Re: [squid-users] squid logging disable based on ACL & kernel: Out of memory

2020-05-06 Thread Alex Rousskov
On 5/6/20 10:45 AM, Akshay Hegde wrote: > Can you share some link or details about below Sorry, I cannot -- it has been many years since I worked on browser plugins, and I have heard that there were significant changes in APIs/rights since then. Perhaps others on the mailing list can help you. If

Re: [squid-users] squid logging disable based on ACL & kernel: Out of memory

2020-05-06 Thread Akshay Hegde
Hi Alex, Thanks for confirming, I lost hope. Can you share some link or details about below > There are other ways to police traffic (e.g., browser plugins), but they all require fiddling with the client environment. On Wed, May 6, 2020, 7:56 PM Alex Rousskov wrote: > On 5/6/20 8:58 AM, Akshay

Re: [squid-users] squid logging disable based on ACL & kernel: Out of memory

2020-05-06 Thread Alex Rousskov
On 5/6/20 8:58 AM, Akshay Hegde wrote: > 1. Is there any way to filter HTTPS URLs without importing CA > certificates on client side? No, there is no way for a proxy to look at request URLs without the browser trusting the proxy certificate. There are other ways to police traffic (e.g., browser p

Re: [squid-users] squid logging disable based on ACL & kernel: Out of memory

2020-05-06 Thread Akshay Hegde
Hi Alex, I updated to latest squid as you suggested, and I tried SSL-Bump using below config (which filters URLs which are in 443 too), however I have 600 users (windows, linux, Mac, mobile OS like Androd, Windows etc), so asking them to import CA certificate in browser is not feasible. 1. Is the

Re: [squid-users] squid logging disable based on ACL & kernel: Out of memory

2020-05-05 Thread Amos Jeffries
On 3/05/20 12:58 am, Akshay Hegde wrote: > Dear Amos, > > Can you please elaborate, I didnt understand. If possible can you > explain with one example ? I mean behaviour of security and privacy > flaws when  > strip_query_terms is on and when strip_query_terms is off. > That directive only affec

Re: [squid-users] squid logging disable based on ACL & kernel: Out of memory

2020-05-02 Thread Akshay Hegde
Dear Amos, Can you please elaborate, I didnt understand. If possible can you explain with one example ? I mean behaviour of security and privacy flaws when strip_query_terms is on and when strip_query_terms is off. - Akshay On Sat, May 2, 2020, 1:03 AM Amos Jeffries wrote: > On 2/05/20 4:43 am

Re: [squid-users] squid logging disable based on ACL & kernel: Out of memory

2020-05-02 Thread Akshay Hegde
Dear Alex, Thank you so much, I will test on new squid, on old 3.1 it didn't work as you said. -Akshay On Sat, May 2, 2020, 1:00 AM Alex Rousskov wrote: > On 5/1/20 12:43 PM, Akshay Hegde wrote: > > > I have below option globally, which I don't want to make "off" > > strip_query_terms on > >

Re: [squid-users] squid logging disable based on ACL & kernel: Out of memory

2020-05-01 Thread Amos Jeffries
On 2/05/20 4:43 am, Akshay Hegde wrote: > Dear Alex, > > Thanks a lot, I started installing new squid on centos8 as you suggested. > > I got one more doubt its about logging. > > I have below option globally, which I don't want to make "off" > strip_query_terms on > > and my ACL as follows: > l

Re: [squid-users] squid logging disable based on ACL & kernel: Out of memory

2020-05-01 Thread Alex Rousskov
On 5/1/20 12:43 PM, Akshay Hegde wrote: > I have below option globally, which I don't want to make "off" > strip_query_terms on > acl track dstdomain "/etc/squid/sites_track.txt" > access_log /var/log/squid/full_site_links.log squid_custom track > however for specific ACL I would like to log ful

Re: [squid-users] squid logging disable based on ACL & kernel: Out of memory

2020-05-01 Thread Akshay Hegde
Dear Alex, Thanks a lot, I started installing new squid on centos8 as you suggested. I got one more doubt its about logging. I have below option globally, which I don't want to make "off" strip_query_terms on and my ACL as follows: logformat squid_custom %ts.%03tu %6tr %>a %Ss/%>Hs % wrote: >

Re: [squid-users] squid logging disable based on ACL & kernel: Out of memory

2020-05-01 Thread Alex Rousskov
On 5/1/20 1:20 AM, Akshay Hegde wrote: > *1. How to disable logging of few ACLs ? Use "access_log none aclX" to prevent creation of access.log records for transactions matching aclX. See http://lists.squid-cache.org/pipermail/squid-users/2020-April/021876.html for some related caveats. > *2. Ke

[squid-users] squid logging disable based on ACL & kernel: Out of memory

2020-04-30 Thread Akshay Hegde
Dear All, I got 2 query which are as follows *1. How to disable logging of few ACLs ? for example I have below ACL which I trust and I do not enable caching * [root@proxy squid]# cat no_cache_domain.txt .ubuntu.com .googlevideo.com .googleapis.com .googleusercontent.com .windows.com .windowsupdat