[squid-users] [PATCH] Host header forgery detected even with appendDomain

2011-09-12 Thread Jeff Chua
Amos, Latest squid is prevent connection to my known servers without local domain name. The version prior to June 15 allow connecting to URLs without the fully qualified domain names as in "moose" instead of "moose.xxx.com" The latest squid is throw the follwing error: 2011/09/13 09:17:53.420

Re: [squid-users] Reverse proxy Authentication

2011-09-12 Thread senthil kumar
Hello Amos, Thanks lot. Is there any test case to reproduce the error. cache_key not found.? Thanks, Senthil On Tue, Sep 13, 2011 at 10:50 AM, Amos Jeffries wrote: > On 13/09/11 06:07, senthil kumar wrote: >> >> Thank you Amos, >> >> I need help on the following issue. >> >> In the reverse proxy

Re: [squid-users] Squid Cache: Version 3.1.15 - Adding custom header

2011-09-12 Thread Amos Jeffries
On 13/09/11 17:05, Kris Glynn wrote: Thank you. If for instance there was a header to replace and it was an RFC defined header - would this work? request_header_replace X-Sophos-WSA-ClientIP %SRC Is %SRC a valid parameter ? If "X-Sophos-WSA-ClientIP" was a RFC defined request header name yo

Re: [squid-users] Reverse proxy Authentication

2011-09-12 Thread Amos Jeffries
On 13/09/11 06:07, senthil kumar wrote: Thank you Amos, I need help on the following issue. In the reverse proxy set-up we are using ICP to select peers, sometimes we are getting following 504 error with following in cache log neighborsUdpAck: Cache key not found" error. Indicates you hav

Re: [squid-users] Skype 5 + Squid 2.6 Transparent proxy + Add contacts issue

2011-09-12 Thread Amos Jeffries
On 13/09/11 07:15, Eduardo Porte wrote: Hi! When I try to add any contacts in my skype behind my transparent proxy I get this error message: Check your internet connection! With my direct internet connection, without pass by proxy, add contacts works fine. Any idea ? Um, "check your conn

RE: [squid-users] Squid Cache: Version 3.1.15 - Adding custom header

2011-09-12 Thread Kris Glynn
Thank you. If for instance there was a header to replace and it was an RFC defined header - would this work? request_header_replace X-Sophos-WSA-ClientIP %SRC Is %SRC a valid parameter ? Regards - Kris Glynn: (07) 3295 3987 - 0434602997 -Original Message- From: Amos Jeffries [mailt

Re: [squid-users] Squid Cache: Version 3.1.15 - Adding custom header

2011-09-12 Thread Amos Jeffries
On 13/09/11 15:44, Kris Glynn wrote: Hi, Can I add a custom header to outgoing http requests from squid. I have compiled with "--enable-http-violations" I've tried something like this below but it doesn't appear to work. request_header_replace X-Sophos-WSA-ClientIP %SRC replace is actually

[squid-users] Squid Cache: Version 3.1.15 - Adding custom header

2011-09-12 Thread Kris Glynn
Hi, Can I add a custom header to outgoing http requests from squid. I have compiled with "--enable-http-violations" I've tried something like this below but it doesn't appear to work. request_header_replace X-Sophos-WSA-ClientIP %SRC Can anyone suggest a way to achieve this ? The co

Re: [squid-users] two outgoing gateway and two parent proxy with load balancing in squid proxy

2011-09-12 Thread Amos Jeffries
On Mon, 12 Sep 2011 18:40:39 +0430, spaceman wrote: Dear Sir or Madam, Firstly i would like to apologize for my poor english Your English is fine, your emailer formatting needs some fixing. ;) I want to load balance two isp connection with one linux squid proxy server.Loa

Re: [squid-users] Wrong country recognition on websites after Squid configured as transparent proxy

2011-09-12 Thread Amos Jeffries
On Mon, Sep 12, 2011 at 11:37 PM, Piotr Pawlowski wrote: Dear Squid users, I've configured Squid as transparent proxy on my linux-based router. Everything is working fine, but one thing is really bothering me. After entering any website, my public IP is recognized as it becomes from US. I.

RE: [squid-users] Single slow site

2011-09-12 Thread John Kenyon
> -Original Message- > From: Michael Hendrie [mailto:mich...@hendrie.id.au] > Sent: Tuesday, 13 September 2011 11:09 AM > To: squid-users > Subject: Re: [squid-users] Single slow site > > > On 12/09/2011, at 12:44 PM, John Kenyon wrote: > > >> I had the exact same problem with with 3.1.1

Re: [squid-users] Adding WAN IP address to SQUID.CONF so users can run .net program

2011-09-12 Thread Amos Jeffries
On Mon, 12 Sep 2011 15:48:50 -0700, MargaretGillon wrote: I am on a WAN with another division. We are trying to run a web program at that divison but SQUID denies the address. I use a whitelist and added the IP adress to the whitelist but the program still won't run. I also added the server by

Re: [squid-users] Vary: * effectively uncacheable

2011-09-12 Thread Amos Jeffries
On Tue, 13 Sep 2011 04:16:22 +0300, Ghassan Gharabli wrote: Hello Amos, I am trying to cache file .exe from Google but it seems no cacheable! I already tried to customize its cdn and did it successfully ! . The bad thing is when I looked at its header I found that it is not cachable . http

[squid-users] Vary: * effectively uncacheable

2011-09-12 Thread Ghassan Gharabli
Hello Amos, I am trying to cache file .exe from Google but it seems no cacheable! I already tried to customize its cdn and did it successfully ! . The bad thing is when I looked at its header I found that it is not cachable . http://redbot.org/?uri=http%3A%2F%2Fdl.google.com%2Ftag%2Fs%2Fappgu

Re: [squid-users] Single slow site

2011-09-12 Thread Michael Hendrie
On 09/09/2011, at 4:37 PM, Amos Jeffries wrote: > On 09/09/11 18:15, Michael Hendrie wrote: >> >> On 09/09/2011, at 12:34 PM, John Kenyon wrote: >> >>> Hi All, >>> >>> I am experiencing a slow down on one particular site: >>> https://www.my.commbank.com.au/netbank/Logon/Logon.aspx >>> >>> I c

Re: [squid-users] Single slow site

2011-09-12 Thread Michael Hendrie
On 12/09/2011, at 12:44 PM, John Kenyon wrote: >> I had the exact same problem with with 3.1.10. In my case it was an IPv6 >> problem so I compiled squid with --disable-ipv6 as I didn't need it. There >> are >> a number of other ways to overcome the problem if you look through the >> mail arch

[squid-users] Adding WAN IP address to SQUID.CONF so users can run .net program

2011-09-12 Thread MargaretGillon
I am on a WAN with another division. We are trying to run a web program at that divison but SQUID denies the address. I use a whitelist and added the IP adress to the whitelist but the program still won't run. I also added the server by name ".services.chromalloy.local" to the whitelist. I also

Re: [squid-users] Wrong country recognition on websites after Squid configured as transparent proxy

2011-09-12 Thread Piotr Pawlowski
Behind Squid is standard LAN with 10.0.0.0/24 subnet . Best Regards -- Piotr Pawlowski GOYELLO System Administrator On 12 September 2011 22:41, Hasanen AL-Bana wrote: > Probably you have configured some private IP address behind squid that > looks like a US ip address , this will fix it for yo

Re: [squid-users] Wrong country recognition on websites after Squid configured as transparent proxy

2011-09-12 Thread Hasanen AL-Bana
Probably you have configured some private IP address behind squid that looks like a US ip address , this will fix it for you : forwarded_for off add it to squid.conf On Mon, Sep 12, 2011 at 11:37 PM, Piotr Pawlowski wrote: > > Dear Squid users, > > I've configured Squid as transparent proxy on my

[squid-users] Wrong country recognition on websites after Squid configured as transparent proxy

2011-09-12 Thread Piotr Pawlowski
Dear Squid users, I've configured Squid as transparent proxy on my linux-based router. Everything is working fine, but one thing is really bothering me. After entering any website, my public IP is recognized as it becomes from US. I.e. currency on international shops becomes US dollar ; some wordp

[squid-users] Skype 5 + Squid 2.6 Transparent proxy + Add contacts issue

2011-09-12 Thread Eduardo Porte
Hi! When I try to add any contacts in my skype behind my transparent proxy I get this error message: Check your internet connection! With my direct internet connection, without pass by proxy, add contacts works fine. Any idea ?

Re: [squid-users] Reverse proxy Authentication

2011-09-12 Thread senthil kumar
Thank you Amos, I need help on the following issue. In the reverse proxy set-up we are using ICP to select peers, sometimes we are getting following 504 error with following in cache log neighborsUdpAck: Cache key not found" error. Thanks, On Sat, Sep 10, 2011 at 9:34 AM, Amos Jeffries wrote

[squid-users] two outgoing gateway and two parent proxy with load balancing in squid proxy

2011-09-12 Thread spaceman
Dear Sir or Madam, Firstly i would like to apologize for my poor english I want to load balance two isp connection with one linux squid proxy server.Load balancing and failover is ok using shorewall firewall.My network setup is here eth0 is for LAN