<div dir="ltr">I would love to use another tool, however can your tools do ssl_bumping aka filtering of HTTPS traffic WITHOUT putting a cert on the client side? This is the only way I've been able to come up with to do both HTTPS and HTTP Content Filtering using squid. <div><br></div><div>Thanks for all advice:)</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Feb 9, 2016 at 3:50 PM, Rafael Akchurin <span dir="ltr"><<a href="mailto:rafael.akchurin@diladele.com" target="_blank">rafael.akchurin@diladele.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Hello Panda Admin,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">If you do not mind looking at ICAP filtering instead of only URL filtering please take a look at our qlproxy (ICAP web filter for Squid).<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">The shalla list formatted folders with categories can be used as is as third party blacklist provider and I presume takes less time to process upon start.
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Please note we currently do not support regexes in the list of domain names.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Best regards,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Rafael<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> squid-users [mailto:<a href="mailto:squid-users-bounces@lists.squid-cache.org" target="_blank">squid-users-bounces@lists.squid-cache.org</a>]
<b>On Behalf Of </b>Panda Admin<br>
<b>Sent:</b> Tuesday, February 9, 2016 5:01 PM<br>
<b>To:</b> Kinkie <<a href="mailto:gkinkie@gmail.com" target="_blank">gkinkie@gmail.com</a>><br>
<b>Cc:</b> <a href="mailto:squid-users@squid-cache.org" target="_blank">squid-users@squid-cache.org</a><br>
<b>Subject:</b> Re: [squid-users] Squid Crashing<u></u><u></u></span></p><div><div class="h5">
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">I see that, but that's not possible. I still have system memory available.<u></u><u></u></p>
<div>
<p class="MsoNormal">I just did a top while running squid, never went over 30% memory usage. It maxed out the CPU but not the memory. So, yeah...still confused.<u></u><u></u></p>
</div>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">On Tue, Feb 9, 2016 at 10:55 AM, Kinkie <<a href="mailto:gkinkie@gmail.com" target="_blank">gkinkie@gmail.com</a>> wrote:<u></u><u></u></p>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<p class="MsoNormal">Hi,<br>
it's all in the logs you posted:<br>
<br>
ipcCreate: fork: (12) Cannot allocate memory<br>
WARNING: Cannot run '/lib/squid3/ssl_crtd' process.<br>
...<br>
FATAL: Failed to create unlinkd subprocess<br>
<br>
You've run of system memory during startup.<u></u><u></u></p>
<div>
<div>
<p class="MsoNormal"><br>
<br>
On Tue, Feb 9, 2016 at 4:47 PM, Panda Admin <<a href="mailto:pandanonomous@gmail.com" target="_blank">pandanonomous@gmail.com</a>> wrote:<br>
> Hello,<br>
><br>
> I am running squid 3.5.13 and it crashes with these errors:<br>
><br>
> 2016/02/09 15:43:24 kid1| Set Current Directory to /var/spool/squid3<br>
> 2016/02/09 15:43:24 kid1| Starting Squid Cache version 3.5.13 for<br>
> x86_64-pc-linux-gnu...<br>
> 2016/02/09 15:43:24 kid1| Service Name: squid<br>
> 2016/02/09 15:43:24 kid1| Process ID 7279<br>
> 2016/02/09 15:43:24 kid1| Process Roles: worker<br>
> 2016/02/09 15:43:24 kid1| With 1024 file descriptors available<br>
> 2016/02/09 15:43:24 kid1| Initializing IP Cache...<br>
> 2016/02/09 15:43:24 kid1| DNS Socket created at [::], FD 6<br>
> 2016/02/09 15:43:24 kid1| DNS Socket created at 0.0.0.0, FD 7<br>
> 2016/02/09 15:43:24 kid1| Adding nameserver 10.31.2.78 from /etc/resolv.conf<br>
> 2016/02/09 15:43:24 kid1| Adding nameserver 10.31.2.79 from /etc/resolv.conf<br>
> 2016/02/09 15:43:24 kid1| Adding domain <a href="http://nuspire.com" target="_blank">
nuspire.com</a> from /etc/resolv.conf<br>
> 2016/02/09 15:43:24 kid1| helperOpenServers: Starting 5/10 'ssl_crtd'<br>
> processes<br>
> 2016/02/09 15:43:24 kid1| ipcCreate: fork: (12) Cannot allocate memory<br>
> 2016/02/09 15:43:24 kid1| WARNING: Cannot run '/lib/squid3/ssl_crtd'<br>
> process.<br>
> 2016/02/09 15:43:24 kid1| ipcCreate: fork: (12) Cannot allocate memory<br>
> 2016/02/09 15:43:24 kid1| WARNING: Cannot run '/lib/squid3/ssl_crtd'<br>
> process.<br>
> 2016/02/09 15:43:24 kid1| ipcCreate: fork: (12) Cannot allocate memory<br>
> 2016/02/09 15:43:24 kid1| WARNING: Cannot run '/lib/squid3/ssl_crtd'<br>
> process.<br>
> 2016/02/09 15:43:24 kid1| ipcCreate: fork: (12) Cannot allocate memory<br>
> 2016/02/09 15:43:24 kid1| WARNING: Cannot run '/lib/squid3/ssl_crtd'<br>
> process.<br>
> 2016/02/09 15:43:24 kid1| ipcCreate: fork: (12) Cannot allocate memory<br>
> 2016/02/09 15:43:24 kid1| WARNING: Cannot run '/lib/squid3/ssl_crtd'<br>
> process.<br>
> 2016/02/09 15:43:24 kid1| helperOpenServers: Starting 0/15 'squidGuard'<br>
> processes<br>
> 2016/02/09 15:43:24 kid1| helperOpenServers: No 'squidGuard' processes<br>
> needed.<br>
> 2016/02/09 15:43:24 kid1| Logfile: opening log syslog:<a href="http://local5.info" target="_blank">local5.info</a><br>
> 2016/02/09 15:43:24 kid1| ipcCreate: fork: (12) Cannot allocate memory<br>
> FATAL: Failed to create unlinkd subprocess<br>
> Squid Cache (Version 3.5.13): Terminated abnormally.<br>
> CPU Usage: 20.041 seconds = 19.115 user + 0.926 sys<br>
> Maximum Resident Size: 4019840 KB<br>
> Page faults with physical i/o: 0<br>
><br>
><br>
> Anybody have an idea why?<br>
><u></u><u></u></p>
</div>
</div>
<p class="MsoNormal">> _______________________________________________<br>
> squid-users mailing list<br>
> <a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br>
> <a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
><br>
<span style="color:#888888"><br>
<br>
<br>
<span>--</span><br>
<span> Francesco</span></span><u></u><u></u></p>
</blockquote>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div></div></div>
</div>
</blockquote></div><br></div>