Re: [squid-users] allow update domain and block everything else

2021-04-21 Thread Miroslaw Malinowski
e other ACL to separately whitelist the sites normally blocked, but can open with a session. > Amos On Thu, Apr 15, 2021 at 9:52 PM Miroslaw Malinowski < mr.miroslaw.malinow...@gmail.com> wrote: > I've found a resolution using a bit better regex: > > acl blackList url_

[squid-users] allow request to cloudfront after 302 redirection.

2021-04-21 Thread Miroslaw Malinowski
Is it possible to create a whitelist that allows cloudfront 302 redirections, e.g. gitlab is using cloudfront as CDN and when we whitelist package.gitlab.com the URL is redirected (302) to https://d20rj4el6vkp4c.cloudfront.net/7/11/ubuntu/package_files/35938.deb?t=1619023239_a63698472b6bebeaee980e7

Re: [squid-users] allow update domain and block everything else

2021-04-15 Thread Miroslaw Malinowski
ed to d20rj4el6vkp4c.cloudfront.net. Is squid stateful in a way that it's able to remember those packets are coming from the same session? What would be the best way to resolve the issue other than just keep adding domain if a thing like this happens. Thanks On Thu, Apr 15, 2021 at 1:03 PM Miroslaw

[squid-users] allow update domain and block everything else

2021-04-15 Thread Miroslaw Malinowski
Hi, I'm trying to use Opnsense built-in squid config to set up a transparent proxy for server updates and block everything else. In GUI they use url_regex for whitelist and blacklist, when I simple per domain whitelist and blacklist it's working as expected, e.g. # ACL - Whitelist - User defined (

Re: [squid-users] squid won't return cached even with refresh_pattern extra options override-lastmod override-expire ignore-reload ignore-no-store ignore-private store-stale

2021-03-24 Thread Miroslaw Malinowski
On 3/24/21 2:49 PM, Miroslaw Malinowski wrote: > > > looking at the code and reading carefully your response, you're saying > > there is no way you can do it with squid. > > With Squid, your options include: > > 1. Squid source code changes. Should not be too diffic

Re: [squid-users] squid won't return cached even with refresh_pattern extra options override-lastmod override-expire ignore-reload ignore-no-store ignore-private store-stale

2021-03-24 Thread Miroslaw Malinowski
I've probably replied to quickly thinking there is a way to do it. So looking at the code and reading carefully your response, you're saying there is no way you can do it with squid. Mirek On Wed, Mar 24, 2021 at 6:28 PM Miroslaw Malinowski < mr.miroslaw.malinow...@gmail.com&

Re: [squid-users] squid won't return cached even with refresh_pattern extra options override-lastmod override-expire ignore-reload ignore-no-store ignore-private store-stale

2021-03-24 Thread Miroslaw Malinowski
e) Mirek On Wed, Mar 24, 2021 at 6:15 PM Alex Rousskov < rouss...@measurement-factory.com> wrote: > On 3/24/21 12:48 PM, Miroslaw Malinowski wrote: > > > Probably, me missing on something silly or it can't be done but I don't > > know why but squid won't return

[squid-users] squid won't return cached even with refresh_pattern extra options override-lastmod override-expire ignore-reload ignore-no-store ignore-private store-stale

2021-03-24 Thread Miroslaw Malinowski
Hi, Probably, me missing on something silly or it can't be done but I don't know why but squid won't return the cached version even when I turn all override options ON in refresh_pattern. It's an API call where we call many of the same requests and by knowing it we would like to stop those calls t