[squid-users] Re: acl defined with rep_header used to deny cache is not working

2013-11-14 Thread susu
Hi, I have another question. Does squid support caching decision based on any request header? I am using version 2.7 of squid. Susu -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/acl-defined-with-rep-header-used-to-deny-cache-is-not-working-tp4663267p46633

Re: [squid-users] Android has issue with transparent proxy

2013-11-14 Thread Amos Jeffries
On 15/11/2013 8:19 a.m., WorkingMan wrote: > I have a weird problem. SQUID is configured as a transparent proxy. > client<-->VPN <-> SQUID <--> internet > > squid.conf > cache deny all > forwarded_for on > strip_query_terms off > > cache_effective_user proxy > cache_effective_group proxy > client

Re: [squid-users] Re: Ubuntu Server 13.10. Squid 3.3.8. WARNING: external ACL 'memberof' queue overload

2013-11-14 Thread Eliezer Croitoru
So, A summery: unix_sockets = how helpers communicate with squid instances. And not only that.. All squid instances in SMP communicate using unix_sockets which are inter-kernel sockets to allow any process communicate with any other process. (Found this: /* * Do we have unix sockets? (requ

Re: [squid-users] Re: Ubuntu Server 13.10. Squid 3.3.8. WARNING: external ACL 'memberof' queue overload

2013-11-14 Thread Amos Jeffries
On 2013-11-15 09:12, Eliezer Croitoru wrote: OK, I think I know what you are talking about Amos(hope you slept well). http://bazaar.launchpad.net/~squid/squid/3.4/view/head:/helpers/external_acl/LDAP_group/ext_ldap_group_acl.cc#L577 The above line can cause this specific issue. And since the h

[squid-users] Re: Ubuntu Server 13.10. Squid 3.3.8. WARNING: external ACL 'memberof' queue overload

2013-11-14 Thread Andrey
Hi Elizer, I din't try your script yet... I am busy now with setting up the following set of packages: Squid+dansguardian+calmav+suricata+openswan. I am trying to create something that replace the Forefront TMG (Proxy, Web-cache, antivirus, ids/ips, IPsec s2s VPN) Squid already working with LDAP

Re: [squid-users] Re: Ubuntu Server 13.10. Squid 3.3.8. WARNING: external ACL 'memberof' queue overload

2013-11-14 Thread Eliezer Croitoru
OK, I think I know what you are talking about Amos(hope you slept well). http://bazaar.launchpad.net/~squid/squid/3.4/view/head:/helpers/external_acl/LDAP_group/ext_ldap_group_acl.cc#L577 The above line can cause this specific issue. And since the helper is using the squid sources the debug out

Re: [squid-users] Ubuntu Server 13.10. Squid 3.3.8. WARNING: external ACL 'memberof' queue overload

2013-11-14 Thread Amos Jeffries
On 2013-11-14 20:55, Eliezer Croitoru wrote: On 11/14/2013 03:42 AM, Amos Jeffries wrote: On 2013-11-14 11:29, Eliezer Croitoru wrote: Eliezer, two pieces of information that should get you back on track with understanding this one: 1) The connection between Squid and external_acl_type helper

[squid-users] Android has issue with transparent proxy

2013-11-14 Thread WorkingMan
I have a weird problem. SQUID is configured as a transparent proxy. client<-->VPN <-> SQUID <--> internet squid.conf cache deny all forwarded_for on strip_query_terms off cache_effective_user proxy cache_effective_group proxy client_dst_passthru on host_verify_strict off http_port 3130 intercept

[squid-users] Re: Cannot get basic_ldap_auth to work with AD

2013-11-14 Thread Brig
Hey Peter, Thx for the reply! I tried the command you suggested and I get error: basic_ldap_auth: WARNING, could not bind to binddn 'Invalid credentials' ERR Success If I remove the "-f sAMAccountName=%s" part of the command you sent then I get the error: basic_ldap_auth.cc(739): pid=23194 :at

[squid-users] Re: Ubuntu Server 13.10. Squid 3.3.8. WARNING: external ACL 'memberof' queue overload

2013-11-14 Thread Andrey
I am curious too... -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Ubuntu-Server-13-10-Squid-3-3-8-WARNING-external-ACL-memberof-queue-overload-tp4663243p4663314.html Sent from the Squid - Users mailing list archive at Nabble.com.

[squid-users] Re: Security alert when accessing https request

2013-11-14 Thread ishtiaq
Please Share your Squid.conf .. thanks -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Security-alert-when-accessing-https-request-tp4663311p4663313.html Sent from the Squid - Users mailing list archive at Nabble.com.

[squid-users] Re: Help Required for Squid 3.3.8

2013-11-14 Thread Andrey
According http://wiki.squid-cache.org/KnowledgeBase/DebugSections Try to generate new logs (cache.log) E.g.: debug_options 83,9 70,9 Play with it. And share logs here. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Help-Required-for-Squid-3-3-8-tp4663300

[squid-users] Security alert when accessing https request

2013-11-14 Thread kannan rbk
Dear Team, We are using squid proxy (3.3) , in our organisation for restricting our org members to access only particular urls for both http and https. For https requests , we intercepted requests by ssl-bump. It's working fine but we are getting below security alert in all browsers. Can you pleas

Re: [squid-users] Re: acl defined with rep_header used to deny cache is not working

2013-11-14 Thread Amos Jeffries
On 14/11/2013 1:13 a.m., susu wrote: > I am posting the headers of three request and responses. Last request starts > video streaming, Pragma: xPlayStrm=1 asks the server to start video > streaming. Thank you. These look like they should be working without problems, even if a cache is present. Th

Re: [squid-users] squid 3.3.9 and complains for some in error-details.txt (X509_V_ERR_SUBTREE_MINMAX or similar)

2013-11-14 Thread Josef Karliak
Hi, thanks for answers, I found similar answers in the internet. All was about SSL support while building squid. I'll look for 3.3.10. Thanks and best regards Josef Karliak. Cituji Amos Jeffries : On 2013-11-14 02:21, Eliezer Croitoru wrote: On 11/13/2013 02:27 PM, Josef Karliak wro

Re: [squid-users] squid 3.3.9 and complains for some in error-details.txt (X509_V_ERR_SUBTREE_MINMAX or similar)

2013-11-14 Thread Amos Jeffries
On 14/11/2013 9:47 a.m., Eliezer Croitoru wrote: > On 11/13/2013 10:30 PM, Amos Jeffries wrote: >> On 2013-11-14 02:21, Eliezer Croitoru wrote: >>> On 11/13/2013 02:27 PM, Josef Karliak wrote: Good morning, what are the following complains (warnings) ?>> Nov 13 13:16:21 kostold

[squid-users] Re: Help Required for Squid 3.3.8

2013-11-14 Thread ishtiaq
please help me.. ! guide me to sort out my issue -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Help-Required-for-Squid-3-3-8-tp4663300p4663303.html Sent from the Squid - Users mailing list archive at Nabble.com.

Re: [squid-users] large rock question

2013-11-14 Thread Alex Rousskov
On 11/14/2013 12:43 AM, Ayham Abou Afach wrote: > but in this way how can i set slot size . is it fixed ??? Please see cache_dir rock slot-size option in squid.conf.documented. Alex. > On 11/14/2013 12:55 AM, Alex Rousskov wrote: >> On 11/13/2013 05:24 AM, Ayham Abou Afach wrote: >>> Hi Alex

[squid-users] Re: (smp-rock )store rebuilding take too much time while squid has started !!

2013-11-14 Thread Dr.x
Alex Rousskov wrote > On 11/13/2013 02:04 AM, Dr.x wrote: >> hi , >> when i restart squid >> ihave >> Store rebuilding is 0.94% complete >> >> note that although im getting small storage to squid (10 G) it takes alot >> of >> time to rebuild !!! >> >> also , im disableing wccp rebuild during sta

Re: [squid-users] large rock question

2013-11-14 Thread Ayham Abou Afach
Hi Alex Thanks but in this way how can i set slot size . is it fixed ??? best regards On 11/14/2013 12:55 AM, Alex Rousskov wrote: On 11/13/2013 05:24 AM, Ayham Abou Afach wrote: Hi Alex I am trying squid 3.head to try large rock support . Large rock is not available in 3.head (a.k.a., Squi

Re: [squid-users] Ubuntu Server 13.10. Squid 3.3.8. WARNING: external ACL 'memberof' queue overload

2013-11-14 Thread Eliezer Croitoru
On 11/14/2013 03:42 AM, Amos Jeffries wrote: On 2013-11-14 11:29, Eliezer Croitoru wrote: Eliezer, two pieces of information that should get you back on track with understanding this one: 1) The connection between Squid and external_acl_type helpers uses TCP. In a specific port or in a manner

Re: [squid-users] Cannot get basic_ldap_auth to work with AD

2013-11-14 Thread Peter Benko
On Wed, Nov 13, 2013 at 08:24:56AM -0800, Brig wrote: > Trying to get Squid to use our AD server to authenticate users with LDAP. I > cannot get the basic_ldap_auth helper to work. I keep getting error: > > ERR Success > > > I am able to bind to the AD server and query ldap though using "ldapsea