Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-26 Thread L . P . H . van Belle
Verzonden: dinsdag 26 januari 2016 10:14 Aan: L.P.H. van Belle; squid-users@lists.squid-cache.org Onderwerp: Re: [squid-users] How to setup a secure(!) squid proxy   Hi,   the script is working and I have a running squid 3.5. Thank you.   But I still think things like this:   echo "

Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-26 Thread startrekfan
: startrekfan [mailto:startrekfa...@freenet.de] > Verzonden: vrijdag 22 januari 2016 16:15 > Aan: squid-users@lists.squid-cache.org; L.P.H. van Belle > Onderwerp: Re: [squid-users] How to setup a secure(!) squid proxy > > Found the problem: > > The dependencies has changed: http

Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-26 Thread Amos Jeffries
On 26/01/2016 11:22 p.m., L.P.H. van Belle wrote: > Hai, > > > > Ok, good is its working now, i was pulling my hair out for you ;-) > > > > This : sed -i 's/g++ (>= 4:5.2)/g++/g' libecap-1.0.1/debian/control > > Is not any problem, because squid is reconfigured and recompiled with G++

Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-26 Thread L . P . H . van Belle
:squid-users-boun...@lists.squid-cache.org] Namens > Amos Jeffries > Verzonden: woensdag 27 januari 2016 7:46 > Aan: squid-users@lists.squid-cache.org > Onderwerp: Re: [squid-users] How to setup a secure(!) squid proxy > > On 26/01/2016 11:22 p.m., L.P.H. van Belle wrote: > >

Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-23 Thread Amos Jeffries
On 23/01/2016 12:50 a.m., startrekfan wrote: > Talked to the debian guys again. There seems to be a problem with the > complete release system. > > They apply security patches for the stable squid 3.4.8 in debian jessie. > But not for the ssl part of squid because it's disabled by default. So

Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-23 Thread Matus UHLAR - fantomas
On 22.01.16 15:15, startrekfan wrote: The dependencies has changed: https://packages.debian.org/sid/squid (not sure why there is also a https://packages.debian.org/sid/squid3 entry) because back in wheezy squid was version 2 and when you wanted version 3, you've had to install "squid3"

Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-23 Thread Amos Jeffries
On 24/01/2016 12:07 a.m., Matus UHLAR - fantomas wrote: > On 22.01.16 15:15, startrekfan wrote: >> The dependencies has changed: https://packages.debian.org/sid/squid (not >> sure why there is also a https://packages.debian.org/sid/squid3 entry) > > because back in wheezy squid was version 2 and

Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-22 Thread startrekfan
Found the problem: The dependencies has changed: https://packages.debian.org/sid/squid (not sure why there is also a https://packages.debian.org/sid/squid3 entry) Thats excactly the problem with unstable sources. squid3 3.5 requires libecap3 instead of libecap2 (squid3 version 3.4). I can't

Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-22 Thread startrekfan
org; L.P.H. van Belle <be...@bazuin.nl > > > *Subject:* Re: [squid-users] How to setup a secure(!) squid proxy > > > > Found the problem: > > > > The dependencies has changed: https://packages.debian.org/sid/squid (not > sure why there is also a https://packages.d

Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-22 Thread startrekfan
Talked to the debian guys again. There seems to be a problem with the complete release system. They apply security patches for the stable squid 3.4.8 in debian jessie. But not for the ssl part of squid because it's disabled by default. So when I enable ssl I have to take care about everything by

Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-22 Thread startrekfan
I tried to compile squid from sid repo. It fails, but I'm not sure why. When I only add the src-deb apt-get build-dep squid3 says libecap3-dev was not found and fails.(Im not sure why it`s needed. libecap3-dev is not listed in the dependencies. https://packages.debian.org/sid/squid3) When I add

Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-22 Thread L . P . H . van Belle
Yes, give me few min, i’ll send something nice.   Greetz,   Louis       Van: startrekfan [mailto:startrekfa...@freenet.de] Verzonden: vrijdag 22 januari 2016 15:45 Aan: squid-users@lists.squid-cache.org; L.P.H. van Belle Onderwerp: Re: [squid-users] How to setup a secure(!) squid proxy

Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-22 Thread Rafael Akchurin
Sent: Friday, January 22, 2016 4:15 PM To: squid-users@lists.squid-cache.org; L.P.H. van Belle <be...@bazuin.nl> Subject: Re: [squid-users] How to setup a secure(!) squid proxy Found the problem: The dependencies has changed: https://packages.debian.org/sid/squid (not sure why there is also a

Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-18 Thread startrekfan
sers-boun...@lists.squid-cache.org] *Namens > *startrekfan > *Verzonden:* maandag 18 januari 2016 8:07 > *Aan:* squid-users@lists.squid-cache.org; squ...@treenet.co.nz > *Onderwerp:* Re: [squid-users] How to setup a secure(!) squid proxy > > > > Just talked to the debia

Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-18 Thread L . P . H . van Belle
ribe to the debian and squid list ( .. done ) and keep track of messages.     Greetz,   Louis         Van: startrekfan [mailto:startrekfa...@freenet.de] Verzonden: maandag 18 januari 2016 10:25 Aan: L.P.H. van Belle; squid-users@lists.squid-cache.org Onderwerp: Re: [squid-users] How

Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-17 Thread startrekfan
Just talked to the debian guys. They won't upgrade squid to 3.5 in debian jessi. It's also hard for me, to implement unstable components in a productive system. But the debian guys told me, that they will build own patches for 3.4.8 to fix critical problems if you report them properly to

Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-15 Thread startrekfan
Hello I`m sorry. I'm not a native speaker so I maybe don't find the right words. I'd like to setup a proxy that can scan the incoming traffic for virus (squidclamav). To do that for a https/ssl connection I need the squid ssl-bump feature or is there an other solution? Now I want to setup the

Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-15 Thread Yuri Voinov
15.01.16 16:13, startrekfan пишет: Hello I`m sorry. I'm not a native speaker so I maybe don't find the right words. I'd like to setup a proxy that can scan the incoming traffic for virus (squidclamav). To do that for a https/ssl connection I need the squid ssl-bump feature or is there an

Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-15 Thread Amos Jeffries
On 15/01/2016 11:13 p.m., startrekfan wrote: > Hello > > I`m sorry. I'm not a native speaker so I maybe don't find the right words. > > I'd like to setup a proxy that can scan the incoming traffic for virus > (squidclamav). To do that for a https/ssl connection I need the squid > ssl-bump

Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-14 Thread startrekfan
Hello, thank you for your answer. I'm using the debian stable version(3.4.8) at the moment. The squid server is working very well. But I have a different question: How to secure/hardening my squid _https_ proxy? I used the following page to configure my https proxy:

Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-14 Thread Amos Jeffries
On 15/01/2016 3:38 p.m., startrekfan wrote: > Hello, > > thank you for your answer. I'm using the debian stable version(3.4.8) at > the moment. The squid server is working very well. > > But I have a different question: How to secure/hardening my squid _https_ > proxy? > I'm a lot confused why

[squid-users] How to setup a secure(!) squid proxy

2016-01-13 Thread startrekfan
Hello I need to setup a squid 3 proxy with https bumping. Unfortunately I'm not very familiar with squid and https in general. I already perfomed the following steps: *1.) compile from source* ./configure --with-openssl --enable-ssl-crtd make make install *2.) configuration (http)* I used

Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-13 Thread Amos Jeffries
On 13/01/2016 10:16 p.m., startrekfan wrote: > Hello > > I need to setup a squid 3 proxy with https bumping. Unfortunately I'm not > very familiar with squid and https in general. > > I already perfomed the following steps: > > *1.) compile from source* > ./configure --with-openssl

Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-13 Thread startrekfan
Jan 2016 23:19:21 +1300 > From: Amos Jeffries <squ...@treenet.co.nz> > To: squid-users@lists.squid-cache.org > Subject: Re: [squid-users] How to setup a secure(!) squid proxy > Message-ID: <569624a9@treenet.co.nz> > Content-Type: text/plain; charset=utf-8 > > O

Re: [squid-users] How to setup a secure(!) squid proxy

2016-01-13 Thread Amos Jeffries
On 14/01/2016 5:10 a.m., startrekfan wrote: > It's a debian. But an ubuntu howto will also work with debian. > Here is the broken link: > > I combined this two instructions: > http://wiki.squid-cache.org/Features/SslBump > http://wiki.squid-cache.org/Features/DynamicSslCert > > (The latest