Re: Fwd: Re: [squid-users] Squid 3 Bad request reply

2013-09-19 Thread Mgr. Peter Tuharsky
Thank You for Your reply. I have identified a name resolving issue so far. I'm not sure however, what should be in acl localhost src and acl localnet src. Peter Dňa 20.09.2013 05:09, Amos Jeffries wrote / napísal(a): > On 17/09/2013 6:24 p.m., Mgr. Peter Tuharsky wrote: >> .Via: */ >> 0x31, 0

Re: [squid-users] zimbra and squid_ldap_auth . . .

2013-09-19 Thread Amos Jeffries
On 15/09/2013 7:24 a.m., don...@infomed.sld.cu wrote: Hello I trying to use squid_ldap_auth with zimbra accounts but I?m having a lot of troubles. Before, I use a line like this from shell to confirm an OK auth against and LDAP server: /usr/lib/squid3/squid_ldap_auth -v 3 -b dc=cpe,dc=com -

Re: [squid-users] How would I use Multiple IPs with Multiple Users

2013-09-19 Thread Amos Jeffries
On 15/09/2013 7:54 a.m., Ralph LoBianco wrote: Hi, Right now I have squid setup with Multiple IPS and its working fine like this. acl ip1 myip 192.168.1.101 acl ip2 myip 192.168.1.102 acl ip3 myip 192.168.1.103 acl ip4 myip 192.168.1.104 acl ip5 myip 192.168.1.105 acl ip6 myip 192.168.1.106 No

Re: [squid-users] Re: Squid + DansGuardian + Bridging

2013-09-19 Thread Amos Jeffries
On 20/09/2013 3:55 p.m., psd17j-jacob wrote: Where is this bridge sitting in the network level? please share your situation in more details. Sure! So we have the NOC MDF > proxy (in through eth0) //bridge (out eth1) router > ComCast. Amos Jeffries-2 wrote The proxy operates on top of the *ro

[squid-users] Re: Squid + DansGuardian + Bridging

2013-09-19 Thread psd17j-jacob
>Where is this bridge sitting in the network level? >please share your situation in more details. Sure! So we have the NOC MDF > proxy (in through eth0) //bridge (out eth1) >router > ComCast. Amos Jeffries-2 wrote > The proxy operates on top of the *routing* component of the kernel. As > you c

Re: [squid-users] Re: Squid + DansGuardian + Bridging

2013-09-19 Thread Amos Jeffries
On 20/09/2013 5:35 a.m., psd17j-jacob wrote: Hi Antony, Thanks for the reply. So what would be your suggestion in terms of creating a transparent proxy across multiple VLANs without bridging? All VLANs are public routable IPs except for two, one being the publicly available WiFi. The school enco

Re: [squid-users] Squid intermittently fails with 503 after connect

2013-09-19 Thread Amos Jeffries
On 19/09/2013 1:29 a.m., John McGowan wrote: On Wed, Sep 18, 2013 at 7:41 AM, Alfredo Rezinovsky wrote: El 16/09/13 18:35, John McGowan escribió: squid defaults connect_retries to 0 try setting it to something and see if the 503 errors frequency are lower with this. I remember looking at that

Re: Fwd: Re: [squid-users] Squid 3 Bad request reply

2013-09-19 Thread Amos Jeffries
On 17/09/2013 6:24 p.m., Mgr. Peter Tuharsky wrote: .Via: */ 0x31, 0x2e, 0x30, 0x20, 0x6c, 0x6f, 0x63, 0x61, /* 1.0 loca */ 0x6c, 0x68, 0x6f, 0x73, 0x74, 0x20, 0x28, 0x73, /* lhost Your Squid is for some reason identifying its *public* domain name as "localhost". This has bitten a few peopl

Re: [squid-users] Disable -Werror when building Squid

2013-09-19 Thread Amos Jeffries
On 15/09/2013 10:44 p.m., Jeffrey Walton wrote: On Sat, Sep 14, 2013 at 11:59 PM, Amos Jeffries wrote: On 14/09/2013 6:28 a.m., Jeffrey Walton wrote: I'm trying to get analysis tools on squid, but I'm having trouble due to -Werror. -Werror is causing a continuous stream of compile and link fai

Re: [squid-users] Set field in HTTP header in Squid 3.1

2013-09-19 Thread Eliezer Croitoru
Hey Sachin Gupta, what you are asking is basically related to "requests mangling" which is not the best way to do what you need. I assume that matching and insert is kind of filtering or mangling. The best option I have seen is ICAP and it's a very simple mechanism. the solution is based on the n

Re: [squid-users] Trouble adding a new Squid configuration parameter

2013-09-19 Thread Eliezer Croitoru
Hey there, You got a clue on how to do what you want but the question I am asking myself is: "what is this needed for??" Regards, Eliezer On 09/19/2013 09:48 PM, Peter Belau wrote: > > > Hi, > > I'm trying to add a configuration derive to Squid by modifying cf.data.pre > My addition looks like

Re: [squid-users] Re: Squid + DansGuardian + Bridging

2013-09-19 Thread Eliezer Croitoru
On 09/19/2013 08:35 PM, psd17j-jacob wrote: > All VLANs are > public routable IPs except for two Where is this bridge sitting in the network level? please share your situation in more details. Once we can know more we can suggest more. you have only wrote about a specific "case" in hands which doe

Re: [squid-users] Trouble adding a new Squid configuration parameter

2013-09-19 Thread Alex Rousskov
On 09/19/2013 12:48 PM, Peter Belau wrote: > I'm trying to add a configuration derive to Squid by modifying cf.data.pre > My addition looks like this: > > NAME: scrly_internal_ip_address > TYPE: string > LOC: > Config.scrly_internal_ip_address > DEFAULT: none > DOC_START > DOC_END > > > However

[squid-users] Trouble adding a new Squid configuration parameter

2013-09-19 Thread Peter Belau
Hi, I'm trying to add a configuration derive to Squid by modifying cf.data.pre My addition looks like this: NAME: scrly_internal_ip_address TYPE: string LOC: Config.scrly_internal_ip_address DEFAULT: none DOC_START DOC_END However, when I attempt to build Squid I get the following error: In

Re: [squid-users] Squid + DansGuardian + Bridging

2013-09-19 Thread Antony Stone
On Thursday 19 September 2013 at 19:02:26, psd17j-jacob wrote: > Hi all, > > So I am attempting to filter a school's internet connection using DG + > Squid + Bridging for a transparent proxy. Is there any particular reason you've included Bridging in the above setup? It's certainly not needed f

Re: [squid-users] sslbump dynamic certificates for CNAMEs issue

2013-09-19 Thread Jeffrey Walton
On Tue, Sep 17, 2013 at 10:28 PM, Jeffrey Walton wrote: > ... > If your clients are RFC 5280 compliant (such as a web browser), then > here are the guides: > > Baseline: https://www.cabforum.org/Baseline_Requirements_V1_1_6.pdf > Extended Validation: https://www.cabforum.org/Guidelines_v1_4_3.pdf

[squid-users] Squid + DansGuardian + Bridging

2013-09-19 Thread psd17j-jacob
Hi all, So I am attempting to filter a school's internet connection using DG + Squid + Bridging for a transparent proxy. The bridge is up and working as br0.9. Squid is running at 3128 and DG is running at 8080. For IPTables I have the following rules: -A PREROUTING -p tcp -m tcp --dport 3128

[squid-users] Re: Squid + DansGuardian + Bridging

2013-09-19 Thread psd17j-jacob
Hi Antony, Thanks for the reply. So what would be your suggestion in terms of creating a transparent proxy across multiple VLANs without bridging? All VLANs are public routable IPs except for two, one being the publicly available WiFi. The school encourages BYOD so sending out proxy settings via G