[squid-users] Squid 3.5.5 for Microsoft Windows 64-bit is available

ows 10 - seems to work pretty good. Also fixed the installation glitch on Windows 2012 R2. Best regards, Rafael Akchurin Diladele B.V. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] when using a search box on een website my hole internet explorer freezes incuding earlier opend tabs

Hi all, I am seeing the same in the IE and also in FF - but FF does not freeze everything - just this window. It may mean something is wrong with the site itself - of course IE is incorrect but nevertheless... Raf -Original Message- From: squid-users [mailto:squid-users-boun...@lists.s

Re: [squid-users] block inappropriate images of google

Hello Andres, N.B. Please take my answer with a huge grain of salt. The google images search returns image results (thumbnails) as inline base 64 encoded images in the CSS. Selectively blocking them with any URL redirector will not work. It is possible to completely block google images but I a

[squid-users] Squid 3.5.4 for Microsoft Windows 64-bit is available

Greetings everyone, The CygWin based build of Squid proxy for Microsoft Windows version 3.5.4 is now available (amd64 only!). * Original release notes are at http://www.squid-cache.org/Versions/v3/3.5/squid-3.5.4-RELEASENOTES.html.

Re: [squid-users] Best solution for content filtering using squid?

Hello Bob, If you do not mind taking a look at third party web filtering products integrating with Squid using for example ICAP them I would humbly recommend taking a look at qlproxy (quintolabs.com). It is a commercial product though not sure if this fits your expectations. Best regards, Raf

Re: [squid-users] Squid ubuntu build error

This is how we rebuild Squid 3 from Ubuntu for SSL bump (taken from http://docs.diladele.com/administrator_guide_4_1/system_configuration/https_filtering/recompile_squid.html) apt-get update && apt-get -y upgrade # install build tools apt-get -y install devscripts build-essential fakeroot libss

Re: [squid-users] Looking for a good tutorial for writing a custom eCap filter

Hello Michael, Are you interested in writing of eCAP filter (or C++ in general) or wish to solve your problem? If first please see http://www.e-cap.org/ especially adapter or clamav samples at http://www.e-cap.org/Downloads. If latter please take a look at qlproxy (ICAP filter for Squid) the ve

Re: [squid-users] i want to block images with size more than 40 KB

Hello Snakeeyes, Please also take into account the fact that Google image search results are "inlined" (at least thumbnails). Best regards, Rafael -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of snakeeyes Sent: Saturday, March 21, 20

Re: [squid-users] Latest squid for Windows

Hello Raju, And if you would like to get involved please also visit http://squid.diladele.com to get to the GitHub repo. @Yuri - I remember about HTTPS filtering in squid windows settings - give me two more days please :) Raf From: squid-users on beha

Re: [squid-users] Squid Authentication

Eldar will send soon as we finish some initial testing. Raf From: Amos Jeffries Sent: Monday, February 2, 2015 3:32 PM To: Rafael Akchurin; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Squid Authentication On 3/02/2015 3:04 a.m., Rafael

Re: [squid-users] Squid Authentication

Hello Amos, We will soon be able to have latest 3.5 built for Cygwin x64 (hopefully). Rafael From: squid-users on behalf of Amos Jeffries Sent: Monday, February 2, 2015 10:54 AM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Squid Aut

Re: [squid-users] Why 3.5.0.4 generates mimicked certs with server IP only when bumping?

Hello Daniel, Yuri May be you could dump your whole squid.conf here (please remove any sensitive details). I still cannot understand once Squid has the target server hostname from SNI - where is the acl/rule in squid.conf that can be used with this info present? Best regards, Rafael _

Re: [squid-users] Squid Windows Installation

HTTPS contents as it *is* bumped. We are working on 3.5 but far from the end yet :) Best regards, Raf From: Yuri Voinov [mailto:yvoi...@gmail.com] Sent: Friday, January 9, 2015 10:01 PM To: squid-users@lists.squid-cache.org; Rafael Akchurin Subject: Re: [squid-users] Squid Windows Installation

Re: [squid-users] Squid Windows Installation

Hello Rutvik, Please see http://squid.diladele.com/. This is not the *latest* squid (and btw *not an official one*) but we are doing what we can. Hopefully 3.5 will soon run as MSI on Windows for the benefits of all community. Best regards, Raf From: squid-users [mailto:squid-users-boun...@li

Re: [squid-users] how to obtain info about actual active downloads?

From: Chris Bennett Sent: Friday, January 9, 2015 10:52 AM To: Rafael Akchurin Cc: squid-users@lists.squid-cache.org Subject: Re: [squid-users] how to obtain info about actual active downloads? Hi Rafael, > as if I am not mistaken the data get's written to the log

Re: [squid-users] how to obtain info about actual active downloads?

7;d like to see for each active proxy client the number of bytes retrieved during last 1, 5, 30 minutes/seconds or so? Sorry if I completely misunderstood your notice. Raf. From: Chris Bennett Sent: Friday, January 9, 2015 5:00 AM To: Rafael Akchurin

Re: [squid-users] Squid 3 SSL bump: Google drive application could not connect

Please James do if it is possible. Best regards, Rafael -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of James Harper Sent: Wednesday, December 31, 2014 12:12 PM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Squid 3 S

Re: [squid-users] Squid Deployment Questions

And if your ICAP server allows it run it on the same host as Squid to minimize connection delays from squid <-> icap. E.g. ours (qlproxy) by default is run on 127.0.0.1. Best regards, Rafael From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Evan Blackstone Sent:

Re: [squid-users] Squid 3 SSL bump: Google drive application could not connect

Perfect thanks a lot!!! Raf :) From: Yuri Voinov [mailto:yvoi...@gmail.com] Sent: Tuesday, December 30, 2014 9:23 PM To: Rafael Akchurin; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Squid 3 SSL bump: Google drive application could not connect -BEGIN PGP SIGNED MESSAGE

Re: [squid-users] Squid 3 SSL bump: Google drive application could not connect

Just for me to completely clarify: - how exactly your Squid gets the traffic from your clients? (explicit proxy or cisco WCCP?) raf From: Yuri Voinov [mailto:yvoi...@gmail.com] Sent: Tuesday, December 30, 2014 9:16 PM To: Rafael Akchurin; squid-users@lists.squid-cache.org Subject: Re: [squid

Re: [squid-users] Squid 3 SSL bump: Google drive application could not connect

Glad that it worked. May be useful to dump here your squid.conf to better understand how to configure squid to transparently work with wccp traffic coming from your Cisco router? Raf From: Yuri Voinov [mailto:yvoi...@gmail.com] Sent: Tuesday, December 30, 2014 8:48 PM To: Rafael Akchurin; squid

Re: [squid-users] Squid 3 SSL bump: Google drive application could not connect

/ Google Drive / iTunes (bypassing SSL Bump because of SSL Pinning). Best regards, Raf From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Rafael Akchurin Sent: Tuesday, December 30, 2014 4:23 PM To: Yuri Voinov; squid-users@lists.squid-cache.org Subject: Re: [squid

Re: [squid-users] Squid 3 SSL bump: Google drive application could not connect

he.org>> Subject: Re: [squid-users] Squid 3 SSL bump: Google drive application could not connect -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Captain Obvious. :) Say me something I don't know. The question 2 is - WHAT exactly I must exclude? Google Support's list could

Re: [squid-users] Squid 3 SSL bump: Google drive application could not connect

?Only exclusion from SSL Bump as far as I know. raf From: Yuri Voinov Sent: Tuesday, December 30, 2014 3:19 PM To: Rafael Akchurin; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Squid 3 SSL bump: Google drive application could not connect

Re: [squid-users] Squid 3 SSL bump: Google drive application could not connect

SSL Pinning? (I know Dropbox does this) my two cents only :) Raf From: squid-users on behalf of Yuri Voinov Sent: Tuesday, December 30, 2014 2:12 PM To: squid-users@lists.squid-cache.org Subject: [squid-users] Squid 3 SSL bump: Google drive application

Re: [squid-users] what are people using nowadays (icap, a/v, etc)?

-safety. The list of available ICAP servers is http://www.squid-cache.org/Misc/icap.html. But I am biased so these are just my two very personal cents. Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On

Re: [squid-users] Best way to deny access to URLs in Squid 3.3.x?

. Fighting with latest Squid build with Cygwin and/or MinGW takes all the time and I am loosing the battle :( Best regards, Rafael From: Mirza Dedic Sent: Tuesday, October 14, 2014 8:17 PM To: Rafael Akchurin Subject: RE: [squid-users] Best way to deny access

Re: [squid-users] Icap Squid Https/Http

?I do not pay a cent, I do it myself :) From: Sergey Tsabolov ( aka linuxman ) Sent: Thursday, November 13, 2014 2:50 PM To: Rafael Akchurin; Garth Lancaster; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Icap Squid Https/Http Hello, Nice way to

Re: [squid-users] Icap Squid Https/Http

Hello Garth, We are happily doing ICAP HTTPS filtering, see sample instructions at http://docs.diladele.com/tutorials/transparently_filtering_https_centos/index.html. It is even more simple if you do not need "intercept" style proxying. Best regards, Rafael Akchurin Di

[squid-users] Troubles compiling latest Squid 3.5 on Windows 7 with Cygwin

:9: Is this a known issue or am I doing something wrong? Please note the same commands compile Squid 3.3.8 (from Cygwin) without any problems. Thank you very much! Rafael Akchurin Diladele B.V. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] TCP_DENIED/403

Hello Navari, Just my two cents - http://docs.diladele.com/faq/squid.html#why-i-see-cannot-connect-to-site-using-https-browser-message-instead-of-usual-site-is-blocked Raf -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of navari.lore..

Re: [squid-users] Filtering keywords on google search

better in handling this but it is not part of stock CentOS 7 yet. Some admins seem to heavily rely on updates coming from distribution maintainers and deny recompiling any software. Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users [mailto:squid-users-boun

Re: [squid-users] Filtering keywords on google search

safe search on Google and YouTube. Best regards, Rafael Akchurin -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Job Sent: Saturday, October 25, 2014 1:50 PM To: squid-us...@squid-cache.org Subject: [squid-users] Filtering keywords on

Re: [squid-users] ssl-bump doesn't decrypt https traffic - please help

Diladele when you click the "enable ssh filteiring for all sites" settings. By default though it is set to 'off' to comply with legal regulations in some countries. It would also be nice if you could post the contents of it either here or in private e-mail to me not to poll

Re: [squid-users] Best way to deny access to URLs in Squid 3.3.x?

Hello Mirza, I would humbly propose taking a look at any of the ICAP servers listed on http://www.squid-cache.org/Misc/icap.html. BTW we are now preparing a native Windows ICAP build of qlproxy and would be glad if you could take a look. Best regards, Raf From: Mirza Dedic mailto:mirza.de...@o

Re: [squid-users] Best OS for latest squid

N¬ŠÆ¦º[b¥ªí™ë,j¢œÂú+™«

Re: [squid-users] transparent proxy https and self signed certificate error

Hello Robert, Just my two cents - if you remove or comment out the sslproxy_cert_error allow all sslproxy_flags DONT_VERIFY_PEER from squid config - may it be that squid starts complaining - "cannot get cert issues locally" on the google sites? Rafael. From: Robert Watson mailto:rob...@gil

Re: [squid-users] leaking memory in squid 3.4.8 and 3.4.7.

I believe I do (but you made me doubt:) Can you please check if your browser is set to use FQDN of proxy not proxy's IP address. Raf From: Victor Sudakov Sent: Friday, October 3, 2014 4:46 PM To: Rafael Akchurin Cc: Amos Jeffries; squid-

Re: [squid-users] leaking memory in squid 3.4.8 and 3.4.7.

Hello Victor, If you see 'received type 1 NTLM token' message it means your IE was not able to use the Kerberos auth and have chosen NTLM instead. Please ensure you are browsing from *domain joined* machine and using NTLM/Kerberos authentication wrapper as described in http://wiki.squid-cache.

<    1   2   3