Arctic5824
On Tuesday, June 22nd, 2021 at 1:56 PM, Antony Stone wrote: > On Tuesday 22 June 2021 at 22:53:08, Arctic5824 wrote: > > > Hey, yes this is actually the case, for testing instead of > > > > > http_access allow localhost > > > > im running with > > > > > http_access allow all > > Please do not te

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Arctic5824
On Tuesday, June 22nd, 2021 at 1:44 PM, Antony Stone wrote: > On Tuesday 22 June 2021 at 22:37:16, Alex Rousskov wrote: > > > On 6/22/21 4:28 PM, Arctic5824 wrote: > > > > > Hey! thanks for the info, I just tried that but it seems https is still > > > > > > being allowed, and I can see it in the

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Arctic5824
On Tuesday, June 22nd, 2021 at 1:37 PM, Alex Rousskov wrote: > Squid bugs notwithstanding, either your Squid is not running with the > configuration that you have shared with us OR... Hey, yes this is actually the case, for testing instead of > http_access allow localhost im running with > htt

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread squid3
On 2021-06-23 11:20, Arctic5824 wrote: hey sorry i accidently directly sent it again, instead of the email list: On Tuesday, June 22nd, 2021 at 3:50 PM, Antony Stone wrote: You might want to be aware that this is illegal in many countries, and a number of Internet Service Providers have been

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Arctic5824
sorry, i accidentally sent email to you instead of the email list (Im new to mailing lists) so im re-sending it but to the list On Tuesday, June 22nd, 2021 at 12:41 PM, Antony Stone wrote: > To disable HTTPS access through the proxy, simply deny all CONNECT > > requests using http_access rules.

[squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Arctic5824
Hello, Recently I setup my first squid proxy, I want it when users try to acces a website via https, they get redirected to the http version, I tried disabling https by reading the comments in the config, the squid docs, and online forums, but I am unable to figure this out, I also tried blocki

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Antony Stone
On Wednesday 23 June 2021 at 00:44:44, Arctic5824 wrote: > I want to run an open proxy and replace google adverts w/my adverts. You might want to be aware that this is illegal in many countries, and a number of Internet Service Providers have been sued and/or fined for manipulating the content

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Coenraad Loubser
Just like for every regulation there is an equal and opposite loophole, there are many legitimate uses for something like this... be it archival, ease of access, or making things simpler to access or available for offline use... And ... when I think of all the potentially nefarious uses... I like

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Antony Stone
On Wednesday 23 June 2021 at 00:06:21, Coenraad Loubser wrote: > I'm sure there are many other ways to do this too... again, what's your > real use case here? My _guess_ now that I know Arctic 5824 is deliberately running an open web proxy on the Internet (with co-operation from the hosting prov

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Coenraad Loubser
Of course you could always just run your own web-based proxy such as these: https://www.google.com/search?q=web+based+proxies - that would fetch the https site if necessary, and render it as http - but it will rarely be a perfect copy. I'm sure there are many other ways to do this too... again, wh

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Coenraad Loubser
This seems all good and well if you're just proxying traffic to your own servers... but if you want to run an actual proxy this doesn't really make sense any more. You can block HTTPS through Squid, and even do some redirection with your firewall too - but when it comes to whether it will work, yo

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Antony Stone
On Tuesday 22 June 2021 at 23:13:19, Antony Stone wrote: > On Tuesday 22 June 2021 at 23:05:20, Arctic5824 wrote: > > On Tuesday, June 22nd, 2021 at 1:56 PM, Antony Stone wrote: > > > Please do not test and report problems with one configuration, and then > > > tell us you have a different one. >

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Antony Stone
On Tuesday 22 June 2021 at 23:05:20, Arctic5824 wrote: > On Tuesday, June 22nd, 2021 at 1:56 PM, Antony Stone wrote: > > > > Please do not test and report problems with one configuration, and then > > tell us you have a different one. > > Sorry, I shouldnt have done that. > my config(but the onl

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Antony Stone
On Tuesday 22 June 2021 at 22:53:08, Arctic5824 wrote: > Hey, yes this is actually the case, for testing instead of > > > http_access allow localhost > > im running with > > > http_access allow all Please do not test and report problems with one configuration, and then tell us you have a diff

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Antony Stone
On Tuesday 22 June 2021 at 22:54:42, Arctic5824 wrote: > On Tuesday, June 22nd, 2021 at 1:44 PM, Antony Stone wrote: > > > > #http_access deny !Safe_ports > > > > Has that been consciously and deliberately commented-out? > > > > #http_access allow localnet > > > > http_access allow localhost >

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Alex Rousskov
On 6/22/21 4:53 PM, Arctic5824 wrote: > On Tuesday, June 22nd, 2021 at 1:37 PM, Alex Rousskov > wrote: >> Squid bugs notwithstanding, either your Squid is not running with the >> configuration that you have shared with us OR... > > Hey, yes this is actually the case, for testing instead of >>

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Antony Stone
On Tuesday 22 June 2021 at 22:37:16, Alex Rousskov wrote: > On 6/22/21 4:28 PM, Arctic5824 wrote: > > > > Hey! thanks for the info, I just tried that but it seems https is still > > being allowed, and I can see it in the logs as well "TCP_TUNNEL/200 717 > > CONNECT s.youtube.com:443 -" > > my con

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Alex Rousskov
On 6/22/21 4:28 PM, Arctic5824 wrote: >> To disable HTTPS access through the proxy, simply deny all CONNECT >> requests using http_access rules. > Hey! thanks for the info, I just tried that but it seems https is still being > allowed, and I can see it in the logs as well > "TCP_TUNNEL/200 717 CO

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Antony Stone
On Tuesday 22 June 2021 at 21:32:10, Arctic5824 wrote: > Hello, Recently I setup my first squid proxy, > > I want it when users try to acces a website via https, they get redirected > to the http version 1. What makes you believe that sites *have* an HTTP version? 2. What do you think should ha

Re: [squid-users] Newbie question, How to fully disable/disallow https?

2021-06-22 Thread Alex Rousskov
On 6/22/21 3:32 PM, Arctic5824 wrote: > Hello, Recently I setup my first squid proxy, > > I want it when users try to acces a website via https, they get > redirected to the http version, I tried disabling https by reading the > comments in the config, the squid docs, and online forums, but I am >

Re: [squid-users] How to execute external helpers for each request ?

2021-06-22 Thread Alex Rousskov
On 6/22/21 5:20 AM, ho...@free.fr wrote: > We are using a database with a list of user, and the proxy they need to use. > > So in squid.conf file, we declare an external acl: FYI: Your are not declaring an external ACL. You are declaring an authentication helper. > -

[squid-users] How to execute external helpers for each request ?

2021-06-22 Thread hoper
Hi, I have a big problem here. If someone know well squid helpers and external acl, please take a look. We are using a database with a list of user, and the proxy they need to use. So in squid.conf file, we declare an external acl: - auth_param