[squid-users] SSLBUMP Issue with SSL websites

2012-07-10 Thread Muhammad Shehata
Dears, hope you all are doing well actually I was following the replies on squid users-mail-list about sslbump issues with showing up some websites inline without images or css style sheet like https://gmail.com and https://facebook.com as I have same issue in version squid 3.1.19, I know

[squid-users] different geographical location problem

2012-07-10 Thread ajendra singh
Hi, My squid proxy (location A) and http client (location B) are running in different geographical location. Whenever i make a request to googledot it is showing me google page for location A (location at which proxy is present). Is there some way to change this so that i get the google page for

Re: [squid-users] Cannot run '/usr/lib/squid3/squid_session' process

2012-07-10 Thread Stefanie Clormann
I did run it from the command line with all parameters with the user proxy. It did not give me any errors and the permissions are right. So, any more clues? Thanks, Stefanie On 26.06.2012 20:08, Eliezer Croitoru wrote: i dont know this external acl but i would try to first run it from command

[squid-users] Rules problem

2012-07-10 Thread Carlo Filippetto
Hi all, I need to create a rules where some users, logged in with ntlm, must be restrictet only in few sites. I tried something as: acl RESTRICTED_USER proxy_auth /etc/squid/restricted_user.allow acl RESTRICTED_WEB dstdomain /etc/squid/restricted_web.limited http_reply_access allow

Re: [squid-users] different geographical location problem

2012-07-10 Thread Amos Jeffries
On 10/07/2012 7:24 p.m., ajendra singh wrote: Hi, My squid proxy (location A) and http client (location B) are running in different geographical location. Whenever i make a request to googledot it is showing me google page for location A (location at which proxy is present). Is there some way

Re: [squid-users] Rules problem

2012-07-10 Thread Amos Jeffries
On 10/07/2012 8:22 p.m., Carlo Filippetto wrote: Hi all, I need to create a rules where some users, logged in with ntlm, must be restrictet only in few sites. I tried something as: acl RESTRICTED_USER proxy_auth /etc/squid/restricted_user.allow acl RESTRICTED_WEB dstdomain

Re: [squid-users] Rules problem

2012-07-10 Thread Carlo Filippetto
2012/7/10 Amos Jeffries squ...@treenet.co.nz: On 10/07/2012 8:22 p.m., Carlo Filippetto wrote: Hi all, I need to create a rules where some users, logged in with ntlm, must be restrictet only in few sites. I tried something as: acl RESTRICTED_USER proxy_auth

[squid-users] strange behavior with https sites and ntlm/basic authentication

2012-07-10 Thread Bruno Santos
Hi all ! I finally (sort of) manage to get squid with ntlm authentication. I now have it working as i want it, but there's a configuration that i had to change and that's keeping bugging me in the why. Everything was workig fine until reaching https sites. If i had enabled both types of

Re: [squid-users] strange behavior with https sites and ntlm/basic authentication

2012-07-10 Thread Amos Jeffries
On 10/07/2012 9:59 p.m., Bruno Santos wrote: Hi all ! I finally (sort of) manage to get squid with ntlm authentication. I now have it working as i want it, but there's a configuration that i had to change and that's keeping bugging me in the why. Everything was workig fine until reaching

Re: [squid-users] Rules problem

2012-07-10 Thread Amos Jeffries
On 10/07/2012 9:37 p.m., Carlo Filippetto wrote: 2012/7/10 Amos Jeffries squ...@treenet.co.nz: On 10/07/2012 8:22 p.m., Carlo Filippetto wrote: Hi all, I need to create a rules where some users, logged in with ntlm, must be restrictet only in few sites. I tried something as: acl

[squid-users] Only Debug/Log TCP_DENIED/403

2012-07-10 Thread ml ml
Hello List, can i only Log/Debug TCP_DENIED/403 hits? I have a LOT of traffic and i am only interested in TCP_DENIED Thanks, Mario

Re: [squid-users] Only Debug/Log TCP_DENIED/403

2012-07-10 Thread Amos Jeffries
On 11/07/2012 12:25 a.m., ml ml wrote: Hello List, can i only Log/Debug TCP_DENIED/403 hits? I have a LOT of traffic and i am only interested in TCP_DENIED Thanks, Mario http://www.squid-cache.org/Doc/config/access_log/ Takes ACLs such as the http_status ACL. Amos

Re: [squid-users] Only Debug/Log TCP_DENIED/403

2012-07-10 Thread ml ml
Hello Amos, thanks. I am using Squid Version 3.1.19 and those rules: acl DENY_ACCESS http_status 403 access_log daemon:/var/log/squid/DENY.log squid DENY_ACCESS However i get: 2012/07/10 15:18:13| aclParseAclList: ACL name 'DENY_ACCESS' not found. FATAL: Bungled squid.conf line 695: access_log

Re: [squid-users] Only Debug/Log TCP_DENIED/403

2012-07-10 Thread Alan
Its written clearly in the manual: access_log module:place [logformat name [acl acl ...]] In your case: acl DENY_ACCESS http_status 403 access_log squid DENY_ACCESS squid refers to a predefined logformat, see http://www.squid-cache.org/Doc/config/logformat/ On Tue, Jul 10, 2012 at 10:23 PM, ml

Re: [squid-users] external_acl_type helper problems

2012-07-10 Thread Alan
I suggest you to try with squid 2.7 or 3.2 series. I had some strange problems with the 3.1 series, I think external acls was one of those problems. When I tested 2.7 and 3.2, all the strange problems were gone. I know 2.7 sounds old, but it is incredibly faster than the rest. Regarding your

Re: [squid-users] squid_session problem

2012-07-10 Thread Jack Black
Thank you for the abundance of information you have provided - I'm going through it all now to get a better understanding of squid_session and how it works, as well as the external_acl_type directive. On Mon, Jul 9, 2012 at 9:46 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 10.07.2012 15:12,

Re: [squid-users] Only Debug/Log TCP_DENIED/403

2012-07-10 Thread Amos Jeffries
On 11.07.2012 02:00, Alan wrote: Its written clearly in the manual: access_log module:place [logformat name [acl acl ...]] In your case: acl DENY_ACCESS http_status 403 access_log squid DENY_ACCESS squid refers to a predefined logformat, see http://www.squid-cache.org/Doc/config/logformat/