Re: [squid-users] A way to redirect google/Youtube SSL

2012-11-29 Thread Steve Hill
On 28.11.12 23:22, David Touzeau wrote: Thanks !!! But what about Youtube ? I'm not aware of anything similar for youtube I'm afraid, but if you come across anything I'd be very interested. The other possibility is to ssl-bump the https sessions, but that's a bit nasty. -- - Steve Hill

Re: [squid-users] Allowing skype through on an ssl bumped proxy

2012-11-29 Thread Amos Jeffries
On 29/11/2012 7:22 p.m., Sean Boran wrote: Thanks for the various suggestions. - Running on HEAD from August, I would have thought I'm running (almost) the newest 3.3, Server bumping is in there. Maybe. There are crtd helper crashes, data from wrong FD being used on some ACLs after bumping, ha

[squid-users] How to set /etc/logrotate.d/squid to have good sarg reports?

2012-11-29 Thread Bartosz.C
Hi, How to set /etc/logrotate.d/squid to have good sarg reports? logrotate daily Seem to be wrong - it won't be enough data to run squid-reports weekly, squid-reports monthly logrotate weekly Seem to be wrong as well - it won't be enough data to run squid-reports monthly logrotate mont

Re: [squid-users] How to set /etc/logrotate.d/squid to have good sarg reports?

2012-11-29 Thread Helmut Hullen
Hallo, Bartosz, you wrote in "How to set /etc/logrotate.d/squid to have good sarg reports?": > How to set /etc/logrotate.d/squid to have good sarg reports? My system runs the "sarg" reports at the end of the day, as a separate cronjob, and "logrotate" runs in the very early morning, as part of

Re: [squid-users] How to set /etc/logrotate.d/squid to have good sarg reports?

2012-11-29 Thread Bartosz.C
> My system runs the "sarg" reports at the end of the day, as a separate > cronjob, and "logrotate" runs in the very early morning, as part of > "cron.daily". > Helmut So how can you create weekly and monthly reports if you create every day new log file? /etc/sarg/sarg.conf # TAG: access_log fil

Re: [squid-users] Tproxy without spoofed source address

2012-11-29 Thread Nick Fennell
Hey Steve, OK so, for your internal (LAN) traffic, why put it through TPROXY at all? Why not exclude it from the redirect into the TPROXY engine and allow it to proxy through "organically"? As well you know, if TPROXY sees the traffic in one direction, it needs to see it in the other. My sugg

Re: [squid-users] How to set /etc/logrotate.d/squid to have good sarg reports?

2012-11-29 Thread Helmut Hullen
Hallo, Bartosz, you wrote to "[squid-users] How to set /etc/logrotate.d/squid to have good sarg reports?": >> My system runs the "sarg" reports at the end of the day, as a >> separate cronjob, and "logrotate" runs in the very early morning, as >> part of "cron.daily". >> Helmut > So how can you

Re: [squid-users] How to set /etc/logrotate.d/squid to have good sarg reports?

2012-11-29 Thread Sean Boran
Hi, I also only do daily around 6h30, all from /etc/logrotate.d/squid: /var/log/squid/*.log { daily prerotate sarg 2>&1 | logger /usr/lib/calamaris/calamaris-cron-script | logger endscript postrotate /etc/init.d/squid

Re: [squid-users] How to set /etc/logrotate.d/squid to have good sarg reports?

2012-11-29 Thread Bartosz.C
On 29 November 2012 14:42, Sean Boran wrote: > Hi, > > I also only do daily around 6h30, all from /etc/logrotate.d/squid: > /var/log/squid/*.log { > daily > prerotate > sarg 2>&1 | logger > /usr/lib/calamaris/calamaris-cron-script | logger >

Re: [squid-users] How to set /etc/logrotate.d/squid to have good sarg reports?

2012-11-29 Thread Helmut Hullen
Hallo, Bartosz, bartos...@gmail.com meinte am 29.11.12 in squid zum Thema Re: [squid-users] How to set /etc/logrotate.d/squid to have good sarg reports?: >> My system runs the "sarg" reports at the end of the day, as a >> separate cronjob, and "logrotate" runs in the very early morning, as >> pa

[squid-users] Problem accessing a site

2012-11-29 Thread Baird, Josh
Hi, Our Squid 2.7 proxies are failing on a specific request: KeyValue ResponseHTTP/1.0 400 Bad Request Server squid Date Wed, 28 Nov 2012 13:07:29 GMT Content-Typetext/html Content-Length2144 Expires Wed, 28 Nov 2012 13:07:29 GMT X-Squid-ErrorERR

Re: [squid-users] Problem accessing a site

2012-11-29 Thread jeffrey j donovan
On Nov 29, 2012, at 11:14 AM, "Baird, Josh" wrote: > Hi, > > Our Squid 2.7 proxies are failing on a specific request: > > The request header is: > > KeyValue > Request GET > http://api.copiamobile.com/marketing-api/msQuiz/markFeaturedQuizzes?callback=jQuery1710172571693

Re: [squid-users] Tproxy without spoofed source address

2012-11-29 Thread Eliezer Croitoru
On 11/29/2012 3:31 PM, Nick Fennell wrote: Hey Steve, OK so, for your internal (LAN) traffic, why put it through TPROXY at all? Why not exclude it from the redirect into the TPROXY engine and allow it to proxy through "organically"? As well you know, if TPROXY sees the traffic in one directio

Re: [squid-users] Problem accessing a site

2012-11-29 Thread Amos Jeffries
On 30/11/2012 6:06 a.m., jeffrey j donovan wrote: On Nov 29, 2012, at 11:14 AM, "Baird, Josh" wrote: Hi, Our Squid 2.7 proxies are failing on a specific request: The request header is: KeyValue Request GET http://api.copiamobile.com/marketing-api/msQuiz/markFeaturedQu

Re: [squid-users] Problem accessing a site

2012-11-29 Thread Nishant Sharma
Sorry for top posting, my mobile device is crazy. I have seen SugarCRM also having these weird long URLs. But I also faintly remember a compile time option in a header file to increase this limit. -Nishant On 11/30/12, Amos Jeffries wrote: > On 30/11/2012 6:06 a.m., jeffrey j donovan wrote: >>

RE: [squid-users] Problem accessing a site

2012-11-29 Thread Baird, Josh
Top posting here as well (sorry). These proxies are actually squid 2.6 (RHEL5), sorry about that. So, because it is only 4.5k or so, you don't think the header size is an issue? I'm not sure how to debug this problem any further. Any suggestions? Thanks. -Original Message- From: Nis

Re: [squid-users] Problem accessing a site

2012-11-29 Thread Amos Jeffries
On 30/11/2012 5:04 p.m., Baird, Josh wrote: Top posting here as well (sorry). These proxies are actually squid 2.6 (RHEL5), sorry about that. So, because it is only 4.5k or so, you don't think the header size is an issue? I'm not sure how to debug this problem any further. I think the URL

[squid-users] A simple external helper error

2012-11-29 Thread John Xue
Hi, I try to write a simple external helper for test. #!/bin/bash while read ip ; do if [ -e /tmp/test.err ] ; then echo "ERR" else echo "OK" fi done squid.conf external_acl_type test_helper ttl=0 negative_ttl=0 grace=0 %SRC /usr/lib64/squid/test.sh acl testacl external test_helper

Re: [squid-users] A simple external helper error

2012-11-29 Thread Amos Jeffries
On 30/11/2012 7:46 p.m., John Xue wrote: Hi, I try to write a simple external helper for test. #!/bin/bash while read ip ; do if [ -e /tmp/test.err ] ; then echo "ERR" else echo "OK" fi done squid.conf external_acl_type test_helper ttl=0 negative_ttl=0 grace=0 %SRC /usr/lib64/