Re: [squid-users] Squid 4.0.x = SNI Support

Reverse proxy. Sébastien -Message d'origine- De : squid-users [mailto:squid-users-boun...@lists.squid-cache.org] De la part de Ralf Hildebrandt Envoyé : 7 avril 2017 08:50 À : squid-users@lists.squid-cache.org Objet : Re: [squid-users] Squid 4.0.x = SNI Support * sebastien.boulia...@cp

Re: [squid-users] netdbExchangeHandleReply: corrupt data, aborting

Reply: corrupt data, aborting On 7/04/2017 9:49 a.m., Sebastien.Boulianne wrote: > Hi, > > Anyone can explain me how to fix that when I do "service squid status" please > ? > netdbExchangeHandleReply: corrupt data, aborting > Are you using Squid-4 ? The way Squid-3

[squid-users] Squid 4.0.x = SNI Support

Hi all, Anyone can confirm me if Squid 4.0.x support SNI ? Thanks for all your answers. Sébastien. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] netdbExchangeHandleReply: corrupt data, aborting

Hi, Anyone can explain me how to fix that when I do "service squid status" please ? netdbExchangeHandleReply: corrupt data, aborting Thanks Sébastien ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/s

Re: [squid-users] squid squid[2541]: temporary disabling (Not Found)

Hi Amos, I can find those messages in the cache.log. # cat /var/log/squid/cache.log | grep temp 2017/02/24 15:55:58 kid1| temporary disabling (Not Found) digest from 3.cpu.qc.ca 2017/02/24 15:56:58 kid1| temporary disabling (Not Found) digest from xxx.reseaubiblio.ca 2017/02/24

[squid-users] squid squid[2541]: temporary disabling (Not Found)

Hi all, What squid squid[2541]: temporary disabling (Not Found) mean ? Is it a way to fix that warning ? Im running Squid as a reverse proxy. Thanks. Sébastien ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.

Re: [squid-users] My Squid stop working WITHOUT any reason.

Hi Eli, It stops working like when I tried to access a website, I got a error connection reset by peer. I will try to add the cache deny all at the end of the file. Thanks, Sébastien. -Message d'origine- De : Eliezer Croitoru [mailto:elie...@ngtech.co.il] Envoyé : 23 février 2017 14:2

[squid-users] My Squid stop working WITHOUT any reason.

Hi all, Does it has changes in the configuration from Squid 3.5.20 vs 3.5.24 ? My Squid stop working for no reason BUT i dont know why. To fix that, I have to restart the Squid process. Do you have any idea how to know what it causes that ? Thanks you for your answer. Sébastien ___

[squid-users] WTF ? SSL Certficate error: certificate issuer (CA) not known

Hu ? My CA is known... Where is the issue ? :( The system returned: (71) Protocol error (TLS code: X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY) SSL Certficate error: certificate issuer (CA) not known: /C=US/ST=Arizona/L=Scottsdale/O=Starfield Technologies, Inc./OU=http://certs.starf

[squid-users] Squid with a FTPD... glFTPD or ioFTPD

Hi all, I would like to know if someone use Squid with a FTPD like glFTPD or ioFTPD or something like that. Thanks you very much for your answer. Sébastien ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/li

Re: [squid-users] Attached file on OWA with Squid

--without-nettle' 'build_alias=x86_64-redhat-linux-gnu' 'host_alias=x86_64-redhat-linux-gnu' 'CFLAGS=-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic' 'LDFLAGS=-Wl

Re: [squid-users] Attached file on OWA with Squid

t de Amos Jeffries Envoyé : 9 avril 2016 00:16 À : squid-users@lists.squid-cache.org Objet : Re: [squid-users] Attached file on OWA with Squid On 7/04/2016 5:24 a.m., Sebastien.Boulianne wrote: > I configured my OWA to pass thru the Squid. > Auth work perfectly. > Browsing is working

Re: [squid-users] Attached file on OWA with Squid

-boun...@lists.squid-cache.org] De la part de Amos Jeffries Envoyé : 9 avril 2016 00:16 À : squid-users@lists.squid-cache.org Objet : Re: [squid-users] Attached file on OWA with Squid On 7/04/2016 5:24 a.m., Sebastien.Boulianne wrote: > I configured my OWA to pass thru the Squid. > Auth wor

[squid-users] Attached file on OWA with Squid

I configured my OWA to pass thru the Squid. Auth work perfectly. Browsing is working perfectly. All is working perfectly except when I try to attach files or documents to an email. [cid:image002.png@01D19007.A7E26D20] And It stops here. Nothing else happens. I did some tests and I noticed that

[squid-users] tcpkeepalive http_port directive

Hi all, We host some online catalogs for a customers. Those online catalogs are slow to answer to the http requests sometimes. I would like to extend the timeout before Squid show us an error page. I checked in the http_port directive and I saw that tcpkeepalive[=idle,interval,timeout]

[squid-users] tcpkeepalive http_port directive

Hi all, We host some online catalogs for a customers. The online catalogs are slow to answer to the http requests sometimes. I would like to extend the timeout that Squid show us. I checked in the http_port directive and I saw that tcpkeepalive[=idle,interval,timeout] E

[squid-users] How to block "Secure Renegotiation IS supported" with Squid.

Hi all, I just did a SSL Analyzer with comodo. Their site told me that I support « Secure Renegotiation IS supported, Vulnerable DoS » Is it a way to block that with Squid ? Thanks you very much in advance. Sébastien ___ squid-users mailing list sq

[squid-users] The server does not support Forward Secrecy with the reference browsers...

Hi all, http://imgur.com/PI1PRlB Can it be fixed with Squid ? If yes, how ? Thanks you very much for your answer. Sébastien Boulianne Administrateur réseau & système / Network & System Administrator (Windows & Linux). Gestion des infrastructures / Infrastructure Management. CCNA / CompTIA Serv

[squid-users] Question about my SSL test

Hi, Thanks you very much for your answer. It's very appreciated. Can you give me a hint how to generate a dhparam key please ? I saw this link. Should it works ? https://www.howtoforge.com/tutorial/how-to-protect-your-debian-and-ubuntu-server-against-the-logjam-attack/ or ## Create a DH paramet

Re: [squid-users] Question about my SSL test

Hi, Thanks you very much for your complete answer. Do I need to recompile my Squid to disable those ciphers and protocols ? Thanks. -Message d'origine- De : dweimer [mailto:dwei...@dweimer.net] Envoyé : 9 février 2016 08:53 À : Sebastien Boulianne Cc : squid-users@lists.squid-cache.org

[squid-users] Question about my SSL test

Hi, I did a SSL test and I have some questions. The SSL test notified me that POODLE (SSLv3), RC4 are enable or/and vulnerable. Is it a way to block that with Squid ? How can I disable thosed protocols ? Server side or Squid side ? Thanks for your answer guys. Sébastien

Re: [squid-users] How to change the timezone for Squid ?

Hi, I thought I could do it in squid.conf. Do I need to modifiy each error one by one ? I looked in errorpages.css and errorpages.css.default and I didn’t find a « %T ». Thanks for your answer. Sébastien De : dweimer [mailto:dwei...@dweimer.net] Envoyé : 8 février 2016 11:28 À : Sebastien Boul

Re: [squid-users] How to change the timezone for Squid ?

Hi Yuri, Thanks for your support. I use Squid on a Oracle Linux 7. date Mon Feb 8 09:51:27 EST 2016 My timezone look ok with the date command. Sébastien De : squid-users [mailto:squid-users-boun...@lists.squid-cache.org] De la part de Yuri Voinov Envoyé : 8 février 2016 11:05 À : squid-use

[squid-users] How to change the timezone for Squid ?

Hi all, When a user reach an error page, he got that : CacheHost: squid.cpu.ca ErrPage: ERR_CONNECT_FAIL Err: (110) Connection timed out TimeStamp: Fri, 05 Feb 2016 22:54:08 GMT ClientIP: xxx.xxx.xxx.xx The problem is; I am from qc.ca so the timezone should be GMT-5. How can I set the timezone in

[squid-users] SSL error since I migrated from Squid3.5.10 to Squid3.5.13.

Hi, Since I migrated my Squid to the latest version, many many many users notified me they are SSL warning message. I haven't this issue with the Squid3.5.10. I used the Eliezer's yum package. The problem only happens with phones using active-sync. I haven't changed my active-sync configuration

Re: [squid-users] Configuring and monitoring Squid using SNMP

Hi Matus, Thanks you for your answer. When I execute the commands bellow, I didnt get a good return... Did you ever had this issue ? snmpwalk -v2c -Cc -c cpuread 172.22.2.22:3401 *.1.1.1.0 No log handling enabled - turning on stderr logging *.1.1.1.0: Unknown Object Identifier (Sub-id not found:

[squid-users] Configuring and monitoring Squid using SNMP

Hi all, I just want to know if they are people who monitor Squid using SNMP. Does it works fine ? Do you have any issues ? Thanks in advance for your feedbacks. Sébastien ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid

Re: [squid-users] Installing Squid as a service on Oracle Linux 7.2

Hi, Thanks you very much for your answer. It tooks me about 1 min to get it too. I reach the wiki where Eliezer give his repositery. I just did a yum –y install squid-3.5.11 and I got the squid.service… All is perfect now. Thanks anyways. Sébastien De : squid-users [mailto:squid-users-boun.

Re: [squid-users] Installing Squid as a service on Oracle Linux 7.2

Hi, Your answer didn’t help me. Does it have anyone who create a service file for squid and want to share it. I tried the squid.service from the yum package (v3.3.8) but it didn’t work. Thanks Sébastien De : squid-users [mailto:squid-users-boun...@lists.squid-cache.org] De la part de Yuri Voino

[squid-users] Installing Squid as a service on Oracle Linux 7.2

Hi, I hope all is going perfectly for you. Im trying to install Squid-3.5.12 from source. I followed the doc to compile it properly. When I ran squid -z, all is perfect. [root@squid /]# squid -z [root@squid /]# 2015/12/15 10:06:20 kid1| Set Current Directory to /var/spool/squid 2015/12/15 10:0

[squid-users] Issue when accessing a web page on an Apache Server with authentification.

Hi, A user want to access a page at http://ibistro-x.reseaubiblio.ca/formulaires/commande/admin/index.php. This is a web page hosted on an Apache server with a basic authentification (password file created with the command htpasswd). If I access this page locally, I enter the login/pass and

Re: [squid-users] Spam email

Thanks for your good job Amos. Sébastien -Message d'origine- De : squid-users [mailto:squid-users-boun...@lists.squid-cache.org] De la part de Amos Jeffries Envoyé : 27 octobre 2015 11:08 À : squid-users@lists.squid-cache.org Objet : Re: [squid-users] Spam email On 28/10/2015 3:23 a.m.,

[squid-users] How can I change the Squid logo on an access denied page.

My question wasnt that. I want to change the Squid’s logo… Nothing else… Im sure I need to change something else if I want the Squid’s logo replaced… Did you ever replace the Squid logo ? Thanks. Sebastien. De : squid-users [mailto:squid-users-boun...@lists.squid-cache.org] De la part de Yuri

Re: [squid-users] Remote Desktop Gateway thru Squid.

Hi Yuri, Thanks you very much for your answer. My question was Remote Desktop Gateway with my Squid. A Remote Desktop Gateway and RDP is not the same. http://windows.microsoft.com/en-ph/windows7/what-is-a-remote-desktop-gateway-server Thanks. Sébastien. De : squid-users [mailto:squid-users-bou

[squid-users] How can I change the Squid logo on an access denied page.

Hi again, I would like to change the Squid'slogo that appear on an ccess denied page... I replace the picture /usr/share/squid/icons/SN.png but it didnt work. What did I miss ? Thanks you very much. Sébastien. ___ squid-users mailing list squid-users

[squid-users] Remote Desktop Gateway thru Squid.

Hi all, Im looking to use my Remote Desktop Gateway with my Squid. I tried this config but it didnt work. ### SITE cache_peer site.domain.qc.ca parent 443 0 no-query originserver ssl sslflags=DONT_VERIFY_PEER name=site acl sitehttps url_regex ^https://site\.domain\.qc\.ca http_access allow www44

[squid-users] Monitoring Squid using SNMP.

Hi, I would like to monitor Squid with Centreon using SNMP. I configured Squid using http://wiki.squid-cache.org/Features/Snmp ## SNMP Configuration acl snmpcpu snmp_community cpuread snmp_port 3401 snmp_access allow snmpcpu localnet snmp_access deny all netstat -ano | grep 3401 udp6 0

Re: [squid-users] site http://www.domain.cpu.qc.ca work BUT http://domain.cpu.qc.ca DONT WORK

Hi again, Thanks you very much for your prompt answer. @Yuri: Before I switched to Squid, twice addresses pointed to the same page. I used a TMG and it worked perfectly. @Anthony: Yes, I expecting the results from the two accesses to be the same. Its what I ask since the beginning ;) Sébastien B

Re: [squid-users] site http://www.domain.cpu.qc.ca work BUT http://domain.cpu.qc.ca DONT WORK

If I replace the "acl cpuwebacl dstdomain www.cpu.qc.ca" by "acl cpuwebacl dstdomain cpu.qc.ca", I got a error 404 Sébastien Boulianne -Message d'origine- De : squid-users [mailto:squid-users-boun...@lists.squid-cache.org] De la part de Antony Stone Envoyé : 19 octobre 2015 13:36 À 

Re: [squid-users] site http://www.domain.cpu.qc.ca work BUT http://domain.cpu.qc.ca DONT WORK

If I replace the "acl cpuwebacl dstdomain www.cpu.qc.ca" by "acl cpuwebacl dstdomain cpu.qc.ca", I got a error 403. Sébastien Boulianne -Message d'origine- De : squid-users [mailto:squid-users-boun...@lists.squid-cache.org] De la part de Antony Stone Envoyé : 19 octobre 2015 13:36 À : s

[squid-users] site http://www.domain.cpu.qc.ca work BUT http://domain.cpu.qc.ca DONT WORK

1445275480.152 5 TCP_MISS/200 9269 GET http://www.cpu.qc.ca/ - FIRSTUP_PARENT/172.20.253.5 text/html 1445275480.544 0 TCP_MEM_HIT/200 7797 GET http://www.cpu.qc.ca/css/style.css - HIER_NONE/- text/css 1445275480.558 0 TCP_MEM_HIT/200 1170 GET

Re: [squid-users] Replacing Microsoft TMG by Squid.

Hi Eliezer, As I wrote, " I am using the latest version of Squid... v3.5.10." On Oracle Linuxm the latest version is 3.3.8 so I compiled it my Squid from SOURCE with the configure command: ./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu --program-prefix= --prefix=/usr

Re: [squid-users] Replacing Microsoft TMG by Squid.

Hey Eliezer, I am using the latest version of Squid... 3.5.10. As you can see, I have the basic_ldap_auth in /usr/lib64/squid/. Should it be good ? What are the ldap depencies ? Thanks. Sébastien -Message d'origine- De : squid-users [mailto:squid-users-boun...@lists.squid-cache.org]

Re: [squid-users] Replacing Microsoft TMG by Squid.

How should I select it ? :( Thanks Yuri! De : squid-users [mailto:squid-users-boun...@lists.squid-cache.org] De la part de Yuri Voinov Envoyé : 16 octobre 2015 15:28 À : squid-users@lists.squid-cache.org Objet : Re: [squid-users] Replacing Microsoft TMG by Squid. -BEGIN PGP SIGNED MESSAGE-

Re: [squid-users] Replacing Microsoft TMG by Squid.

I builded my own version too… I used these options. squid -v Squid Cache: Version 3.5.10-20151001-r13933 Service Name: squid configure options: '--build=x86_64-redhat-linux-gnu' '--host=x86_64-redhat-linux-gnu' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbi

Re: [squid-users] Replacing Microsoft TMG by Squid.

I dont have any /usr/lib/squid/squid_ldap_auth. There is no /usr/lib/squid directory. De : squid-users [mailto:squid-users-boun...@lists.squid-cache.org] De la part de Yuri Voinov Envoyé : 16 octobre 2015 15:03 À : squid-users@lists.squid-cache.org Objet : Re: [squid-users] Replacing Microsoft T

Re: [squid-users] Replacing Microsoft TMG by Squid.

Is squid_ldap_auth was replaced by digest_ldap_auth ? Thanks! Sébastien Boulianne Administrateur réseau & système / Network & System Administrator. Gestion des infrastructures / Infrastructure Management. CCNA / CompTIA Server+ / Spécialiste en monitoring. sebastien.boulia...@cpu.ca

[squid-users] Replacing Microsoft TMG by Squid.

Hi all, Like you know, Microsoft discountinued the TMG. The TMG was used as a reverse proxy. Since many days, I work to replace our TMG by a Squid server v3.5.10 with Oracle Linux 7 x64. I moved some sites this week but I have a little problem now. How can I ask LDAP credentials for a user who wa

[squid-users] www.domain.qc.ca is ok BUT domain.qc.ca is denied.

Hi, When I try to access www.domain.qc.ca it works perfectly BUT when I try domain.domain.qc.ca, it fails. 1445003869.430 4 65.94.187.169 TCP_MISS/200 9269 GET http://www.domain.qc.ca/ - FIRSTUP_PARENT/xx.xx.xx.xx text/html 1445003436.890 0 m.y.i.p TCP_DENIED

Re: [squid-users] Redirect site.ca to site.qc.ca

Hi, Thanks for your answer. If I want to do a redirection from http to http, do I need to use a url_rewrite_program or can I use the deny_info 302: ? Sébastien -Message d'origine- De : squid-users [mailto:squid-users-boun...@lists.squid-cache.org] De la part de Eliezer Croitoru En

[squid-users] Redirect site.ca to site.qc.ca

Hi, How do you recommend me to configure Squid to redirect request on example.ca to example.qc.ca ? Thanks you very much. Sebastien ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] How to allow subdomains in my config.

Hi, I searched on the doc and on the web, I cant find what I want. The primary site is http://ezproxyx.reseaubiblio.ca. After the user is authentificated, he cans access many ressources / other sites. In the access.log, I got an TCP_DENIED TCP_DENIED/403 4524 GET http://www.worldbookonline.c