[squid-users] Re: Login on WWW page fails - without proxy there's no problem

2013-09-12 Thread uners
Antony Stone wrote Er, I think you mean intercept? http://www.squid-cache.org/Versions/v3/3.1/cfgman/http_port.html The intercept option is the successor of transparent? From which Squid version on? The link above doesn't tell. I run Debian7-shipped Squid3 which is 3.1.20. Antony Stone

[squid-users] Squid 3 Bad request reply

2013-09-12 Thread Mgr. Peter Tuharsky
Hi, I'm trying to google this out, however unsuccessfylly so far. We have migrated Squid 2.7 to 3.1.20 (Debian). Works fine, except for the page zrsr.sk that returns Bad request. Interestingly, for some machines the page works, for some partially works (only some actions give Bad request), and

Re: [squid-users] Re: Login on WWW page fails - without proxy there's no problem

2013-09-12 Thread Amos Jeffries
On 12/09/2013 7:03 p.m., uners wrote: Antony Stone wrote Er, I think you mean intercept? http://www.squid-cache.org/Versions/v3/3.1/cfgman/http_port.html The intercept option is the successor of transparent? From which Squid version on? The link above doesn't tell. The above link is

Re: [squid-users] Squid 3 Bad request reply

2013-09-12 Thread Amos Jeffries
On 12/09/2013 8:08 p.m., Mgr. Peter Tuharsky wrote: Hi, I'm trying to google this out, however unsuccessfylly so far. We have migrated Squid 2.7 to 3.1.20 (Debian). Works fine, except for the page zrsr.sk that returns Bad request. Interestingly, for some machines the page works, for some

[squid-users] Re: Login on WWW page fails - without proxy there's no problem

2013-09-12 Thread uners
Thanks Amos for the details - I'll give Debian 8 with 3.3.8 a try, as soon as I'm less busy. The support team of the site confirmed me that they use a *non-transparent* proxy. They further told me that they think my proxy had problems with https as their login uses it. Generally, my proxy has no

[squid-users] Is ignore-private option from refresh_pattern broken?

2013-09-12 Thread Pavel Kazlenka
Hi gentlemen, I'm trying to cache youtube videos following http://wiki.squid-cache.org/Features/StoreID guide. But seems like squid rejects to cache the content because original server returns header 'Cache-control:private' and 'refresh pattern ... ignore-private' doesn't take effect. Here is

Re: [squid-users] Is ignore-private option from refresh_pattern broken?

2013-09-12 Thread Amos Jeffries
On 12/09/2013 10:51 p.m., Pavel Kazlenka wrote: Hi gentlemen, I'm trying to cache youtube videos following http://wiki.squid-cache.org/Features/StoreID guide. But seems like squid rejects to cache the content because original server returns header 'Cache-control:private' and 'refresh pattern

Re: [squid-users] Is ignore-private option from refresh_pattern broken?

2013-09-12 Thread Pavel Kazlenka
Thank you Amos, On 09/12/2013 02:53 PM, Amos Jeffries wrote: On 12/09/2013 10:51 p.m., Pavel Kazlenka wrote: Hi gentlemen, I'm trying to cache youtube videos following http://wiki.squid-cache.org/Features/StoreID guide. But seems like squid rejects to cache the content because original

Re: [squid-users] Is ignore-private option from refresh_pattern broken?

2013-09-12 Thread Pavel Kazlenka
On 09/12/2013 03:12 PM, Pavel Kazlenka wrote: Thank you Amos, On 09/12/2013 02:53 PM, Amos Jeffries wrote: On 12/09/2013 10:51 p.m., Pavel Kazlenka wrote: Hi gentlemen, I'm trying to cache youtube videos following http://wiki.squid-cache.org/Features/StoreID guide. But seems like squid

[squid-users] Squid subprocess dead

2013-09-12 Thread jinge
Hi, all! Today out squid subprocess dead, I config five subprocess, and my configure below. But when I check my zabbix. and found there just one subprocess there and others dead, I don't know why it crashed, and any one help me? root@sq-L1-n1:/usr/local/src# ps aux|grep squid root 8341

[squid-users] Workers rock, aufs

2013-09-12 Thread Marcos A. Dzieva
Dear, I have tried to use workers with rock and aufs, but I could not make it work. workers 4 cache_dir rock /var/cache2/squid/rock 5 min-size=1 max-size=31000 max-swap-rate=250 swap-timeout=350 if ${process_number} = 1 cache_dir aufs /var/cache/squid/aufs 85 64 256 min-size=31001

Re: [squid-users] pfSense/Squid behind Draytek router

2013-09-12 Thread Antony Stone
On Thursday 12 September 2013 at 18:03:52, Paul Cieslar wrote: Hi All. I am running Squid 3.3 behind a Draytek firewall. The firewall has Web Content Filtering configured, which delivers a custom page when unauthorised content is requested. Both work fine separately (and together in most

[squid-users] pfSense/Squid behind Draytek router

2013-09-12 Thread Paul Cieslar
Hi All. I am running Squid 3.3 behind a Draytek firewall.  The firewall has Web Content Filtering configured, which delivers a custom page when unauthorised content is requested.  Both work fine separately (and together in most cases), however when trying to access unauthorised content through

Re: [squid-users] SSL bump interception and certificates warnign

2013-09-12 Thread Alex Crow
On 11/09/13 20:56, Loïc BLOT wrote: Then, if i add my own CA to firefox warning will disappear ? Yes, that is the way SSL works. Just make sure you install the proxy's CA cert in trusted root CAs in Windows cert store and/or other browsers' stores and you are good to go. NB this may not be

Re: [squid-users] Squid subprocess dead

2013-09-12 Thread Alex Rousskov
On 09/12/2013 07:55 AM, jinge wrote: Today out squid subprocess dead, [...], I don't know why it crashed, and any one help me? Hello Jinge, This is why at least one of your kids crashed: 2013/09/12 21:53:37 kid4| ERROR: Invalid value: '05 GMT' is supposed to be a number. This bug is

Re: [squid-users] Workers rock, aufs

2013-09-12 Thread Alex Rousskov
On 09/12/2013 09:11 AM, Marcos A. Dzieva wrote: Dear, I have tried to use workers with rock and aufs, but I could not make it work. workers 4 cache_dir rock /var/cache2/squid/rock 5 min-size=1 max-size=31000 max-swap-rate=250 swap-timeout=350 if ${process_number} = 1 cache_dir aufs

[squid-users] Source Code Questions for non-Dev?

2013-09-12 Thread Jeffrey Walton
I'm interested in posting a few questions on the source code. According to squid-dev list [1]: This list is designed for people who are interested in developing and/or testing experimental squid code during the development and not for general users. That's not me since I don't plan on developing.

Re: [squid-users] Source Code Questions for non-Dev?

2013-09-12 Thread Amos Jeffries
On 13/09/2013 1:31 p.m., Jeffrey Walton wrote: I'm interested in posting a few questions on the source code. According to squid-dev list [1]: This list is designed for people who are interested in developing and/or testing experimental squid code during the development and not for general users.

[squid-users] Implementation details of of proxying?

2013-09-12 Thread Jeffrey Walton
I'm looking for the implementation details of how squid proxies its connections. That is (in pseudo code): socket src = ... // client socket socket dest = ... // server socket int n = read(src, buffer) write(dest, buffer, n) I imagine its not that naive, and I'm really

[squid-users] Unable to get bump-server-first working with intercept

2013-09-12 Thread dococ
I've been trying for some time to get a transparent proxy with https interception working. I've read a number of guides and most have fairly obvious mistakes (which were not obvious when I started this project) I've successfully created a CA and upon registering this CA on a connected client am

Re: [squid-users] Squid subprocess dead

2013-09-12 Thread jinge
Hi Alex, Thanks for your help. And I will upgrade my squid to the lastest version. Regards Jinge