Re: [squid-users] Blacklisted SSL site link (facebook) cause site being viewed to fail

2012-11-07 Thread James Robertson
Thanks, I suspected as much. On 8 November 2012 15:55, Amos Jeffries wrote: > On 8/11/2012 5:19 p.m., James Robertson wrote: >> >> We have an ACL that includes facebook.com as a blocked site. Another >> site that staff use for work is www.redbook.com.au, this site has >> links all through it to

Re: [squid-users] Blacklisted SSL site link (facebook) cause site being viewed to fail

2012-11-07 Thread Amos Jeffries
On 8/11/2012 5:19 p.m., James Robertson wrote: We have an ACL that includes facebook.com as a blocked site. Another site that staff use for work is www.redbook.com.au, this site has links all through it to facebook, twitter etc. The problem is that when navigating www.redbook.com.au it tries to

Re: [squid-users] Can a space after HTTP/1.1 be allowed?

2012-11-07 Thread Amos Jeffries
On 8/11/2012 1:53 a.m., Ralf Hildebrandt wrote: A broken application sends this request to our Squid-3.1.21: "CONNECT gateway.push.apple.com:2195 HTTP/1.1" (note the trailing space!) which results in "HTTP/1.0 400 Bad Request" And indeed: http://www.w3.org/Protocols/rfc2616/rfc2616-sec5.html#s

[squid-users] Blacklisted SSL site link (facebook) cause site being viewed to fail

2012-11-07 Thread James Robertson
We have an ACL that includes facebook.com as a blocked site. Another site that staff use for work is www.redbook.com.au, this site has links all through it to facebook, twitter etc. The problem is that when navigating www.redbook.com.au it tries to connect to https://www.facebook.com but because

Re: [squid-users] Please help test a streaming problem through squid

2012-11-07 Thread Amos Jeffries
. The commercial part first in every stream works fine, but when it's time to switch to the main stream it just stops and the screen goes black. Our production squid runs 3.1.21, and in a lab server I have tried with squid 2.7.STABLE9, 3.2.3 and 3.3.0.1-20121107-r12377. Same problem in all ver

[squid-users] Please help test a streaming problem through squid

2012-11-07 Thread Peter Olsson
fine, but when it's time to switch to the main stream it just stops and the screen goes black. Our production squid runs 3.1.21, and in a lab server I have tried with squid 2.7.STABLE9, 3.2.3 and 3.3.0.1-20121107-r12377. Same problem in all versions. The configuration in the lab server squids

Re: [squid-users] ISP-style Transparent Proxy

2012-11-07 Thread Nick Bright
On 11/7/2012 4:43 PM, Eliezer Croitoru wrote: On 11/8/2012 12:35 AM, Nick Bright wrote: I'm new to WCCP, so I'll need to figure out how to make that determination. Any advice on doing so would be appreciated. Take a look at: http://wiki.squid-cache.org/ConfigExamples/UbuntuTproxy4Wccp2 that I w

Re: [squid-users] ISP-style Transparent Proxy

2012-11-07 Thread Nick Bright
On 11/7/2012 4:41 PM, Kevin Wilcox wrote: On 7 November 2012 17:35, Nick Bright wrote: On the web server that should be receiving the hit, tcpdump reports: 16:31:21.283309 IP 64.254.49.2.33315> 64.254.32.23.http: Flags [S], seq 4294319084, win 14600, options [mss 1460,sackOK,TS val 11023544

Re: [squid-users] ISP-style Transparent Proxy

2012-11-07 Thread Eliezer Croitoru
On 11/8/2012 12:35 AM, Nick Bright wrote: I'm new to WCCP, so I'll need to figure out how to make that determination. Any advice on doing so would be appreciated. Take a look at: http://wiki.squid-cache.org/ConfigExamples/UbuntuTproxy4Wccp2 that I wrote which works on almost the same IOS and the

Re: [squid-users] ISP-style Transparent Proxy

2012-11-07 Thread Kevin Wilcox
On 7 November 2012 17:35, Nick Bright wrote: > On the web server that should be receiving the hit, tcpdump reports: > > 16:31:21.283309 IP 64.254.49.2.33315 > 64.254.32.23.http: Flags [S], seq > 4294319084, win 14600, options [mss 1460,sackOK,TS val 11023544 ecr > 0,nop,wscale 7], length 0 > 16:3

Re: [squid-users] ISP-style Transparent Proxy

2012-11-07 Thread Nick Bright
On 11/7/2012 4:24 PM, Amos Jeffries wrote: 1) The Cisco router sees the web cache as reported by "sh ip wccp" (see attached sh_ip_wccp.txt). 2) tcpdump -i tun0 reports packets arriving from the Cisco router. 3) tcpdump -i eth2 reports packets leaving the cache server bound for the destination web

Re: [squid-users] ISP-style Transparent Proxy

2012-11-07 Thread Amos Jeffries
On 08.11.2012 11:08, Nick Bright wrote: Greetings, We're working to attempt to get a completely transparent proxy up and running. By completely transparent I mean: 1) The web server should see the clients' actual IP (not the proxy) 2) The client should see the response coming back from the IP o

[squid-users] ISP-style Transparent Proxy

2012-11-07 Thread Nick Bright
Greetings, We're working to attempt to get a completely transparent proxy up and running. By completely transparent I mean: 1) The web server should see the clients' actual IP (not the proxy) 2) The client should see the response coming back from the IP of the web server. We're trying to im

[squid-users] Can a space after HTTP/1.1 be allowed?

2012-11-07 Thread Ralf Hildebrandt
A broken application sends this request to our Squid-3.1.21: "CONNECT gateway.push.apple.com:2195 HTTP/1.1 " (note the trailing space!) which results in "HTTP/1.0 400 Bad Request" And indeed: http://www.w3.org/Protocols/rfc2616/rfc2616-sec5.html#sec5.1 together with http://www.w3.org/Protocols/r

Re: [squid-users] Radius Accounting!

2012-11-07 Thread Eliezer Croitoru
On 11/7/2012 1:37 PM, Azfar Hashmi wrote: Hi all, I am using Squid 2.7 Stable9 (Debian Squeeze package) and i am using squid_radius_auth helper to perform authentication from radius (Freeradius 2.x) and this is working fine. Now the problem is that I want to do accounting in radius and for it I

[squid-users] Radius Accounting!

2012-11-07 Thread Azfar Hashmi
Hi all, I am using Squid 2.7 Stable9 (Debian Squeeze package) and i am using squid_radius_auth helper to perform authentication from radius (Freeradius 2.x) and this is working fine. Now the problem is that I want to do accounting in radius and for it I need squid to send accounting start / stop,

[squid-users] [help] Reverse Proxy with SSL provided by GoDaddy

2012-11-07 Thread HỒ MINH ĐẠT
Hi friends, I built a squid to reverse proxy for our web server behind. It’s done with http. But I don’t know how to apply ssl certificate. I bought from GoDaddy Someone give me a help pls! These are my reverse config: reverse proxy ## http_port 8008