AW: [squid-users] Vary object loop

2013-10-14 Thread Grooz, Marc (regio iT)
Thanks, so nothing to worry about. Kind regards Marc -Ursprüngliche Nachricht- Von: Amos Jeffries [mailto:squ...@treenet.co.nz] Gesendet: Dienstag, 15. Oktober 2013 04:03 An: squid-users@squid-cache.org Betreff: Re: [squid-users] Vary object loop On 15/10/2013 1:08 a.m., Grooz, Marc (re

[squid-users] Squid Reverse Proxy Superset / Subset server scenario

2013-10-14 Thread zipped
I've searched a bit and couldn't find the answer to my question. Sorry if this has been posed before. I need to setup a reverse proxy as follows. I have a master web server that has the superset of my website/database, server A. I also have another website that would have a subset of my websi

[squid-users] Re: Disable DLS compression in squid reverse proxy on Ubuntu

2013-10-14 Thread PSA4444
Thanks. I have it working now. The flag was wrong, I corrected it to what you posted and compression is disabled. Ubuntu 12.04 Squid 3.3 -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Disable-DLS-compression-in-squid-reverse-proxy-on-Ubuntu-tp4662637p46626

Re: [squid-users] configuring acl for blocking (URLs and IPs/Subnets)

2013-10-14 Thread Amos Jeffries
On 15/10/2013 4:59 p.m., Sachin Gupta wrote: Hi All, I have setup a list of URLs and IPs dumped into a file which need to be blocked. acl is setup as per documentation: ?? However, upon testing, the IPs are not getting blocked. Also there are some subnets in the same file. Those are also no

[squid-users] configuring acl for blocking (URLs and IPs/Subnets)

2013-10-14 Thread Sachin Gupta
Hi All, I have setup a list of URLs and IPs dumped into a file which need to be blocked. acl is setup as per documentation: However, upon testing, the IPs are not getting blocked. Also there are some subnets in the same file. Those are also not getting blocked. Is there a special handling requi

Re: [squid-users] squid acl soap request method

2013-10-14 Thread Amos Jeffries
On 15/10/2013 3:48 p.m., James Shirley wrote: Hi! I'm trying to configure a squid acl to control what soap requests are allowed to a backend web server.. Only I cannot see a configuration parameter directly specific to SOAP (or XML) protocol. Or even a way to integrate the POST message content

[squid-users] squid acl soap request method

2013-10-14 Thread James Shirley
Hi! I'm trying to configure a squid acl to control what soap requests are allowed to a backend web server.. Only I cannot see a configuration parameter directly specific to SOAP (or XML) protocol. Or even a way to integrate the POST message content in a helper application.. I have looked into va

[squid-users] Re: Http works HTTPS gives cert errors. No errors in logs.

2013-10-14 Thread pinkstond
I'm sorry, I'm not familiar with that method as I'm pretty accustom to the cleanliness of a forum. Do I just send an email to somewhere? -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Http-works-HTTPS-gives-cert-errors-No-errors-in-logs-tp4662560p4662644.ht

Re: [squid-users] Vary object loop

2013-10-14 Thread Amos Jeffries
On 15/10/2013 1:08 a.m., Grooz, Marc (regio iT) wrote: Hi, what does that message mean in squid 3.3.9? varyEvaluateMatch: Oops. Not a Vary object on second attempt, 'http://...' 'accept-encoding="identity,gzip,deflate"' clientProcessHit: Vary object loop! Kind regrads Marc Same thing it me

Re: [squid-users] Re: Http works HTTPS gives cert errors. No errors in logs.

2013-10-14 Thread Amos Jeffries
What do you expect to get in response when your messages look like this? On 12/10/2013 4:21 a.m., pinkstond wrote: squid -k parse: On 15/10/2013 6:25 a.m., pinkstond wrote: bump Please send your posts to the squid-users *mailing list* instead of through a web forum pretending to

Re: [squid-users] Strange entries from my log

2013-10-14 Thread Amos Jeffries
On 15/10/2013 1:32 a.m., Ralf Hildebrandt wrote: I'm running 3.4.x with c-icap, and every now and then I'm seeing this in my log: Oct 14 09:06:47 proxy-cvk-1 squid[12081]: internalStart: unknown request:#012GET /squid-internal-static/icons/silk/arrow_up.png HTTP/1.1#015#012Host: c-69-250-37-25

[squid-users] Re: Http works HTTPS gives cert errors. No errors in logs.

2013-10-14 Thread pinkstond
bump -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Http-works-HTTPS-gives-cert-errors-No-errors-in-logs-tp4662560p4662633.html Sent from the Squid - Users mailing list archive at Nabble.com.

Re: [squid-users] url_regex matchint any IP

2013-10-14 Thread Amos Jeffries
On 15/10/2013 6:21 a.m., Alfredo Rezinovsky wrote: El 14/10/13 12:07, Alfredo Rezinovsky escribió: I'm trying acl dotted_ip url_regex -i ^http:\/\/[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\/ to match any ip address hostname. I don't need to be strict, http://999.777.555.333 could match

Re: [squid-users] Disable DLS compression in squid reverse proxy on Ubuntu

2013-10-14 Thread Amos Jeffries
On 15/10/2013 2:19 p.m., PSA wrote: I am trying to disable TLS compression in squid 3.2 running in reverse proxy mode. It's running on Ubuntu 12.04. root@ip-10-0-0-xx:~# openssl s_client -connect localhost:443 ... Compression: zlib compression Expansion: zlib compression Compression: 1

[squid-users] Disable DLS compression in squid reverse proxy on Ubuntu

2013-10-14 Thread PSA4444
I am trying to disable TLS compression in squid 3.2 running in reverse proxy mode. It's running on Ubuntu 12.04. root@ip-10-0-0-xx:~# openssl s_client -connect localhost:443 ... Compression: zlib compression Expansion: zlib compression Compression: 1 (zlib compression) As opposed to: Compres

Re: [squid-users] kerberos annoyances

2013-10-14 Thread Eliezer Croitoru
On 10/14/2013 06:29 PM, Marko Cupać wrote: 2013/10/14 17:23:12 kid1| '/usr/local/etc/squid/errors/sr-latn-rs/ERR_CACHE_ACCESS_DENIED': (2) No such file or directory 2013/10/14 17:23:12 kid1| WARNING: Error Pages Missing Language: sr-latn-rs This is another issue that the ERROR pages do not exis

[squid-users] Re: kerberos annoyances

2013-10-14 Thread Markus Moeller
Hi Marko, Do you use MIT or Heimdal libraries ? Is your proxy fqdn rsbgyucnix05.kappastar.com ? Regards Markus "MarkoCupać" wrote in message news:20131014172926.9e9e75039fff88058383c...@mimar.rs... On Mon, 14 Oct 2013 18:17:30 +0300 Pavel Kazlenka wrote: Squid's kerberos helper has

Re: AW: Re: [squid-users] Proxy server with FQDN and wildcard

2013-10-14 Thread rrr
I implemented your changes and it works fine now The > cache_peer_access WWWdomain allow WWWSN !OWASN !RDSSN solved my problem. Thanks! On 04.10.13 10:23, Amos Jeffries wrote: On 4/10/2013 7:53 p.m., Reto Bachmann wrote: Hi, So here is the main part of my squid.conf acl HTTP proto HTTP acl

Re: [squid-users] url_regex matchint any IP

2013-10-14 Thread Alfredo Rezinovsky
El 14/10/13 12:07, Alfredo Rezinovsky escribió: I'm trying acl dotted_ip url_regex -i ^http:\/\/[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\/ to match any ip address hostname. I don't need to be strict, http://999.777.555.333 could match and I dont care. The problem is that my url_regex

Re: [squid-users] kerberos annoyances

2013-10-14 Thread Marko Cupać
On Mon, 14 Oct 2013 18:17:30 +0300 Pavel Kazlenka wrote: > Squid's kerberos helper has debug mode. Just add '-d' switch to > 'auth_param negotiate program /usr/sbin/squid_kerb_auth' string in > squid.conf file. > Also here are some useful information and tips: > http://wiki.squid-cache.org/Con

Re: [squid-users] kerberos annoyances

2013-10-14 Thread Pavel Kazlenka
Hi Marko, Squid's kerberos helper has debug mode. Just add '-d' switch to 'auth_param negotiate program /usr/sbin/squid_kerb_auth' string in squid.conf file. Also here are some useful information and tips: http://wiki.squid-cache.org/ConfigExamples/Authenticate/Kerberos#Troubleshooting_Tools

[squid-users] kerberos annoyances

2013-10-14 Thread Marko Cupać
I am trying to set up kerberos authentication in the following environment: Kerberos server: Windows 2008 R2 domain controller Proxy OS: FreeBSD 9.2-RELEASE amd64 Squid version: squid-3.3.9 The problem is the fact that kerberos authentication sporadically starts to work (no auth popups, cache log

[squid-users] url_regex matchint any IP

2013-10-14 Thread Alfredo Rezinovsky
I'm trying acl dotted_ip url_regex -i ^http:\/\/[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\/ to match any ip address hostname. I don't need to be strict, http://999.777.555.333 could match and I dont care. The problem is that my url_regex doesn't match ANY ip address.

[squid-users] Strange entries from my log

2013-10-14 Thread Ralf Hildebrandt
I'm running 3.4.x with c-icap, and every now and then I'm seeing this in my log: Oct 14 09:06:47 proxy-cvk-1 squid[12081]: internalStart: unknown request:#012GET /squid-internal-static/icons/silk/arrow_up.png HTTP/1.1#015#012Host: c-69-250-37-253.hsd1.dc.comcast.net#015#012User-Agent: Mozilla/5

[squid-users] Vary object loop

2013-10-14 Thread Grooz, Marc (regio iT)
Hi, what does that message mean in squid 3.3.9? varyEvaluateMatch: Oops. Not a Vary object on second attempt, 'http://...' 'accept-encoding="identity,gzip,deflate"' clientProcessHit: Vary object loop! Kind regrads Marc smime.p7s Description: S/MIME cryptographic signature