[squid-users] squid listen on UDP for * or 0.0.0.0

2022-12-12 Thread Ahmad Alzaeem
Hello Folks , Wondering why I see squid listening on UDP sockets. And how can I disable that behavior? Here is a sample capture : ss -lup NCONN 00 *:62408 *:*

[squid-users] force squid to kill current connection after reconfigure

2022-08-08 Thread Ahmad Alzaeem
Hello Team , Sometimes we need to change the tcp_outgoing addresses acl . We edit it and reconfigure squid , but the current connection still work on the old ips of tcp_outgoing until the browser is completely closed and reopened . Is there a way we can kill old sessions/connections in the old

Re: [squid-users] squid 3.x on Centos8 not working

2022-07-11 Thread Ahmad Alzaeem
delay pools That’s the summary. From: squid-users on behalf of ngtech1...@gmail.com Date: Monday, July 11, 2022 at 1:55 PM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] squid 3.x on Centos8 not working Hey Ahmad, I really don’t know what to say. I am not using delay pools

Re: [squid-users] squid 3.x on Centos8 not working

2022-07-11 Thread Ahmad Alzaeem
on Centos8 not working Hey Ahmad, What is preventing you from using 4.x or 5.x? Eliezer Eliezer Croitoru NgTech, Tech Support Mobile: +972-5-28704261 Email: ngtech1...@gmail.com<mailto:ngtech1...@gmail.com> Web: https://ngtech.co.il/ My-Tube: https://tube.ngtech.co.il/ From: squid

Re: [squid-users] squid 3.x on Centos8 not working

2022-07-11 Thread Ahmad Alzaeem
b:0x21cbfbb Thanks From: squid-users on behalf of Alex Rousskov Date: Monday, July 11, 2022 at 10:20 AM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] squid 3.x on Centos8 not working On 7/11/22 09:38, Ahmad Alzaeem wrote: > Anyone in the Dev team to help me out? In most ca

Re: [squid-users] squid 3.x on Centos8 not working

2022-07-11 Thread Ahmad Alzaeem
Hello Folks , Anyone in the Dev team to help me out? Thanks From: Ahmad Alzaeem <0xf...@gmail.com> Date: Tuesday, June 28, 2022 at 6:28 AM To: squid-users@lists.squid-cache.org Subject: squid 3.x on Centos8 not working Hello Folks , Trying to compile squid 3.x on Centos8 but have an

[squid-users] squid 3.x on Centos8 not working

2022-06-28 Thread Ahmad Alzaeem
Hello Folks , Trying to compile squid 3.x on Centos8 but have an errors below seems in SMBLIB . Squid ver : squid-3.5.28 GCC ver : gcc -v Using built-in specs. COLLECT_GCC=gcc COLLECT_LTO_WRAPPER=/usr/libexec/gcc/x86_64-redhat-linux/8/lto-wrapper OFFLOAD_TARGET_NAMES=nvptx-none

Re: [squid-users] is there any squid 4.x version has delay_pools working?

2022-06-28 Thread Ahmad Alzaeem
-users] is there any squid 4.x version has delay_pools working? On 3/5/22 13:43, Ahmad Alzaeem wrote: > Hello , > > No SSL Pump . > we use CONNECTmethod. > squid accepts the directive, but it has no real affect. > > the same config on 3.x worked fine. > > Im sure 100 %

Re: [squid-users] is there a way to tell squid to write external ip even that external ip not attached into the machine ?

2022-05-13 Thread Ahmad Alzaeem
to write external ip even that external ip not attached into the machine ? Hey Ahmad, You should use a tproxy port with a PROXY protocol support and acls. With these you can try to push traffic to the network from a local process that will write the right details to squid that will generate

[squid-users] is there a way to tell squid to write external ip even that external ip not attached into the machine ?

2022-05-13 Thread Ahmad Alzaeem
Hello Guys , We are testing squid with a project such as we need squid to write and proceed with tcp_outgoing address address even its not attached to the machine by ifconfig or ip add ? After some tests we found that squid wont write the external Ip to be pushed out the network card

Re: [squid-users] squid3/4 compilation error with Centos8/RH8

2022-05-02 Thread Ahmad Alzaeem
<mailto:ngtech1...@gmail.com> From: squid-users On Behalf Of Ahmad Alzaeem Sent: Monday, May 2, 2022 21:25 To: squid-users@lists.squid-cache.org Subject: [squid-users] squid3/4 compilation error with Centos8/RH8 Hello Team , I found I only was able to build squid 5.x on Centos8/RH8 – (No

[squid-users] squid3/4 compilation error with Centos8/RH8

2022-05-02 Thread Ahmad Alzaeem
Hello Team , I found I only was able to build squid 5.x on Centos8/RH8 – (Not able to build 3.x or 4.x ) I was able to build squid 3.x and 4.x on RH7/Centos7 . It seems Its libssl error or so based on compilation error below (not sure if need to upgrade or downgrade GCC) //

Re: [squid-users] squid5 Happy Eyeballs - Is it possible to enable IPV4 only or IPV6 only ?

2022-05-02 Thread Ahmad Alzaeem
Hello Alex , Thanks for the nice info . I will consider what you said . Thanks From: Alex Rousskov Date: Monday, May 2, 2022 at 8:38 AM To: Ahmad Alzaeem <0xf...@gmail.com>, Squid Users Subject: Re: [squid-users] squid5 Happy Eyeballs - Is it possible to enable IPV4 only or IPV

[squid-users] squid5 Happy Eyeballs - Is it possible to enable IPV4 only or IPV6 only ?

2022-05-01 Thread Ahmad Alzaeem
Hello Team , Testing squid5.x . Still have a question in a case of running multiple instances (IPV4/IPV6) on same machine . Such as • One instance that run as IPV4 only while other instance run as IPV6 only . I found that squid5.x is ignoring dns_v4_first . And based on the algorithm and how

Re: [squid-users] Squid 3-5 CPU optimization and best practise .

2022-04-06 Thread Ahmad Alzaeem
Hello Amos , Config file is based on IP auth and user/pass auth . But I want to minimize the CPU hit of my config file as much as possible . Version : Squid 5.3 ### squid.conf acl

Re: [squid-users] Squid 3-5 CPU optimization and best practise .

2022-03-31 Thread Ahmad Alzaeem
: squid-users on behalf of Alex Rousskov Date: Thursday, March 31, 2022 at 8:59 AM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Squid 3-5 CPU optimization and best practise . On 3/31/22 11:04, Ahmad Alzaeem wrote: > My main question is , is there any major changes in squi

[squid-users] Squid 3-5 CPU optimization and best practise .

2022-03-31 Thread Ahmad Alzaeem
Hello Team , I’m just making a research about the major changes in squid in terms of fast response and Low CPU compensation but I have not found more info on Wiki or what’s new . https://wiki.squid-cache.org/Squid-5 The main usage is proxy with no ssl pump . My main question is , is there any

Re: [squid-users] is there any squid 4.x version has delay_pools working?

2022-03-05 Thread Ahmad Alzaeem
Hello , No SSL Pump . we use CONNECTmethod. squid accepts the directive, but it has no real affect. the same config on 3.x worked fine. Im sure 100 % , none of squid 4.x worked with delay pools with me. Thanks > On Feb 24, 2022, at 11:58 PM, Eliezer Croitoru wrote: > >

[squid-users] is there any squid 4.x version has delay_pools working?

2022-02-24 Thread Ahmad Alzaeem
I tried many squid 4.x versions and none of them has delay_pools to work . I have it to work on 3.x versions . is there any specific 4.x version that ws tested with delay pools to work ? i would like to report it as bug at least in squid-4.17

Re: [squid-users] Squid marking QOS and matching marks with linux iptables problem !

2020-05-25 Thread Ahmad Alzaeem
mark 0 and mark 1 , Dont see any 0xd7 or so . Thanks > On May 25, 2020, at 10:02 AM, Amos Jeffries wrote: > > [NP: it would help if you replied through the list instead of directly > to me, even as a CC. Your messages keep getting diverted to spam folder. ] > > On 25/05/20 4:26

Re: [squid-users] Squid marking QOS and matching marks with linux iptables problem !

2020-05-24 Thread Ahmad Alzaeem
> On May 21, 2020, at 3:03 AM, Ahmad Alzaeem <0xf...@gmail.com> wrote: > > -A OUTPUT -m mark --mark 0xd7 -j ACCEPT > -A OUTPUT -m connmark --mark 0xd4 -j ACCEPT ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-

Re: [squid-users] Squid marking QOS and matching marks with linux iptables problem !

2020-05-23 Thread Ahmad Alzaeem
S? > > Sent from Mail <https://go.microsoft.com/fwlink/?LinkId=550986> for Windows 10 > > From: Ahmad Alzaeem <mailto:0xf...@gmail.com> > Sent: Saturday, May 23, 2020 11:40 PM > To: Squid Users <mailto:squid-users@lists.squid-cache.org> > Subject: Re: [squid-us

Re: [squid-users] Squid marking QOS and matching marks with linux iptables problem !

2020-05-23 Thread Ahmad Alzaeem
Hello Folks , any one in the mailing list can help me on the case ? Thanks > On May 21, 2020, at 3:03 AM, Ahmad Alzaeem <0xf...@gmail.com> wrote: > > Hello Folks , > > Im trying to mark outgoing squid request based on Mark linux matching . > > I added to squid

[squid-users] Squid marking QOS and matching marks with linux iptables problem !

2020-05-20 Thread Ahmad Alzaeem
Hello Folks , Im trying to mark outgoing squid request based on Mark linux matching . I added to squid conf : qos_flows mark local-hit=0xd7 qos_flows mark local-miss=0xd7 -A OUTPUT -m mark --mark 0xd7 -j ACCEPT But on iptables there is no match with the mark 0xd7 Im testing marking with

Re: [squid-users] Squid with QOS marking

2020-05-19 Thread Ahmad Alzaeem
Following : https://wiki.squid-cache.org/Features/QualityOfService <https://wiki.squid-cache.org/Features/QualityOfService> Based on it we need kernel patch for TOS , but I dont need TOS , I just need Layer 3 DSP , Linux mark rule based . Thanks > On May 20, 2020, at 1:19

[squid-users] Squid with QOS marking

2020-05-19 Thread Ahmad Alzaeem
Hello Folks , Im trying to mark outgoing squid request based on Mark linux matching . I added to squid conf : qos_flows mark local-hit=0xd7 qos_flows mark local-miss=0xd7 -A OUTPUT -m mark --mark 0xd7 -j ACCEPT But on iptables there is no match with the mark d7 Im testing marking with

Re: [squid-users] Is there an option to completely disable IPV4 outgoing address for Squid

2020-02-19 Thread Ahmad Alzaeem
? Many Thanks . > On Feb 20, 2020, at 7:31 AM, Amos Jeffries wrote: > > On 20/02/20 3:41 am, Ahmad Alzaeem wrote: >> We just need IPV4-IPV6 conversation system to for an ISP that has ran out of >> ipv4 . >> So we need to minimize IPV4 usage with them . >> &g

Re: [squid-users] Is there an option to completely disable IPV4 outgoing address for Squid

2020-02-19 Thread Ahmad Alzaeem
We just need IPV4-IPV6 conversation system to for an ISP that has ran out of ipv4 . So we need to minimize IPV4 usage with them . Thanks > On Feb 19, 2020, at 5:33 PM, Alex Rousskov > wrote: > > On 2/19/20 8:47 AM, Ahmad Alzaeem wrote: > >> Is there an option

[squid-users] Is there an option to completely disable IPV4 outgoing address for Squid

2020-02-19 Thread Ahmad Alzaeem
Say we want to have Testing IPV4-IPV6 access for An ISP . We want to access squid over IPV4 , DNS server ip on squid is 8.8.8.8 But we want dns queries only solved with IPV6 address so that squid don’t pickup any ipv4 destination for website . I tried dns_v4_1st directive to be off but I had

[squid-users] How to match website subdomains and all others root domains

2020-02-14 Thread Ahmad Alzaeem
Hello folks , How can I match all subdomains of google and all roots urls of google such as google.com google.co.uk Google.eu google.us With an all ? ___ squid-users mailing list

[squid-users] TCP incoming requests Traffic Normalization

2020-01-13 Thread Ahmad Alzaeem
Hello Folks . I have about 10x sources or different ip addresses and sending requests to squid . imagine we have 10 servers and sending burst in sometimes due to nature of Traffic ….i have a sensitive APP on squid that must be equalized to handle only 50 req/sec . “ No more “ i just want

[squid-users] squid log responce time %6tr or %tr ?

2019-12-22 Thread Ahmad Alzaeem
Hello Team , based on wiki : http://www.squid-cache.org/Doc/config/logformat/ tr is responce time , but im confused on why default response time configured as %6tr not %tr # logformat squid %ts.%03tu %6tr %>a %Ss/%03>Hs

Re: [squid-users] Is Squid 4.9 gone?

2019-12-20 Thread Ahmad Alzaeem
Perfect Amos  Sent from my iPhone > On Dec 20, 2019, at 11:35 AM, Amos Jeffries wrote: > > On 20/12/19 9:03 pm, netadmin wrote: >> >> At the address: >> http://www.squid-cache.org/Versions/ >> the latest version appears as 4.8 although I am running 4.9! >> What happened to version 4.9? > >

Re: [squid-users] debug headers between squid --> website

2019-12-02 Thread --Ahmad--
Hi Alex , Thank you for your precious info . You Said “” Yes, you can. Squid logs CONNECT headers and also HTTP headers of incoming and outgoing decrypted HTTPS requests. Squid does not see (and cannot log) HTTP headers of encrypted traffic inside CONNECT tunnels that are not bumped using the

Re: [squid-users] debug headers between squid --> website

2019-12-02 Thread Ahmad Alzaeem
Can I do same thing for https ? Thanks Sent from my iPhone > On Dec 2, 2019, at 10:03 PM, Alex Rousskov > wrote: > > On 12/2/19 1:31 PM, Ahmad Alzaeem wrote: > >> Is it possible to run it from squid ? > > Packet catpure is usually better, especially for plain

Re: [squid-users] debug headers between squid --> website

2019-12-02 Thread Ahmad Alzaeem
Thank you for that . Is it possible to run it from squid ? Thanks Sent from my iPhone > On Dec 2, 2019, at 8:58 PM, Antony Stone > wrote: > > On Monday 02 December 2019 at 18:34:31, Ahmad Alzaeem wrote: > >> Hello Tem , >> >> How can i debug Headers

[squid-users] debug headers between squid --> website

2019-12-02 Thread Ahmad Alzaeem
Hello Tem , How can i debug Headers that is between squid——> website request made say we have this simple topology pc ——squid —— website —> As an example if i run curl some website from my device connecting to squid proxy . $ curl -x x.x.8.187:xx433 -U abc:abc ifconfig.io/ip -vv *

Re: [squid-users] limit new req/sec on squid to X per sec

2019-11-27 Thread --Ahmad--
place for that . Thanks a lot ! > On Nov 27, 2019, at 3:20 PM, Amos Jeffries wrote: > > On 28/11/19 1:03 am, --Ahmad-- wrote: >> Hello Amos , Thank you for your response . >> >> we have an APP behind squid http APP that will crash if # of (req/sec ) >> exc

[squid-users] Testing

2019-11-27 Thread Ahmad Alzaeem
Testing 123 . ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] limit new req/sec on squid to X per sec

2019-11-27 Thread --Ahmad--
it from squid level . so you can imagine http req/sec or tcp req/sec same here as squid is being used only on http protocol . Let me know your thoughts . Thanks > On Nov 27, 2019, at 2:57 PM, Amos Jeffries wrote: > > On 27/11/19 6:31 pm, --Ahmad-- wrote: >> Hello Folks

[squid-users] limit new req/sec on squid to X per sec

2019-11-26 Thread --Ahmad--
Hello Folks , im looking for limiting TCP req/sec on squid to X speed . say i have an instance running . i want to limit it to 100 req/sec for “new connections “ not just for concurrent connections . so if connection is old or “ established “ its out of the game . if the connection is new

[squid-users] Squid Send to Cache Peer based on Header Access if not matched .

2019-11-26 Thread --Ahmad--
Hello Floks , i have squid ACL/TCP Outgoing based on incoming header . as an example below : acl requestheader5000 req_header X-Proxy 1.2.3.4 acl requestheader5001 req_header X-Proxy 1.2.3.5 acl requestheader5002 req_header X-Proxy 1.2.3.6 acl requestheader5003 req_header X-Proxy 1.2.3.7

Re: [squid-users] squid with Java Problem - Idrac 6 Hp servers

2019-11-13 Thread --Ahmad--
ava.util.concurrent.FutureTask.run(FutureTask.java:266) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:748) > On

Re: [squid-users] squid with Java Problem - Idrac 6 Hp servers

2019-11-13 Thread --Ahmad--
Hi , i have HP server which access it over IDRAC https and need java support . i have proxy in same lan . proxy ip is 10.0.0.200 ip of Idrac is 10.0.0.70 i can’t access Console of Idrac using squid , that’d what i need to do . i need to be ale to access server Console “ which need java” too

[squid-users] squid with Java Problem - Idrac 6 Hp servers

2019-11-10 Thread --Ahmad--
Hello Folks , i have a severs who run java and we need to access it from IDRAC console . squid is 4.8 not able to get it work . always i have error of java prompt , Unable to launch application . if i use without proxy it work , if i use with squid it don’t work . tried to add the directive

Re: [squid-users] Delay pools not working with squid 4.x , and more Question !!

2019-09-22 Thread --Ahmad--
to hearing that bug fixed . Thanks a lot . > On Sep 22, 2019, at 5:07 PM, Alex Rousskov > wrote: > > On 9/22/19 6:25 AM, --Ahmad-- wrote: > >> i tested squid 4.8 and delay pools not working with it at all . >> i reverted back to squid 3.5.x and i had delay pools wor

Re: [squid-users] Delay pools not working with squid 4.x , and more Question !!

2019-09-22 Thread --Ahmad--
22, 2019, at 1:46 PM, Amos Jeffries wrote: > > On 22/09/19 10:25 pm, --Ahmad-- wrote: >> Hello Folks , >> >> i tested squid 4.8 and delay pools not working with it at all . >> i reverted back to squid 3.5.x and i had delay pools working . >> >> Q1-

[squid-users] Delay pools not working with squid 4.x , and more Question !!

2019-09-22 Thread --Ahmad--
Hello Folks , i tested squid 4.8 and delay pools not working with it at all . i reverted back to squid 3.5.x and i had delay pools working . Q1- do squid 4 support delay pools ? Q2- with squid 3.5.x we have SMP about 4 childs , and we are running delay pools . say i limited in the main

Re: [squid-users] squid email using curl/smtp using squid

2019-09-08 Thread --Ahmad--
? > On 7 Sep 2019, at 23:24, --Ahmad-- wrote: > > Hello Team > > i enabled port port in squid for mailing in squid ssl ports 587. > > > > curl --url 'smtp://smtp.gmail.com:587' --ssl-reqd --mail-from > '@gcom' --mail-rcpt 'y...@gmail.com' --

[squid-users] squid email using curl/smtp using squid

2019-09-07 Thread --Ahmad--
Hello Team i enabled port port in squid for mailing in squid ssl ports 587. curl --url 'smtp://smtp.gmail.com:587' --ssl-reqd --mail-from '@gcom' --mail-rcpt 'y...@gmail.com' --upload-file mail.txt --user '...@gmail.com:mm' --insecure -x 5.5.152.44:32000 -U

Re: [squid-users] cache peer , force peer to use dns ipv4 not ipv6

2019-09-03 Thread --Ahmad--
Hello Team , thank you for replies . http_port 10.61.8.189:1 name=1 acl 1 myportname 1 never_direct allow 1 cache_peer 192.247.37.193 parent 12847 0 no-query round-robin no-digest no-tproxy proxy-only name=peer1 cache_peer_access

[squid-users] cache peer , force peer to use dns ipv4 not ipv6

2019-09-02 Thread --Ahmad--
Hello Team , just wondering . using cache peer to FWD request to upstream squid . the problem is sometimes the Upstream go to destination over ipv6 . is there an option can be used to force the peer to use ipv4 dns ? agian , we dont have an access to upstream upstream , just wondering can we

Re: [squid-users] outgoing address for DNS queries per instance

2019-08-05 Thread --Ahmad--
Nice ! Thanks Amos ! > On 5 Aug 2019, at 12:57, Amos Jeffries wrote: > > On 5/08/19 9:33 pm, --Ahmad-- wrote: >> Hello folks >> i have 3 squid instances and i want to have different external ip for each >> squid instance . >> >> i believed acls of ds

[squid-users] outgoing address for DNS queries per instance

2019-08-05 Thread --Ahmad--
Hello folks i have 3 squid instances and i want to have different external ip for each squid instance . i believed acls of dst ip of dns should work . but i even tested it didnt with the outgoing address . dns_nameservers 8.8.8.8 acl next dst 8.8.8.8 tcp_outgoing_address 100.100.100.100 next

Re: [squid-users] logformat for squid5 ?

2019-08-01 Thread --Ahmad--
/%03Hs %> % On 1 Aug 2019, at 16:55, Alex Rousskov > wrote: > > On 8/1/19 9:23 AM, --Ahmad-- wrote: >> i use : >> logformat squid %tl %6tr %>a %>p %>la %>lp %Ss/%03Hs %> %> >> in squid 3.x and its working fine , but in 5.x it dont work as i want > &g

Re: [squid-users] logformat for squid5 ?

2019-08-01 Thread --Ahmad--
i use : logformat squid %tl %6tr %>a %>p %>la %>lp %Ss/%03Hs % On 1 Aug 2019, at 15:55, --Ahmad-- wrote: > > Hello folks > > any news for logformat directive for squid 5.x ? > or any alternative thing to it ? > ___ >

[squid-users] logformat for squid5 ?

2019-08-01 Thread --Ahmad--
Hello folks any news for logformat directive for squid 5.x ? or any alternative thing to it ? ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] dns_v4_first off for squid Squid Cache: Version 5.0.0-20190715-rd3527ec67

2019-07-29 Thread --Ahmad--
Hello Folks . i have a problem with IPV6 when i moved to squid Squid Cache: Version 5.0.0-20190715-rd3527ec67. in squid 3.5 when i put : dns_v4_first off i have all resolution of domains for ipv6 as 1st priority then ipv4 . but … when i have squid 5.x.x seems this directive not effective bec

[squid-users] error:transaction-end-before-headers on squid 5.x

2019-07-23 Thread --Ahmad--
Hello folks . recently i moved to squid 5 to get some features . but i have new errors such as : error:transaction-end-before-headers in access log file . is it related to bug ? Thanks ___ squid-users mailing list

[squid-users] squid external address to be sequential from list of addresses

2019-07-20 Thread --Ahmad--
Hello Folks , wondering …. i need squid to have sequential outgoing addresses over specified list . say i want an ip:port for that connection . and have pool of 10 address . is it possible with squid to match 1st ip as external for 1st request . 2nd ip for 2nd request . 3rd ip for 3rd request

Re: [squid-users] Possible to user reply_header_add directive with acl random access list ?

2019-07-19 Thread --Ahmad--
Alex you have been helpful a-lot . i would appreciate your help & Amos for what you provided . Thanks for your kind support . you have simplified all what i need . Kind regards > On 19 Jul 2019, at 23:03, Alex Rousskov > wrote: > > reply_header_add Start

Re: [squid-users] Possible to user reply_header_add directive with acl random access list ?

2019-07-19 Thread --Ahmad--
header” should be c if external was ip4 , then “start header” should be d and so on . Thanks and again Guys you have been much helpful . Thanks > On 19 Jul 2019, at 16:08, Alex Rousskov > wrote: > > On 7/19/19 8:53 AM, --Ahmad-- wrote: > >> is there any way can

Re: [squid-users] Possible to user reply_header_add directive with acl random access list ?

2019-07-19 Thread --Ahmad--
Hi Guys , Thank you a lot for your cooperation . is there any way can i let header acl stop on the 1st MATCH ? do you have any other thing can we do to achieve what im looking for based on my config below ? Thanks > On 19 Jul 2019, at 13:04, Amos Jeffries wrote: > > To make the IP

Re: [squid-users] Possible to user reply_header_add directive with acl random access list ?

2019-07-19 Thread --Ahmad--
Hi Alex . Strange: Your outgoing address decisions appear to be random, completely independent from your Start values. Is that what you want? yes , it suppose to have header as i configured the acls . > 12.13.200.13 --->D > 12.13.200.12 >C > 12.13.200.14 ——>E Not > 12.13.200.13 -->

Re: [squid-users] Possible to user reply_header_add directive with acl random access list ?

2019-07-18 Thread --Ahmad--
.13.200.13 --> B 12.13.200.14 --> a 12.13.200.12 ---> E And those are wrong …. above are wrong reply values , the correct should be as below based on the Acls we configured . 12.13.200.13 --->D 12.13.200.12 >C 12.13.200.14 >E i hope its clear now :) Thanks

Re: [squid-users] Possible to user reply_header_add directive with acl random access list ?

2019-07-18 Thread --Ahmad--
Any recommendation alex ? im sure 100 % i have made same as you asked but still i get wrong results . i can see 1 result , but its wrong . Thanks > On 17 Jul 2019, at 18:36, Alex Rousskov > wrote: > > On 7/17/19 10:40 AM, --Ahmad-- wrote: > >> 2019/07/17 09:21:4

Re: [squid-users] Possible to user reply_header_add directive with acl random access list ?

2019-07-17 Thread --Ahmad--
019, at 18:36, Alex Rousskov > wrote: > > On 7/17/19 10:40 AM, --Ahmad-- wrote: > >> 2019/07/17 09:21:42| FATAL: Invalid ACL type ‘annotate_client' > >> do i need to recompile squid to enable this kind of ACLS ? > > These ACLs are only supported in the development v

Re: [squid-users] Possible to user reply_header_add directive with acl random access list ?

2019-07-17 Thread --Ahmad--
Thanks Alex , i tried your acl not recognised ! 2019/07/17 09:21:42| FATAL: Invalid ACL type ‘annotate_client' do i need to recompile squid to enable this kind of ACLS ? > On 17 Jul 2019, at 16:05, Alex Rousskov > wrote: > > markProcessed ___

Re: [squid-users] Possible to user reply_header_add directive with acl random access list ?

2019-07-17 Thread --Ahmad--
1/3 acl half10008 random 1/2 acl half10009 random 1/1 as you see above the ACLS above should be matching single values not multiple values . and when i get multiple headers replies it doesnt satisfying my needs . what do you think amos ? Thanks agian > On 17 Jul 2019, at 14:42, Amos Jef

Re: [squid-users] Possible to user reply_header_add directive with acl random access list ?

2019-07-17 Thread --Ahmad--
. and the replied header even are wrong . so wrong multiple results i do recieve . my questions is : 1- why mutiple replies do we recieve not single reply ? 2- why the recieved replies are wrong , i expect single reply based on my random acls we setup . ? do we need other stuff with random ac

[squid-users] Possible to user reply_header_add directive with acl random access list ?

2019-07-16 Thread --Ahmad--
Hello folks , want to ask . Possible to user reply_header_add directive with acl random access list ? i read that reply_header_add only need fast acl and im not sure if random acl is fast/slow based on below : http://www.squid-cache.org/Doc/config/reply_header_add/ and

Re: [squid-users] tcp_outgoing_address acl based on - incoming header Flag

2019-07-15 Thread --Ahmad--
Hi Alex Thank you very much . i ask is it possible we have it as variable ? and tcp_outgoing_address to match acl as variable header from incoming packs ? > On 15 Jul 2019, at 22:00, Alex Rousskov > wrote: > > acl requestsWithStartEqual1p1p1p1 req_header Start ^1[.]1[.]1[.]1$ > ... >

[squid-users] tcp_outgoing_address acl based on - incoming header Flag

2019-07-15 Thread --Ahmad--
Hello Team . i want to ask how can i adapt external ip address in squid based on incoming requests . say i have squid with ips : 1.1.1.1 2.2.2.2 3.3.3.3 ## a client with src ip 192.168.1.200 will connect to squid port 3128 . client will initiate a header called start with

Re: [squid-users] allowing headers per ip and block headers on others

2019-07-13 Thread --Ahmad--
i want it when squid access / contact with 1.2.3.4 Thanks > On 13 Jul 2019, at 12:36, Matus UHLAR - fantomas wrote: > > when accessing 1.2.3.4 or whn your client is 1.2.3.4? ___ squid-users mailing list squid-users@lists.squid-cache.org

[squid-users] allowing headers per ip and block headers on others

2019-07-13 Thread --Ahmad--
hello folks . say i have a set of rules to block some certain types of headers as below : header_access Pragma deny all header_access Keep-Alive deny all but i want those above two headers allowed when accessing ip 1.2.3.4 is my config below is correct ? i tested but didn’t work acl

Re: [squid-users] Useragent request/reply headers with squid .

2019-06-15 Thread --Ahmad--
ok if my question is not suitable or dangerous …. i do apologise . i will try to google it myself . Thank you for your time . > On 15 Jun 2019, at 12:41, Antony Stone > wrote: > > On Saturday 15 June 2019 at 11:37:29, --Ahmad-- wrote: > >> Guys im just tryi

Re: [squid-users] Useragent request/reply headers with squid .

2019-06-15 Thread --Ahmad--
ote: > > On 15.06.2019 10:57, --Ahmad-- wrote: >> >> Hello Folks , >> >> im trying to disable user agent info to be leaked out of squid using : >> >> request_header_access User-Agent deny all >> reply _header_access User-Agent deny all >> >> squ

[squid-users] Useragent request/reply headers with squid .

2019-06-15 Thread --Ahmad--
Hello Folks , im trying to disable user agent info to be leaked out of squid using : request_header_access User-Agent deny all reply _header_access User-Agent deny all squid very 3.5.x but when i test sending the user agent info via curl info it seems squid is not removing it and passing it

Re: [squid-users] High response times with Squid

2019-02-14 Thread Ahmad, Sarfaraz
Thanks for all the pointers :) I figured it out. Seamless.com's PTR lookups are slow and end up in SERVFAIL. And that was causing the delay here. I purged that ACL and it's all good. -Original Message- From: Amos Jeffries Sent: Friday, February 15, 2019 9:24 AM To: Ahmad, Sarfaraz

Re: [squid-users] High response times with Squid

2019-02-14 Thread Ahmad, Sarfaraz
TR lookups are causing the delay here. I don't see a configuration directive with which I can configure how many times Squid retries the lookup. I see one that sets the timeout though (dns_timeout defaults 30 seconds). Could you guys give me some pointers on what could be happening here ? Rega

Re: [squid-users] Problem rtmp traffic through Squid

2019-02-13 Thread Ahmad, Sarfaraz
Did you add them to "safe_ports" acl ? ( assuming you have one ) Look here some more inputs, http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-conf-blocking-live-video-stream-td4680866.html From: squid-users On Behalf Of ? ?? Sent: Wednesday, February 13, 2019

[squid-users] High response times with Squid

2019-02-07 Thread Ahmad, Sarfaraz
quickly as is expected. Any thoughts on where to look ? other bits and pieces I could check ? I have jumbo frames enabled (9000 bytes) but am running the proxies at L2 1500 MTU. -Ahmad ___ squid-users mailing list squid-users@lists.squid-cache.org

[squid-users] Why does Squid4 do socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = -1 EACCES (Permission denied) ?

2018-11-30 Thread Ahmad, Sarfaraz
I think almost every time squid opens a TCP connection, It also tried to open a raw socket of type AF_NETLINK. Syscall pasted below. All that I can make sense of this is that Squid is trying to engage with iptables subsystem somehow ? I have SELinux enforcing and would like to know what Squid is

Re: [squid-users] want to change squid name

2018-10-03 Thread --Ahmad--
Dear Amos thats not correct at all . i no longer need help on my question . i apologise if i make any disturbance . Thank you all guys . > On 3 Oct 2018, at 21:12, Amos Jeffries wrote: > > Lets be blunt then ... > > Most of the things I see you asking about are ways to make the Squid >

Re: [squid-users] want to change squid name

2018-10-03 Thread --Ahmad--
Guys i apologise if im making any disturbance . consider this question answered . thank you all for your time . > On 3 Oct 2018, at 19:37, Amos Jeffries wrote: > > On 4/10/18 4:07 AM, --Ahmad-- wrote: >> @Amos >> >> can you help me ? >> > > >

Re: [squid-users] want to change squid name

2018-10-03 Thread --Ahmad--
i just want to have my own copy that i can run under my name i put thats all > On 3 Oct 2018, at 19:37, Amos Jeffries wrote: > > On 4/10/18 4:07 AM, --Ahmad-- wrote: >> @Amos >> >> can you help me ? >> > > > @Ahmed, can you ask r

Re: [squid-users] want to change squid name

2018-10-03 Thread --Ahmad--
@Amos can you help me ? Thanks > On 2 Oct 2018, at 10:40, Amos Jeffries wrote: > > On 2/10/18 7:02 PM, Alex Crow wrote: >> What about this? >> >> http://www.squid-cache.org/Doc/config/via/ >> > > Irrelevant? > > Amos > ___ > squid-users mailing

Re: [squid-users] want to change squid name

2018-10-01 Thread --Ahmad--
@ Atenciosamente im not forcing you to give us help , BTW thank you for your magic words ! > On 1 Oct 2018, at 23:08, Leonardo Rodrigues wrote: > > Em 01/10/18 10:08, --Ahmad-- escreveu: >> i just need to have something not squid to run it on linux >>

Re: [squid-users] want to change squid name

2018-10-01 Thread --Ahmad--
no problem at all antony just want to try something new . thats all > On 1 Oct 2018, at 16:52, Antony Stone > wrote: > > On Monday 01 October 2018 at 15:08:37, --Ahmad-- wrote: > >> i just need to have something not squid to run it on linux >> >>

Re: [squid-users] want to change squid name

2018-10-01 Thread --Ahmad--
i just need to have something not squid to run it on linux i dont want squid i want identical thing to all stuff want to use other word than squid in footprints and config files can you help ? > On 1 Oct 2018, at 1:50, Alex Rousskov > wrote: > > On 09/30/2018 12:55 PM, --A

[squid-users] want to change squid name

2018-09-30 Thread --Ahmad--
Hey Folks my question may be crazy a little bit . i want to change everything in squid config files and rename it to ahmad. so i want change eveverythingeytng in folders , files from squid to —> stinger and have stinger conf files and run instance as stinger instead of squid . s

Re: [squid-users] Squid fails to bump where there are too many DNS names in SAN field

2018-09-05 Thread Ahmad, Sarfaraz
Tested with Squid-4.2 and ended with same results. How do we proceed here ? -Original Message- From: Alex Rousskov Sent: Tuesday, September 4, 2018 9:14 PM To: Ahmad, Sarfaraz ; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Squid fails to bump where there are too many

Re: [squid-users] Squid fails to bump where there are too many DNS names in SAN field

2018-09-04 Thread Ahmad, Sarfaraz
Forgot to mention, this is with Squid-4.0.24. -Original Message- From: Ahmad, Sarfaraz Sent: Tuesday, September 4, 2018 1:04 PM To: 'Amos Jeffries' ; squid-users@lists.squid-cache.org Cc: 'rouss...@measurement-factory.com' Subject: RE: [squid-users] Squid fails to bump where

Re: [squid-users] Squid fails to bump where there are too many DNS names in SAN field

2018-09-04 Thread Ahmad, Sarfaraz
018 01:34 AM, Ahmad, Sarfaraz wrote: > >> interception/MITM appears to fail where remote certificates from >> origin servers have way too many dnsnames in the SAN field. >> >> I have noticed this behavior with at least these 2 websites. In both >> the cases, my setup

[squid-users] Squid fails to bump where there are too many DNS names in SAN field

2018-09-03 Thread Ahmad, Sarfaraz
Hi, I am using Squid in an interception role with WCCP. I am peeking at Step1 to read the SNI and determining whether to splice or bump. That interception/MITM appears to fail where remote certificates from origin servers have way too many dnsnames in the SAN field. I have noticed this behavior

[squid-users] internet squid with https and just for domain resolution not for caching or so

2018-08-31 Thread --Ahmad--
Dear Folks . i ask here if i wan to enable squid into intercpt/transparent or transparent TCP_connect i dont want to decrypt the message all what i need say client requested google.com i can from router to send the packet to the proxy server via PBR or so and all what

[squid-users] tcp_miss_aborted driving me crazy !

2018-08-21 Thread --Ahmad--
Hello Folks : i have frequent Down on website that using it for IPV6 outgoing addresses : below logs as you see , some have TCP_Miss and some have problems as TCP_MISS_ABORTED . the TCP_MISS_ABORTED seems down request and i dont know whats the wrong there as long i see the name is resolved of

Re: [squid-users] Squid returns NONE_ABORTED/000 and high response time but the internet access itself looks okay

2018-08-07 Thread Ahmad, Sarfaraz
Original Message- From: Amos Jeffries Sent: Tuesday, August 7, 2018 9:04 PM To: Ahmad, Sarfaraz ; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Squid returns NONE_ABORTED/000 and high response time but the internet access itself looks okay On 08/08/18 02:14, Ahmad, Sarfara

Re: [squid-users] Squid returns NONE_ABORTED/000 and high response time but the internet access itself looks okay

2018-08-07 Thread Ahmad, Sarfaraz
@lists.squid-cache.org Subject: Re: [squid-users] Squid returns NONE_ABORTED/000 and high response time but the internet access itself looks okay On 07/08/18 21:55, Ahmad, Sarfaraz wrote: > Hi, > >   > > I am WCCPv2 for redirecting traffic to Squid. > Squid version? >

[squid-users] Squid returns NONE_ABORTED/000 and high response time but the internet access itself looks okay

2018-08-07 Thread Ahmad, Sarfaraz
Hi, I am WCCPv2 for redirecting traffic to Squid. Intermittently I see these messages in access.log and the internet for clients goes away. 1533612202.312 79102 NONE_ABORTED/000 0 CONNECT 198.22.156.64:443 - HIER_NONE/- - 1533612202.312 82632 NONE_ABORTED/000 0 CONNECT 173.194.142.186:443

  1   2   3   4   5   6   >