[squid-users] HTTPS intercept, simple configuration to avoid bank bumping

2015-01-26 Thread Josep Borrell
Hi all, Working on squid 3.5.1 with HTTPS interception. Trying to make a peek/splice configuration to work and avoid bank bumping. Until now bumping is working fine but can't avoid to bump sites on acl. All are bumped. Can anybody share a working configuration or take a look at mine to find why i

Re: [squid-users] HTTPS intercept, simple configuration to avoid bank bumping

2015-01-27 Thread Josep Borrell
I agree. Are there someone with the skills to help us with a working sample ? is an external ACL needed as Dan remarks ? maybe the peek and splice feature need some tuning ? if I can help with something, tell me. Josep De: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] En nombre

[squid-users] derive HTTP/HTTPS upload traffic to a secondary interface.

2015-02-05 Thread Josep Borrell
Hi, I have a squid box with two interfaces. One ADSL 20/1Mb and one SHDSL 4/4Mb. It is a school and they are working with Google Apps for Education. They do a lot of uploading and when using the ADSL, it collapses promptly. Is possible to derive only HTTP/HTTPS upload traffic to the SHDSL and cont

Re: [squid-users] derive HTTP/HTTPS upload traffic to a secondary interface.

2015-02-20 Thread Josep Borrell
d-users] derive HTTP/HTTPS upload traffic to a secondary interface. On 6/02/2015 8:59 p.m., Josep Borrell wrote: > Hi, > > I have a squid box with two interfaces. One ADSL 20/1Mb and one SHDSL 4/4Mb. > It is a school and they are working with Google Apps for Education. > They do a lot

Re: [squid-users] derive HTTP/HTTPS upload traffic to a secondary interface.

2015-02-24 Thread Josep Borrell
quid-users [mailto:squid-users-boun...@lists.squid-cache.org] En nombre de Josep Borrell Enviado el: viernes, 20 de febrero de 2015 16:51 Para: squid-users@lists.squid-cache.org Asunto: Re: [squid-users] derive HTTP/HTTPS upload traffic to a secondary interface. Hi Amos, I tried your suggestion and e

Re: [squid-users] derive HTTP/HTTPS upload traffic to a secondary interface.

2015-02-26 Thread Josep Borrell
HTTP/HTTPS upload traffic to a secondary interface. On 25/02/2015 4:09 a.m., Josep Borrell wrote: > Hi, > > After some digging I realized that this setup works fine for HTTP traffic but > not for HTTPS. I'm using ssl_bump in intercept mode. > Is possible that for HTTPS traff

Re: [squid-users] How are others handling missing intermediate certificates?

2015-04-28 Thread Josep Borrell
Hi Tom, Did you saw the thread “ssl_bump peek in squid-3.5.3” from James Lay ? Maybe can help Josep De: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] En nombre de Tom Harris Enviado el: lunes, 27 de abril de 2015 23:09 Para: squid-users@lists.squid-cache.org Asunto: [squid-u

[squid-users] unexplained MISSes

2014-10-10 Thread Josep Borrell
Hi, I'm trying build a squid server that can cache youtube request for a school. I'm using squid 3.4.7 compiled from source on Ubuntu server 14.04 I have a lot of request that are cached, but not served from cache and generate a TCP_MISS/200 I'm trying to figure why this requests are not served f

Re: [squid-users] unexplained MISSes

2014-10-11 Thread Josep Borrell
-cache.org Asunto: Re: [squid-users] unexplained MISSes -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/10/2014 5:00 a.m., Josep Borrell wrote: > Hi, > > I'm trying build a squid server that can cache youtube request for a > school. I'm using squid 3.4.7 compiled from

Re: [squid-users] unexplained MISSes

2014-10-13 Thread Josep Borrell
e de Amos Jeffries Enviado el: viernes, 10 de octubre de 2014 19:05 Para: squid-users@lists.squid-cache.org Asunto: Re: [squid-users] unexplained MISSes -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/10/2014 5:00 a.m., Josep Borrell wrote: > Hi, > > I'm trying build a squid serve

[squid-users] windowsupdate and ssl_bump

2014-10-18 Thread Josep Borrell
Hi, We are using a 3.4.8 squid Proxy in intercept mode via wccp. Squid intercepts HTTP and HTTPS via ssl_bump. All is working fine except that Windows Machines can't do a Windows Update. It is not working at all giving an error 80072F8F with HTTPS redirection disabled all work fine. Someone know

Re: [squid-users] windowsupdate and ssl_bump

2014-10-19 Thread Josep Borrell
: Re: [squid-users] windowsupdate and ssl_bump -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 18/10/2014 8:56 p.m., Josep Borrell wrote: > Hi, > > We are using a 3.4.8 squid Proxy in intercept mode via wccp. Squid > intercepts HTTP and HTTPS via ssl_bump. All is working fine ex