Hello,
I've squid 3.5.20 running on RHEL 7.4.
I have a problem to access some websites, for example www.nato.int.
This website apply an Anti-DDoS system that reset the first connection after
the TCP 3-way handshake (SYN/SYN-ACK/ACK/RST-ACK). All subsequent TCP
connections are accepted. The websit
rouss...@measurement-factory.com]
Inviato: lunedì 30 ottobre 2017 17:22
A: Troiano Alessio ;
squid-users@lists.squid-cache.org
Oggetto: Re: [squid-users] Squid doesn't reload webpage like other clients do
On 10/30/2017 03:51 AM, Troiano Alessio wrote:
> I've squid 3.5.20 running on RHE
The VPN is on the proxy server or on a firewall?
In the first case it may be a problem of the software that do VPN, try to check
"route" with linux command.
In the second case check that the firewall that do the VPN is the default
gateway of the proxy, either you have to add static route for the
If you do not define any exception all the web requests are forwarded to squid
proxy. So, the only thing you have to check is that squid can reach the server
192.168.10.10 (routing and/or firewall policy). Also check that squid uses your
local DNS server and resolves the correct IP address.
Il
Hello,
I'm seeing the problem as from subject. I'm interested in log fields %http://sqm.telemetry.microsoft.com and https://sqm.telemetry.microsoft.com .
The site is not reachable.
Squid.conf:
logformat custom_squid %%SQUID-4: %>a %>p [%tl] "%rm %ru HTTP/%rv" %h" "%{User-Agent}>h" %Ss:%Sh %http:/
ction fails (error 503)
On 09/14/2018 04:33 AM, Troiano Alessio wrote:
> In HTTPS connections when the destination server does not answer
> (maybe blocked by our firewall because it is malicious) the
> destination ip is not logged.
If Squid tried to contact the server, then you are right
gs
for CONNECT method when the connection fails (error 503)
On 09/14/2018 10:06 AM, Troiano Alessio wrote:
> Ok, so reverting the question: can you reproduce with the latest version the
> same error?
Unfortunately, I do not have the free time required to do this testing right
now. Please
2018 19:22
A: squid-users@lists.squid-cache.org
Oggetto: Re: [squid-users] R: R: SQUID does not insert server ip and port in
logs for CONNECT method when the connection fails (error 503)
On Friday 14 September 2018 at 18:52:46, Troiano Alessio wrote:
> I don't understand what I need to
Sorry but, I'm loosing something...
Also if client will use ESNI, the server should response with a certificate
that will be in clear and has all server information, like alias... So is it
possible to know what is the resource the client is looking for. Only with
wildcard certificate you can't.
Hello all,
I'm not able to configure squid for using a parent proxy only for some domain.
All the rest should be fetched directly. I tried this configuration:
cache_peer 172.31.3.70 parent 8080 0 no-query default name=HUBATLDB
acl domainAT dstdomain voeazul.com.br
cache_peer_access HUBATLDB allow
Same result Alex:
%SQUID-4: 172.31.0.82 54345 [18/Jan/2019:16:16:10 +0800] "GET
http://www.voeazul.com.br/ HTTP/1.1" www.voeazul.com.br - - "/" 403 text/html
726 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:64.0) Gecko/20100101
Firefox/64.0" TCP_MISS:HIER_DIRECT 23.77.9.57 80 40266
Il pr
Thank you Amos in this way it works.
But that was an example, in my config I should use acl from file, and it
doesn't work. So this is the relevant config:
acl parentproxyHUBAT dstdomain /etc/squid/hubatsite.acl
cache_peer 172.31.3.70 parent 8080 0 no-query default name=HUBATLDB
cache_peer_access
Nice! Thank you so much Amos.
Il presente messaggio e-mail e ogni suo allegato devono intendersi indirizzati
esclusivamente al destinatario indicato e considerarsi dal contenuto
strettamente riservato e confidenziale. Se non siete l'effettivo destinatario o
avete ricevuto il messaggio e-mail pe
Hello,
I need to definitively solve the ipv6 (un)reachbility issue.
I state I read this topic:
http://squid-web-proxy-cache.1019090.n4.nabble.com/dns-v4-first-on-ignored-td4658427.html
but not found a solution. Amos wrote “Squid tests for IPv6 ability
automatically by opening a socket on a priva
Thank you Bruno for the answer.
The DNS returns both IPv6 and IPv4 addresses, but it depends on the request (A
or ). Squid should do both and prefer in order the IPv4 answer.
I added the IPV6INIT=no on my interface and http_port 172.31.1.68:8080,
restarted squid, but same behavior.
Il presen
> > Anyway squid try to connect to the IPv6 address instead of IPv4 and
> > I’m not able to reach it:
> >
> > C:\Users\atroiano>nslookup download.pdfforge.org
> >
> > Server: espevmd..prv
> >
> > Address: 172.x.x.x
> >
> >
> >
> > Risposta da un server non autorevole:
> >
> > Nome:dow
16 matches
Mail list logo