Re: AW: [squid-users] Squid 3.3.8 NTLM problems

2014-06-16 Thread Amos Jeffries
On 17/06/2014 5:45 p.m., Manfred Mayer IT wrote: > Hello, > > thanks for your suggestions on the config, I changed the lines as you > proposed. But I'm still having the issue with the multiple popups at first > logon with IE. Do you have any idea to this? > > Thanks and regards > Mana It is w

AW: [squid-users] Squid 3.3.8 NTLM problems

2014-06-16 Thread Manfred Mayer IT
Hello, thanks for your suggestions on the config, I changed the lines as you proposed. But I'm still having the issue with the multiple popups at first logon with IE. Do you have any idea to this? Thanks and regards Mana -Ursprüngliche Nachricht- Von: Amos Jeffries [mailto:squ...@treen

Re: [squid-users] Issues with ssl-bump in 3.HEAD

2014-06-16 Thread Amos Jeffries
On 17/06/2014 10:30 a.m., Mike wrote: > Running into another issue, not sure whats going on here. > > ALL HTTPS connections are being denied. Temporarily, selinux is disabled > and firewall is off. We have it working on 2 other servers with same OS, > same kernel, same settings but it is just this

[squid-users] Re: WARNING! Your cache is running out of filedescriptors

2014-06-16 Thread MrErr
Hi Eliezer Here is what network looks like internet == Router/gateway/squid machine === client machines The output from my ifconfig is lo: flags=73 mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 loop txqueuelen 0 (Local Loopback) RX packets 2068317 bytes 928114310 (885.

Re: [squid-users] Issues with ssl-bump in 3.HEAD

2014-06-16 Thread Eliezer Croitoru
It can be one of couple: Origin server is denying the request with a 403(should be showed with a TCP_MISS) Squid is obeying rules that you are not aware about Squid was not shutdown correctly before startup\restart Others such as bugs etc.. (In the next squid release I will write about *why* com

Re: [squid-users] Issues with ssl-bump in 3.HEAD

2014-06-16 Thread Mike
Running into another issue, not sure whats going on here. ALL HTTPS connections are being denied. Temporarily, selinux is disabled and firewall is off. We have it working on 2 other servers with same OS, same kernel, same settings but it is just this one that refuses to allow connections to HT

Re: [squid-users] Re: WARNING! Your cache is running out of filedescriptors

2014-06-16 Thread Eliezer Croitoru
On 06/16/2014 04:11 PM, MrErr wrote: Yes this is a gateway machine. Here is my long iptables. Thanks for helping. OK and what "ifconfig"\"ip addr" + "ip link" output? It will clarify the issue a bit more then it is now. I still do not know the network structure and this is the missing piece in

Re: [squid-users] Fwd: gmail.com certificate name mismatch

2014-06-16 Thread Douglas Davenport
Thank you, this is very helpful information. I will look into these options. I know this question will make some people cringe, but the following crazy thought has been bothering me: Instead of generating a spoofed cert for every domain, why can't squid serve out one wildcard cert for each root do

Re: [squid-users] Fwd: gmail.com certificate name mismatch

2014-06-16 Thread Alex Rousskov
On 06/15/2014 12:31 PM, Douglas Davenport wrote: > Interesting, I thought bump server first solved this type of problem. In server-first bumping, Squid just mimics whatever certificate the server responds with. If the server responds with the "wrong" certificate, Squid mimics that. > I wonder h

[squid-users] Re: WARNING! Your cache is running out of filedescriptors

2014-06-16 Thread MrErr
Yes this is a gateway machine. Here is my long iptables. Thanks for helping. # Generated by iptables-save v1.4.19.1 on Mon Jun 16 08:10:44 2014 *nat :PREROUTING ACCEPT [155329:13831056] :INPUT ACCEPT [163339:10275649] :OUTPUT ACCEPT [168487:10350058] :POSTROUTING ACCEPT [544:45054] :OUTPUT_direct

Re: AW: [squid-users] MAPI over HTTP

2014-06-16 Thread Eliezer Croitoru
On 06/16/2014 01:54 PM, Martin Fuchs wrote: I also think it should work out oft he box, but somehow it does not:-( We're using Squid Cache: Version 3.1.22 and the line in the config reads https_port xxx.xxx.xxx.xxx:443 accel cert=/usr/pbi/squid-i386/etc/squid/536a261023779.crt key=/usr/pbi/squid

AW: [squid-users] MAPI over HTTP

2014-06-16 Thread Martin Fuchs
On 16/06/2014 2:36 a.m., Martin Fuchs wrote: >> Hi ! >> Does anyone have experience with MAPI over HTTP used in Microsoft exchange server 2013 SP1 in conjunction with squid (as a reverse proxy) ? >> Somehow it seems that it does not work with auth = PASS. >> If anyone got it working, please let me