<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Candara;
panose-1:2 14 5 2 3 3 3 2 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:768354370;
mso-list-type:hybrid;
mso-list-template-ids:-1347621530 503491742 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-start-at:0;
mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;
mso-fareast-font-family:Calibri;
mso-bidi-font-family:Arial;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink="#954F72"><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'>Hey Dixit is it your first name?,<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>I want to help you but you are jumping between subjects and issues over and over again.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Try to open a single thread for a subject and follow it.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>You are missing details on the clients.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Clients can vary from PC to MOBILE etc..<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>To clear out any doubts about the setup more details are required if you want any public help.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>I can try to help you specifically with installation level issues.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>The topics you are writing about are a more advanced topic rather then basic..<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Did you had any chance reading the next docs:<o:p></o:p></span></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo1'><![if !supportLists]><span style='font-family:Symbol;color:#1F497D'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span dir=LTR></span><span style='color:#1F497D'><a href="https://stackoverflow.com/questions/30057104/squid-ssl-bump-3-5-4-error-error-negotiating-ssl-connection-on-fd-10-success">https://stackoverflow.com/questions/30057104/squid-ssl-bump-3-5-4-error-error-negotiating-ssl-connection-on-fd-10-success</a><o:p></o:p></span></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo1'><![if !supportLists]><span style='font-family:Symbol;color:#1F497D'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span dir=LTR></span><span style='color:#1F497D'><a href="http://squid-web-proxy-cache.1019090.n4.nabble.com/Error-negotiating-SSL-connection-on-FD-12-Success-td4671090.html">http://squid-web-proxy-cache.1019090.n4.nabble.com/Error-negotiating-SSL-connection-on-FD-12-Success-td4671090.html</a><o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>I want to help you but it’s not always so simple.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Take into account that some servers/websites use different versions of TLS/SSL and Squid 4 is not compatible with all of them.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>What version of OpenSSL do you have installed on your OS?<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>yum list installed<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>might give you the right answer.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Also, if you have specific clients which are having issues try to get the relevant details on their software and device.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>I cannot do this work for you but can try to help you based on what you might send the public list.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Eliezer<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>----<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Eliezer Croitoru<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Tech Support<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Mobile: +972-5-28704261<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Email: <a href="mailto:ngtech1ltd@gmail.com">ngtech1ltd@gmail.com</a><o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> DIXIT Ankit [mailto:Ankit.Dixit@eurostar.com] <br><b>Sent:</b> Tuesday, June 30, 2020 12:25 PM<br><b>To:</b> Eliezer Croitoru; Squid Users<br><b>Cc:</b> SETHI Konica<br><b>Subject:</b> RE: [squid-users] Squid memory consumption problem<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Eliezer,<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Clients are facing some SSL related issues after upgrade. I could see below error. Please suggest, its little urgent.<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal><span style='font-size:10.5pt;font-family:"Segoe UI","sans-serif"'>quid[6706]: Error negotiating SSL connection on FD 167: error:00000001:lib(0):func(0):reason(1) (1/0)<br>Jun 30 09:17:38 squid[6706]: Error parsing SSL Server Hello Message on FD 77<br>Jun 30 09:17:38 squid[6706]: Error negotiating SSL connection on FD 75: error:00000001:lib(0):func(0):reason(1) (1/0)</span><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><div><p class=MsoNormal style='text-autospace:none'><b><span style='color:#1F497D'>Regards,</span></b><o:p></o:p></p><p class=MsoNormal style='text-autospace:none'><b><span style='color:#1F497D'>Ankit Dixit|IS Cloud Team</span></b><o:p></o:p></p><p class=MsoNormal style='text-autospace:none'><b><span style='font-family:"Candara","sans-serif";color:#7F7F7F'>Eurostar International Ltd</span></b><o:p></o:p></p><p class=MsoNormal><b><span style='font-family:"Candara","sans-serif";color:#7F7F7F'>Times House | Bravingtons Walk | </span><span style='color:#7F7F7F'>London N1 9AW</span></b><o:p></o:p></p><p class=MsoNormal style='text-autospace:none'><b><span lang=FR style='color:#7F7F7F'>Office: +44 (0)207 84 35550 (Extension– 35530)</span></b><o:p></o:p></p></div><p class=MsoNormal> <o:p></o:p></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> Eliezer Croitoru <ngtech1ltd@gmail.com> <br><b>Sent:</b> Tuesday, June 30, 2020 9:10 AM<br><b>To:</b> Squid Users <squid-users@lists.squid-cache.org>; DIXIT Ankit <Ankit.Dixit@eurostar.com><br><b>Subject:</b> RE: [squid-users] Squid memory consumption problem<o:p></o:p></p></div></div><p class=MsoNormal> <o:p></o:p></p><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0><tr><td style='padding:0in 0in 0in 0in'><p class=MsoNormal><img border=0 width=600 height=25 id="Picture_x0020_1" src="cid:image001.jpg@01D64EE2.11784B40"><o:p></o:p></p></td></tr></table><p class=MsoNormal style='margin-bottom:12.0pt'> <o:p></o:p></p><p class=MsoNormal>The first thing to do is look at:<o:p></o:p></p><p class=MsoNormal><a href="https://wiki.squid-cache.org/KnowledgeBase/HostHeaderForgery">https://wiki.squid-cache.org/KnowledgeBase/HostHeaderForgery</a><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>It should clear couple doubts for you.<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Eliezer<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>----<o:p></o:p></p><p class=MsoNormal>Eliezer Croitoru<o:p></o:p></p><p class=MsoNormal>Tech Support<o:p></o:p></p><p class=MsoNormal>Mobile: +972-5-28704261<o:p></o:p></p><p class=MsoNormal>Email: <a href="mailto:ngtech1ltd@gmail.com">ngtech1ltd@gmail.com</a><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From: </b><a href="mailto:Ankit.Dixit@eurostar.com">DIXIT Ankit</a><br><b>Sent: </b>Tuesday, June 30, 2020 10:46 AM<br><b>To: </b><a href="mailto:ngtech1ltd@gmail.com">Eliezer Croitoru</a>; <a href="mailto:rousskov@measurement-factory.com">Alex Rousskov</a>; <a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br><b>Subject: </b>RE: [squid-users] Squid memory consumption problem<o:p></o:p></p></div><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Elizer,<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>We installed Squid 4.12 on production server, amazon Linux 2, successfully but I could see below messages in the logs for SECURITY ALERT: Host header forgery detected. These are getting generated very frequently.<o:p></o:p></p><p class=MsoNormal>Can we ignore this Or is it advised to suppress these alerts?<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal><span style='background:yellow;mso-highlight:yellow'>kid2| SECURITY ALERT: on URL: <a href="http://5-25-3-app.agent.datadoghq.com:443">5-25-3-app.agent.datadoghq.com:443</a></span><o:p></o:p></p><p class=MsoNormal><span style='background:yellow;mso-highlight:yellow'>2020/06/30 07:41:29 kid1| SECURITY ALERT: Host header forgery detected on local=IP remote=IP FD 97 flags=33 (local IP does not match any domain IP)</span><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><div><p class=MsoNormal style='text-autospace:none'><b><span style='color:#1F497D'>Regards,</span></b><o:p></o:p></p><p class=MsoNormal style='text-autospace:none'><b><span style='color:#1F497D'>Ankit Dixit|IS Cloud Team</span></b><o:p></o:p></p><p class=MsoNormal style='text-autospace:none'><b><span style='font-family:"Candara","sans-serif";color:#7F7F7F'>Eurostar International Ltd</span></b><o:p></o:p></p><p class=MsoNormal><b><span style='font-family:"Candara","sans-serif";color:#7F7F7F'>Times House | Bravingtons Walk | </span><span style='color:#7F7F7F'>London N1 9AW</span></b><o:p></o:p></p><p class=MsoNormal style='text-autospace:none'><b><span lang=FR style='color:#7F7F7F'>Office: +44 (0)207 84 35550 (Extension– 35530)</span></b><o:p></o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'> <o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><div class=MsoNormal align=center style='text-align:center'><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><hr size=2 width="100%" align=center></span></div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>This email (including any attachments) is intended only for the addressee(s), is confidential and may be legally privileged. If you are not the intended recipient, do not use, disclose, copy, or forward this email. Please notify the sender immediately and then delete it. Eurostar International Limited and its affiliates ("EIL") do not accept any liability for action taken in reliance on this email. EIL makes no representation that this email is free of viruses and addressees should check this email for viruses. The comments or statements expressed in this email are not necessarily those of EIL. <br><br>Eurostar International Ltd <br>Times House, Bravingtons Walk, London N1 9AW Registered in England and Wales No. 2462001 <o:p></o:p></span></p><div class=MsoNormal align=center style='text-align:center'><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><hr size=2 width="100%" align=center></span></div></div></body></html>