Re: [squid-users] Caching issue with http_port when running in transparent mode

2012-06-05 Thread Eliezer Croitoru
On 05/06/2012 17:22, Hans Musil wrote: Eliezer wrote: one important thing to be aware of is that if you are using the same box as a gateway and squidbox it's better to use the "redirect" instead of DNAT. you can always try to use: http://nocat.net/downloads/NoCatSplash/ or to write your own h

Re: [squid-users] Caching issue with http_port when running in transparent mode

2012-06-05 Thread Amos Jeffries
On 06.06.2012 07:04, Hans Musil wrote: Ups, an other problem: Amos, your solution looks fine, but there is one problem. My login/logout script needs to know the client's IP, but it only sees my squid's IP. I know, there is format tag %i, but this would require the non-stable version 3.2. Any b

Re: [squid-users] Caching issue with http_port when running in transparent mode

2012-06-05 Thread Hans Musil
Original-Nachricht > Datum: Tue, 05 Jun 2012 19:54:12 +0200 > Von: "Hans Musil" > An: Amos Jeffries , squid-users@squid-cache.org > Betreff: Re: [squid-users] Caching issue with http_port when running in > transparent mode > Amos Jeffries wrote: > > > On 29/05/2012 6:12 p.m.,

Re: [squid-users] Caching issue with http_port when running in transparent mode

2012-06-05 Thread Hans Musil
Amos Jeffries wrote: > On 29/05/2012 6:12 p.m., Hans Musil wrote: > > Amos Jeffries wrote: > >> On 29.05.2012 08:13, Eliezer Croitoru wrote: > >>> hey there Hans, > >>> > >>> are you serving squid on the same machine as the gateway is?(wasnt > >>> sure about the DNAT). > >>> your problem is not di

Re: [squid-users] Reverse-proxy for site on Google AppEngine

2012-06-05 Thread Will
> This is where having the proxy doing auth and passing the credentials to the > peer comes in. The peer never gets to the point of needing to send those > redirects. Meaning I have to change Squid or it can be done in configuration? Thanks, Will On Mon, Jun 4, 2012 at 6:33 PM, Amos Jeffries w

Re: [squid-users] DNS Attack

2012-06-05 Thread Roman Gelfand
Here is the request this guy is sending. Perhaps, this could shed some light. ..E..dm.@.|...`9.P..].-..#PH..GET.http://www.asd818.com/.HTTP/1.1..Accept:.*/*..Referer:.http://www.asd818.com/..Accept-Language:.zh-cn..Accept-Encoding:.gzip,.deflate..User-Agent:.Mozilla/4.0.(c

Re: [squid-users] Caching issue with http_port when running in transparent mode

2012-06-05 Thread Hans Musil
Eliezer wrote: > one important thing to be aware of is that if you are using the same box > as a gateway and squidbox it's better to use the "redirect" instead of > DNAT. > > you can always try to use: > http://nocat.net/downloads/NoCatSplash/ > > or to write your own helper. > it can be pretty

[squid-users] Re: Squid 3.1 and https ssl aes256 issue

2012-06-05 Thread alextouch
Amos Jeffries-2 wrote > > Just SYN_SENT? no TCP connection completed and CONNECT HTTP request > sent? (all that has to happen *before* the first octet of TLS starts) > > Very strange. > Indeed there is something strange that I cannot understand. It seems as if the client sends the request but

Re: [squid-users] Re: Squid 3.1 and https ssl aes256 issue

2012-06-05 Thread Amos Jeffries
On 5/06/2012 7:05 p.m., alextouch wrote: It is most likely that your clients browsers or SSL libraries are missing AES-256 support or are getting stuck negotiating to use a version of TLS/SSL which supports it. Amos Ok, but if I turn off proxy setting in clients and allow a direct connection

[squid-users] Re: Squid 3.1 and https ssl aes256 issue

2012-06-05 Thread alextouch
> It is most likely that your clients browsers or SSL libraries are > missing AES-256 support or are getting stuck negotiating to use a > version of TLS/SSL which supports it. > > Amos > Ok, but if I turn off proxy setting in clients and allow a direct connection to the internet, all works w